last executing test programs:

14m36.681137521s ago: executing program 0 (id=693):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a0006"], 0x84}}, 0x20008040)

14m36.425072127s ago: executing program 0 (id=696):
syz_mount_image$minix(&(0x7f0000000680), &(0x7f00000001c0)='./bus\x00', 0x1804007, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="9d3d4bda3c896fb83e95832b9eda1cadb2c41bc16a4d4f42c2cc66237e6d9817ba37bd7346de39fa0598f5e734c041503cc4d969812551a4a42c", @ANYRESOCT=0x0, @ANYBLOB="8e7bf099b50610f9b90386fcc85cf65dc7e4309c76698d025637fd42cd2c1d9378e6212cfe715e5d3f5cfa60dad844a8ad9992f586604853e9352ec7277d8514b9150dcef6"], 0x1, 0x1af, &(0x7f0000000480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)

14m36.168018124s ago: executing program 0 (id=698):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x4b44, 0x10000000000004)

14m35.814924773s ago: executing program 0 (id=703):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)

14m35.14182681s ago: executing program 0 (id=706):
r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}})

14m34.37373739s ago: executing program 0 (id=711):
r0 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f000000a900)={'sit0\x00', &(0x7f000000a880)={'tunl0\x00', 0x0, 0x80, 0x0, 0x4, 0x8001, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x64, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0x3, 0xff}]}}}}})

14m33.747657675s ago: executing program 32 (id=711):
r0 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f000000a900)={'sit0\x00', &(0x7f000000a880)={'tunl0\x00', 0x0, 0x80, 0x0, 0x4, 0x8001, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x64, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0x3, 0xff}]}}}}})

2m18.621886662s ago: executing program 2 (id=7132):
sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0xc040)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000040)=ANY=[])

2m18.329936059s ago: executing program 2 (id=7134):
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000412000/0x2000)=nil)
setuid(0xee01)
shmctl$IPC_RMID(r0, 0x0)

2m17.993804679s ago: executing program 2 (id=7137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r1, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8ffff050029001c"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

2m17.585623569s ago: executing program 2 (id=7138):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0)

2m16.927370816s ago: executing program 2 (id=7143):
r0 = socket$xdp(0x2c, 0x3, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60)

2m15.950637462s ago: executing program 2 (id=7150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x14, 0x1, 0x3, 0x401}, 0x14}}, 0x0)

2m14.748109374s ago: executing program 33 (id=7150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x14, 0x1, 0x3, 0x401}, 0x14}}, 0x0)

7.685199117s ago: executing program 3 (id=7867):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'connbytes\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0)

7.56689326s ago: executing program 5 (id=7869):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1, 0x0, 0xafff})

7.321027796s ago: executing program 5 (id=7870):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d01000000e1e478c6100000000000900700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x20, 0x2615908baa74e3a7, 0x1, '@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.058894633s ago: executing program 3 (id=7873):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0xfffffffe, 0x4)

6.596034286s ago: executing program 3 (id=7875):
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3)

6.231509815s ago: executing program 3 (id=7876):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)

5.056962316s ago: executing program 1 (id=7882):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

4.836134682s ago: executing program 5 (id=7885):
syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000002640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000980)=ANY=[], 0x47, 0xc32, &(0x7f0000002740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x143041, 0x31)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x4)

4.377323514s ago: executing program 5 (id=7887):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fdatasync(r0)

4.294982196s ago: executing program 1 (id=7888):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x1, 0x0, 0x20, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @local, {[@rr={0x7, 0x3, 0x2}]}}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

4.007339424s ago: executing program 3 (id=7890):
syz_mount_image$f2fs(&(0x7f00000068c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x1, 0x5539, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)

3.147163056s ago: executing program 5 (id=7891):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x5541, &(0x7f0000007a00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x11c)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000080)={0x3, 0x1, 0x1, 0x6})

3.123806077s ago: executing program 1 (id=7893):
r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
fallocate(r0, 0x0, 0x200006, 0x7)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000c, 0x13, r0, 0x0)

2.63862929s ago: executing program 1 (id=7894):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003500)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4005, @loopback, 0x280021}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b80)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000003000)=[{&(0x7f0000002bc0)="3d02", 0x2}], 0x1}}], 0x2, 0x2200c950)

2.63466014s ago: executing program 4 (id=7902):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, 0x14, 0x519, 0x70bd2a, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e480d"}]}, 0x24}}, 0x48000)

2.428810915s ago: executing program 1 (id=7895):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x52, 0x8, 0x0, {0xfffe, 0x1}, {0x4b, 0x2}, @cond=[{0x0, 0x20c8, 0x20, 0x6, 0xaf}, {0x7ffe, 0x11, 0x1, 0x10, 0x5, 0xfaa}]})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

2.143454003s ago: executing program 1 (id=7896):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='blkio.bfq.empty_time\x00', &(0x7f0000000140)='workdir'})

2.142523693s ago: executing program 4 (id=7905):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000180)="0b41be39", 0x4)
setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29)

1.007244843s ago: executing program 3 (id=7897):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="80fd05000000", 0x6}], 0x1, 0x0, 0x0)

1.005952973s ago: executing program 4 (id=7898):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca)
sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4)

697.927731ms ago: executing program 5 (id=7899):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@noacl}, {@nodatasum}, {@nodatasum}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x35, 0x65, 0x65]}}]}, 0x3, 0x510e, &(0x7f000000a240)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

696.926881ms ago: executing program 4 (id=7909):
r0 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x80, 0x3})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1)

420.067888ms ago: executing program 4 (id=7900):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file2\x00', 0x3000000, &(0x7f0000000840)={[{@block={'block', 0x3d, 0x800}}, {@nocompress}, {@cruft}, {@unhide}, {@dmode={'dmode', 0x3d, 0x4}}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}], [{@uid_eq}]}, 0x2, 0x3ec, &(0x7f0000000440)="$eJzs3E1vG0UYwPHZ1EYhSBVSRZOmOUwph3Cou7shjqyelvXYmXa9u5pZV8kJVSSpIpKCaJFoLiiXAhJ8iF75EHyjCr5B0L645MWJQ17qUP1/UjVj7zMzz2ytGdnRrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMIJ267rOSLScX9FHi9sm6R3wvVBf58eKE4YVwgn/ycmJ8VM+dbMjX8vf1J2Ml2+mhaTeTEpdj66+fGDG7WJQfsTEnonnr/c+ebJ1tb696eKrsva33uFS0/sHemqWNtE94KuktomstVsuveXO1Z2dKTsqs1UT4ZGBVli5Hz4ufRarQWpGqtJP+62g0gN3ly657tuUz5spCowNonvP2zYcFlHkY67RUx+OY9Zyj+Ij3QmMxX0pNzY3FpfGJVkHuSNDso/YiOCfNf3Pc/3veZia3HJdWu+68sDb7iHiCNNxv+hxXhd8AoOnN1etf8DAAAAAID3l1P8xp5//68Xv8M7oqMj5Y47LQAAAAAAcIGKv/xP50U9r80Ih+//AAAAAAC8b37Zf8buw2Fn7Gy6If78SxhTd3bTlc+c7SAPD7ZFrWh37XCPWWfWuV51UhTNWvUqVHPOrTLo1iD6TVVsjDrr5xxJoBr5cALlCbu9n4YkIH4Ts2XQ7FpZrg2ulKNMdXSkGmESPfBEEFyfyNRK9sOzzR9FMf1f4951R2xsbq03vv52a63IZTfvZXe7OkBx5BzF8TdDvHh77nH4jOvFDzHVuFPluO7++U+UzSf+w5ivxO0y5vZUWU4dnP9kPqbXOG72VRbeOWf+SsyVMXPzd/Pi7vyQLPxRWfj7szjTvThFFgujslg4ZxYAMC4bI3Yh5+jGf4ZV7uJ295NX9DtlzJ3ZYmGtzQ5Z0d1RK7p7zt3tjyPPQDhuj83H/f3Qrvo6b/D62HFt5Dv5Lbz2Yvs7cfP5y517m9tPnq4/XX/m+wtN9wvXXfRFvZhGVbD3AACGUOaNM5X97Bij06+8VssLsmUlTRI+kka3u0rqOFMmXA7irpKpSbIkTKK88li3lZW2n6aJyWQnMTJNrF4pnvwiq0e/WNUL4kyHNo1UYJUMkzgLwky2tQ1l2v8y0nZZmaKxTVWoOzoMMp3E0iZ9E6qGlFapfYG6reJMd3RejWVqdC8wq/JxEvV7SraVDY1Os6TscDCWjjuJ6RXdNsZ9swEAuCLePsHu9JV61fTUrcY8RQAAcAi7NAAAAAAAAAAAAAAAAAAAAAAAV98Zzv+NueIIIa5AGv/zCvfwClY+OOt/yt4l5DPulQnAZfsnAAD//0VpqI0=")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

0s ago: executing program 4 (id=7901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x48040)

kernel console output (not intermixed with test programs):

20923] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20002
[  862.516124][T20933] IPv6: NLM_F_CREATE should be specified when creating new route
[  862.886088][T20945] netlink: 'syz.4.6832': attribute type 1 has an invalid length.
[  862.942374][T20945] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6832'.
[  863.863468][T20967] comedi comedi2: dac02: I/O port conflict (0x81,8)
[  863.971507][T20971] loop3: detected capacity change from 0 to 512
[  864.350150][T20978] loop1: detected capacity change from 0 to 64
[  864.644958][T20983] cgroup: Bad value for 'name'
[  865.034305][T20990] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6852'.
[  865.725479][T21003] loop2: detected capacity change from 0 to 136
[  866.128176][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6862'.
[  866.479741][   T28] kauditd_printk_skb: 58 callbacks suppressed
[  866.479757][   T28] audit: type=1326 audit(2000000115.270:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.3.6865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  866.577447][   T28] audit: type=1326 audit(2000000115.300:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.3.6865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  866.731068][   T28] audit: type=1326 audit(2000000115.330:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.3.6865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  866.759263][T20993] loop4: detected capacity change from 0 to 32768
[  866.790147][   T28] audit: type=1326 audit(2000000115.330:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.3.6865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  866.884348][T20993] 
[  866.884348][T20993]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  866.884348][T20993] 
[  866.919605][   T28] audit: type=1326 audit(2000000115.330:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.3.6865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  867.085441][T20993] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  867.085441][T20993] 
[  867.192674][T21027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6870'.
[  867.251661][T20993] ERROR: (device loop4): remounting filesystem as read-only
[  867.253078][T21027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6870'.
[  867.293652][T20993] ERROR: (device loop4): jfs_unlink: 
[  867.293652][T20993] 
[  867.516569][ T7373] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt
[  867.516569][ T7373] 
[  867.533094][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6873'.
[  867.683920][T21035] netlink: 'syz.4.6875': attribute type 2 has an invalid length.
[  867.883427][T21039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6877'.
[  868.503098][ T5813] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  868.738866][ T5813] usb 4-1: config index 0 descriptor too short (expected 1572, got 36)
[  868.776611][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  868.803549][T21062] loop4: detected capacity change from 0 to 256
[  868.826823][ T5813] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  868.846300][T21062] exfat: Deprecated parameter 'utf8'
[  868.890593][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.927255][T21062] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[  868.944979][ T5813] usb 4-1: Product: syz
[  868.949206][ T5813] usb 4-1: Manufacturer: syz
[  868.989183][ T5813] usb 4-1: SerialNumber: syz
[  869.101053][ T5813] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input28
[  869.285721][ T5123] bcm5974 4-1:1.0: could not read from device
[  869.351317][ T5123] bcm5974 4-1:1.0: could not read from device
[  869.397782][ T5813] bcm5974 4-1:1.0: could not read from device
[  869.537784][ T5813] input: failed to attach handler mousedev to device input28, error: -5
[  869.578192][ T5123] bcm5974 4-1:1.0: could not read from device
[  869.615360][ T5813] usb 4-1: USB disconnect, device number 42
[  870.094955][T21082] netlink: 460 bytes leftover after parsing attributes in process `syz.2.6898'.
[  870.296469][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  870.643165][T21095] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  870.740544][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6906'.
[  870.788810][T21097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6906'.
[  870.847328][T21097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6906'.
[  871.122718][T21105] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6910'.
[  871.255144][T21103] loop4: detected capacity change from 0 to 4096
[  871.462995][ T5813] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  871.674676][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  871.733359][ T5813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  871.778796][ T5813] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  871.803073][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.832163][T21117] xt_TCPMSS: Only works on TCP SYN packets
[  871.849860][ T5813] usb 4-1: Product: syz
[  871.871909][ T5813] usb 4-1: Manufacturer: syz
[  871.892940][ T5813] usb 4-1: SerialNumber: syz
[  872.155035][ T5813] usb 4-1: unit 4 not found!
[  872.265848][ T5813] usb 4-1: USB disconnect, device number 43
[  872.348088][T10808] udevd[10808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  872.403188][T21127] xt_cgroup: xt_cgroup: no path or classid specified
[  872.725992][T21135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6925'.
[  873.490768][T21148] loop2: detected capacity change from 0 to 4096
[  873.652340][T21148] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  873.689354][    T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  873.910633][    T8] usb 5-1: Using ep0 maxpacket: 8
[  873.926226][    T8] usb 5-1: config index 0 descriptor too short (expected 26, got 18)
[  873.950751][    T8] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  873.981445][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.020769][    T8] usb 5-1: Product: syz
[  874.025435][    T8] usb 5-1: Manufacturer: syz
[  874.030163][    T8] usb 5-1: SerialNumber: syz
[  874.083775][    T8] usb 5-1: config 0 descriptor??
[  874.115565][    T8] gspca_main: sq930x-2.14.0 probing 2770:930c
[  874.534534][    T8] gspca_sq930x: ucbus_write failed -71
[  874.599760][T21170] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6942'.
[  874.807257][    T8] gspca_sq930x: Sensor ov9630 not yet treated
[  874.843014][    T8] sq930x: probe of 5-1:0.0 failed with error -22
[  874.893608][    T8] usb 5-1: USB disconnect, device number 33
[  876.057438][T21201] netlink: 'syz.1.6956': attribute type 1 has an invalid length.
[  876.104785][T21202] usb usb7: usbfs: process 21202 (syz.2.6958) did not claim interface 0 before use
[  876.553819][T21215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6964'.
[  876.599497][T21215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6964'.
[  877.522952][ T5811] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  877.723024][ T5811] usb 3-1: Using ep0 maxpacket: 32
[  877.732596][ T5811] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  877.751310][ T5811] usb 3-1: config 0 has no interface number 0
[  877.760905][ T5811] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  877.773034][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.791725][ T5811] usb 3-1: Product: syz
[  877.801601][ T5811] usb 3-1: Manufacturer: syz
[  877.811723][ T5811] usb 3-1: SerialNumber: syz
[  877.844986][ T5811] usb 3-1: config 0 descriptor??
[  877.855997][ T5811] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  877.905142][T21219] loop1: detected capacity change from 0 to 32768
[  878.076760][ T5811] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  878.205969][ T5811] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  878.405109][T21241] loop4: detected capacity change from 0 to 4096
[  878.455651][T21241] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  878.498161][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  878.506207][    T8] usb 3-1: USB disconnect, device number 45
[  878.516793][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  878.576454][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  878.651005][    T8] quatech2 3-1:0.51: device disconnected
[  878.832317][T21247] tmpfs: Bad value for 'mpol'
[  878.880110][T21241] ntfs3: loop4: failed to convert "c46c" to cp866
[  878.925632][T21241] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  879.545675][T21256] loop4: detected capacity change from 0 to 64
[  879.785605][T21260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6986'.
[  880.131866][ T5811] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  880.146071][T21267] netlink: 'syz.1.6989': attribute type 25 has an invalid length.
[  880.161472][T21262] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  880.323070][ T5811] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  880.512951][ T5811] usb 3-1: Using ep0 maxpacket: 16
[  880.546248][ T5811] usb 3-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40
[  880.575890][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.615817][ T5811] usb 3-1: Product: syz
[  880.620075][ T5811] usb 3-1: Manufacturer: syz
[  880.666474][ T5811] usb 3-1: SerialNumber: syz
[  880.973150][ T5811] usb 3-1: Can't get UAC3 power state for id 10
[  881.013763][ T5811] usb 3-1: BAAD SPEAKERPHONE c_chmask mismatch
[  881.113535][T21285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6998'.
[  881.154265][ T5811] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  881.212573][ T5811] usb 3-1: USB disconnect, device number 46
[  881.398907][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  881.698112][T21289] loop3: detected capacity change from 0 to 4096
[  881.874904][T21291] loop1: detected capacity change from 0 to 8192
[  881.926205][T21295] loop4: detected capacity change from 0 to 1024
[  881.957028][T21291] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  882.013382][T21291] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  882.088539][T21291] REISERFS (device loop1): using ordered data mode
[  882.200597][T21291] reiserfs: using flush barriers
[  882.275663][T21291] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  882.423098][T21291] REISERFS (device loop1): checking transaction log (loop1)
[  882.459699][T21291] REISERFS (device loop1): Using r5 hash to sort names
[  882.490887][T21291] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  883.179157][T21311] loop1: detected capacity change from 0 to 4096
[  883.416509][T21316] loop3: detected capacity change from 0 to 4096
[  883.437985][T21311] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  883.512787][T21311] ntfs3: loop1: Failed to load $Extend (-22).
[  883.556670][T21311] ntfs3: loop1: Failed to initialize $Extend.
[  883.596350][T21316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  883.956231][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  884.693920][T21340] ieee802154 phy1 wpan1: encryption failed: -22
[  884.711726][   T28] audit: type=1326 audit(2000000133.500:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  884.778043][   T28] audit: type=1326 audit(2000000133.530:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  885.042544][   T28] audit: type=1326 audit(2000000133.600:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  885.171992][   T28] audit: type=1326 audit(2000000133.600:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  885.366527][   T28] audit: type=1326 audit(2000000133.640:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  885.519219][   T28] audit: type=1326 audit(2000000133.640:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  885.713011][   T28] audit: type=1326 audit(2000000133.640:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  885.999187][   T28] audit: type=1326 audit(2000000133.640:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  886.153944][   T28] audit: type=1326 audit(2000000133.640:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  886.320504][   T28] audit: type=1326 audit(2000000133.650:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21341 comm="syz.1.7022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fe13b79e0d9 code=0x7ffc0000
[  886.748737][T21371] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7036'.
[  887.244002][T21378] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  887.292759][T21379] loop3: detected capacity change from 0 to 64
[  887.332580][T21379] hfs: unable to locate alternate MDB
[  887.386772][T21379] hfs: continuing without an alternate MDB
[  887.837109][T21385] loop1: detected capacity change from 0 to 256
[  887.873959][T21385] FAT-fs (loop1): Unrecognized mount option "shortname=mixwinnt" or missing value
[  888.216440][T21364] loop2: detected capacity change from 0 to 32768
[  888.339782][T21364] find_entry called with index = 0
[  888.370295][T21364] read_mapping_page failed!
[  888.400335][T21364] ERROR: (device loop2): txCommit: 
[  888.400335][T21364] 
[  888.570115][T21393] loop3: detected capacity change from 0 to 4096
[  888.809667][T21397] loop4: detected capacity change from 0 to 512
[  888.879193][T21397] EXT4-fs: Ignoring removed nobh option
[  888.910871][T21397] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  888.993482][T21397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[  889.077947][T21397] EXT4-fs (loop4): orphan cleanup on readonly fs
[  889.108978][T21397] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.7048: attempt to clear invalid blocks 1024 len 1
[  889.223313][T21397] EXT4-fs (loop4): Remounting filesystem read-only
[  889.293398][T21397] EXT4-fs (loop4): 1 truncate cleaned up
[  889.300548][T21397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  889.585424][ T7373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  889.933167][    T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  890.145187][    T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  890.168039][    T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  890.218066][    T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  890.271273][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.317672][T21408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  890.356951][    T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  890.673108][ T5813] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  890.809026][    T8] usb 2-1: USB disconnect, device number 44
[  890.873164][ T5813] usb 3-1: Using ep0 maxpacket: 8
[  890.909207][ T5813] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  890.948015][ T5813] usb 3-1: config 2 has no interface number 0
[  890.971617][ T5813] usb 3-1: config 2 interface 31 has no altsetting 0
[  890.992363][ T5813] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  891.006356][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.022145][ T5813] usb 3-1: Product: syz
[  891.037125][ T5813] usb 3-1: Manufacturer: syz
[  891.041994][ T5813] usb 3-1: SerialNumber: syz
[  891.863163][ T5813] ch9200: probe of 3-1:2.31 failed with error -22
[  891.882324][ T5813] usb 3-1: USB disconnect, device number 47
[  892.317995][T21444] Bluetooth: MGMT ver 1.22
[  892.342069][T21448] loop3: detected capacity change from 0 to 512
[  892.403559][T21448] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  892.517184][T21448] EXT4-fs (loop3): 1 truncate cleaned up
[  892.554444][T21448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  892.653877][T21452] loop2: detected capacity change from 0 to 1024
[  892.713207][T21452] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  892.854670][T21452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  892.964436][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  893.225467][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  894.347871][T21463] loop4: detected capacity change from 0 to 32768
[  894.369908][T21463] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  894.393148][T21463] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  894.411321][T21463] BTRFS info (device loop4): setting nodatacow, compression disabled
[  894.430019][T21463] BTRFS info (device loop4): turning on flush-on-commit
[  894.474159][T21463] BTRFS info (device loop4): trying to use backup root at mount time
[  894.517774][T21463] BTRFS info (device loop4): max_inline at 0
[  894.572599][T21463] BTRFS info (device loop4): using free space tree
[  894.861766][T14238] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  894.962985][T21463] BTRFS error (device loop4): failed to load root extent
[  894.970185][T21463] BTRFS warning (device loop4): try to load backup roots slot 1
[  895.022152][T14244] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  895.062498][T21463] BTRFS warning (device loop4): couldn't read tree root
[  895.073286][T21463] BTRFS warning (device loop4): try to load backup roots slot 2
[  895.103587][ T1148] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  895.148331][T21463] BTRFS warning (device loop4): couldn't read tree root
[  895.169014][T21463] BTRFS warning (device loop4): try to load backup roots slot 3
[  895.278846][T21463] BTRFS info (device loop4): enabling ssd optimizations
[  895.324244][T21463] BTRFS info (device loop4): auto enabling async discard
[  895.400263][T21463] BTRFS info (device loop4): rebuilding free space tree
[  895.467902][T21463] BTRFS info (device loop4): checking UUID tree
[  895.996433][ T7373] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  896.430355][T21529] loop1: detected capacity change from 0 to 512
[  896.530154][T21529] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  896.662963][T21529] EXT4-fs (loop1): 1 truncate cleaned up
[  896.670098][T21529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  897.077226][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  897.077241][   T28] audit: type=1326 audit(2000000145.870:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  897.182577][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  897.218960][   T28] audit: type=1326 audit(2000000145.900:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  897.441350][   T28] audit: type=1326 audit(2000000145.920:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  897.793775][   T28] audit: type=1326 audit(2000000145.920:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  897.922963][   T28] audit: type=1326 audit(2000000145.920:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  898.068930][   T28] audit: type=1326 audit(2000000145.930:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  898.152288][   T28] audit: type=1326 audit(2000000146.040:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26efd5e90e code=0x7ffc0000
[  898.180203][   T28] audit: type=1326 audit(2000000146.040:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  898.353280][   T28] audit: type=1326 audit(2000000146.040:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21539 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  898.403079][ T5813] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  898.431223][   T28] audit: type=1326 audit(2000000146.060:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21545 comm="syz.3.7104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26efd5e90e code=0x7ffc0000
[  898.593199][ T5813] usb 5-1: Using ep0 maxpacket: 8
[  898.637032][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  898.668619][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  898.740424][ T5813] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  898.784802][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.796248][T21567] loop2: detected capacity change from 0 to 256
[  898.821746][T21567] exfat: Deprecated parameter 'utf8'
[  898.838609][ T5813] usb 5-1: config 0 descriptor??
[  898.878075][T21567] exfat: Deprecated parameter 'utf8'
[  898.932972][T21567] exfat: Deprecated parameter 'utf8'
[  898.938371][T21567] exfat: Deprecated parameter 'namecase'
[  899.118003][T21573] netlink: 766 bytes leftover after parsing attributes in process `syz.3.7119'.
[  899.132592][T21567] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  899.311256][ T5813] hid (null): unknown global tag 0xd
[  899.388548][ T5813] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0xd
[  899.427428][ T5813] hid-u2fzero 0003:10C4:8ACF.0001: collection stack underflow
[  899.452714][ T5813] hid-u2fzero 0003:10C4:8ACF.0001: item 0 2 0 12 parsing failed
[  899.493859][ T5813] hid-u2fzero: probe of 0003:10C4:8ACF.0001 failed with error -22
[  899.549705][ T5813] usb 5-1: USB disconnect, device number 34
[  899.863314][ T5811] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  899.885761][T21582] loop2: detected capacity change from 0 to 2048
[  899.907042][T21582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  900.042963][ T5811] usb 4-1: Using ep0 maxpacket: 8
[  900.058145][ T5811] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  900.096481][ T5811] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  900.125132][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.189667][ T5811] usb 4-1: Product: syz
[  900.210263][ T5811] usb 4-1: Manufacturer: syz
[  900.241709][ T5811] usb 4-1: SerialNumber: syz
[  900.268570][ T5811] usb 4-1: config 0 descriptor??
[  900.300315][ T5811] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  900.361393][ T5811] usb 4-1: setting power ON
[  900.376313][ T5811] dvb-usb: bulk message failed: -22 (2/0)
[  900.433988][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  900.492029][ T5811] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  900.513335][T21588] tipc: Started in network mode
[  900.519043][T21588] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  900.537913][ T5811] usb 4-1: media controller created
[  900.567569][T21578] dvb-usb: bulk message failed: -22 (4/0)
[  900.596380][T21588] tipc: Enabled bearer <eth:vlan0>, priority 2
[  900.610995][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  900.622179][T21578] cxusb: i2c read failed
[  900.715040][ T5811] usb 4-1: selecting invalid altsetting 6
[  900.721468][ T5811] usb 4-1: digital interface selection failed (-22)
[  900.801477][ T5811] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  900.843782][ T5811] usb 4-1: setting power OFF
[  900.849238][ T5811] dvb-usb: bulk message failed: -22 (2/0)
[  900.865989][ T5811] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  900.909952][ T5811] (NULL device *): no alternate interface
[  901.024509][ T5811] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  901.094637][ T5811] usb 4-1: USB disconnect, device number 44
[  901.153442][ T5813] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  901.383975][ T5813] usb 2-1: Using ep0 maxpacket: 8
[  901.400961][ T5813] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  901.443112][ T5813] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  901.493258][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.501332][ T5813] usb 2-1: Product: syz
[  901.573105][ T5813] usb 2-1: Manufacturer: syz
[  901.586854][ T5813] usb 2-1: SerialNumber: syz
[  901.625355][ T5813] usb 2-1: config 0 descriptor??
[  901.651706][ T5813] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  901.679442][ T5813] usb 2-1: setting power ON
[  901.694576][ T5813] dvb-usb: bulk message failed: -22 (2/0)
[  901.708509][T21606] loop4: detected capacity change from 0 to 1024
[  901.719885][ T5811] tipc: Node number set to 10005162
[  901.766435][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  901.806935][ T5813] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  901.823396][T21606] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  901.880061][ T5813] usb 2-1: media controller created
[  901.919202][T21596] dvb-usb: bulk message failed: -22 (3/0)
[  901.989167][T21610] netlink: 'syz.2.7137': attribute type 8 has an invalid length.
[  902.028483][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  902.160063][ T5813] usb 2-1: selecting invalid altsetting 6
[  902.183596][ T5813] usb 2-1: digital interface selection failed (-22)
[  902.220940][ T5813] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  902.303071][ T5813] usb 2-1: setting power OFF
[  902.307751][ T5813] dvb-usb: bulk message failed: -22 (2/0)
[  902.352044][ T5813] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  902.375926][T21612] loop2: detected capacity change from 0 to 128
[  902.417966][ T5813] (NULL device *): no alternate interface
[  902.674620][ T5813] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  902.783285][ T5813] usb 2-1: USB disconnect, device number 45
[  902.865460][ T5773] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000)
[  902.904906][ T5773] FAT-fs (loop2): Filesystem has been set read-only
[  902.952228][ T5773] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  902.969361][ T5773] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  903.029395][T21620] loop4: detected capacity change from 0 to 64
[  904.008365][ T1148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.073032][    T8] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  904.243491][T21634] loop3: detected capacity change from 0 to 4096
[  904.322980][    T8] usb 2-1: Using ep0 maxpacket: 8
[  904.337424][    T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  904.367282][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  904.384113][ T1148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.403846][    T8] usb 2-1: Product: syz
[  904.432557][    T8] usb 2-1: Manufacturer: syz
[  904.451960][    T8] usb 2-1: SerialNumber: syz
[  904.482707][    T8] usb 2-1: config 0 descriptor??
[  904.525799][    T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  904.779471][T21634] ntfs3: loop3: ino=9, attr_set_size
[  904.830471][    T8] gspca_sn9c2028: read1 error -32
[  904.873652][ T1148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.089694][    T8] gspca_sn9c2028: read1 error -71
[  905.136019][    T8] sn9c2028: probe of 2-1:0.0 failed with error -71
[  905.156443][    T8] usb 2-1: USB disconnect, device number 46
[  905.367458][ T1148] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.569153][T21641] loop3: detected capacity change from 0 to 256
[  905.648025][T21641] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d)
[  906.485015][T21653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7159'.
[  906.547405][ T1148] : left promiscuous mode
[  906.811628][T21656] loop4: detected capacity change from 0 to 256
[  906.863582][T21656] exfat: Deprecated parameter 'utf8'
[  906.869049][T21656] exfat: Deprecated parameter 'namecase'
[  906.901081][T21656] exfat: Deprecated parameter 'namecase'
[  906.943372][T21656] exfat: Deprecated parameter 'namecase'
[  907.010202][T21656] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9eb8f943, utbl_chksum : 0xe619d30d)
[  907.166569][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  907.189362][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  907.198447][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  907.244673][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  907.252477][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  907.273337][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  907.753065][T15040] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  907.965278][T15040] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  908.008171][T15040] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  908.074327][T15040] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  908.105560][T15040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.133196][T15040] usb 2-1: Product: syz
[  908.139661][T15040] usb 2-1: Manufacturer: syz
[  908.158125][T15040] usb 2-1: SerialNumber: syz
[  908.226268][T15040] usb 2-1: config 0 descriptor??
[  908.237817][T21666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  908.273253][T21666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  908.533424][T21666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  908.540790][T21666] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  908.826463][T15040] Error reading MAC address
[  908.887594][T15040] usb 2-1: USB disconnect, device number 47
[  908.927454][T21660] wlan0 speed is unknown, defaulting to 1000
[  909.341207][T19052] Bluetooth: hci1: command tx timeout
[  909.668125][T21700] loop1: detected capacity change from 0 to 512
[  909.724429][T21700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  909.823719][T21700] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.7174: bad orphan inode 131083
[  909.857376][T21700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  910.188824][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  910.515312][T21709] loop1: detected capacity change from 0 to 64
[  910.981420][T21694] loop4: detected capacity change from 0 to 32768
[  911.162092][T21722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7180'.
[  911.193503][T21694] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  911.429287][T19052] Bluetooth: hci1: command tx timeout
[  911.488444][T21694] XFS (loop4): Ending clean mount
[  911.918989][ T7373] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  912.166484][T21660] chnl_net:caif_netlink_parms(): no params data found
[  912.224977][ T1148] IPVS: stopping master sync thread 6419 ...
[  913.502948][T19052] Bluetooth: hci1: command tx timeout
[  913.547240][T21660] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.554657][T21660] bridge0: port 1(bridge_slave_0) entered disabled state
[  913.561989][T21660] bridge_slave_0: entered allmulticast mode
[  913.570805][T21660] bridge_slave_0: entered promiscuous mode
[  913.699170][T21660] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.758171][T21660] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.883407][T21660] bridge_slave_1: entered allmulticast mode
[  913.904934][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  913.904950][   T28] audit: type=1326 audit(2000000162.700:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21778 comm="syz.1.7196" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe13b79e0d9 code=0x0
[  913.943043][T21660] bridge_slave_1: entered promiscuous mode
[  914.135006][T21783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7197'.
[  914.171493][T21783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7197'.
[  914.218822][T21783] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22)
[  914.306725][T21660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  914.376406][T21660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  914.701792][T21660] team0: Port device team_slave_0 added
[  914.777372][T21660] team0: Port device team_slave_1 added
[  914.920632][T21660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  914.952827][T21660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  914.978802][    C1] vkms_vblank_simulate: vblank timer overrun
[  915.103279][T21660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  915.153157][T21660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.160479][T21660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  915.314848][T21660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  915.562402][T21806] loop4: detected capacity change from 0 to 1024
[  915.571338][ T1148] hsr_slave_0: left promiscuous mode
[  915.582923][T19052] Bluetooth: hci1: command tx timeout
[  915.594536][T21806] EXT4-fs: Ignoring removed bh option
[  915.674570][T21806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  915.866552][ T1148] hsr_slave_1: left promiscuous mode
[  915.984535][ T7373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  916.273088][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7211'.
[  916.308948][ T1148] veth1_vlan: left promiscuous mode
[  917.790919][ T1148] bond4 (unregistering): Released all slaves
[  918.152634][ T1148] bond3 (unregistering): Released all slaves
[  918.254915][ T1148] bond2 (unregistering): Released all slaves
[  918.793849][ T1148] bond1 (unregistering): Released all slaves
[  919.256137][    T8] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  919.455668][    T8] usb 5-1: Using ep0 maxpacket: 32
[  919.493264][    T8] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  919.501452][    T8] usb 5-1: config 0 has no interface number 0
[  919.523955][    T8] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  919.533586][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.541637][    T8] usb 5-1: Product: syz
[  919.582987][    T8] usb 5-1: Manufacturer: syz
[  919.587677][    T8] usb 5-1: SerialNumber: syz
[  919.619211][    T8] usb 5-1: config 0 descriptor??
[  919.659445][    T8] smsc95xx v2.0.0
[  920.293013][    T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  920.321806][    T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  920.370960][    T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  920.385737][    T8] smsc95xx: probe of 5-1:0.67 failed with error -71
[  920.406737][    T8] usb 5-1: USB disconnect, device number 35
[  921.408379][ T1148] bond0 (unregistering): Released all slaves
[  921.503021][T15040] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  921.680979][T21660] hsr_slave_0: entered promiscuous mode
[  921.687005][T15040] usb 5-1: Using ep0 maxpacket: 16
[  921.701126][T15040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11
[  921.733206][T15040] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  921.753723][T15040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.780015][T21660] hsr_slave_1: entered promiscuous mode
[  921.802678][T15040] usb 5-1: config 0 descriptor??
[  921.828077][T21842] bridge_slave_1: default FDB implementation only supports local addresses
[  922.289121][T15040] thrustmaster 0003:044F:B323.0002: unknown main item tag 0x4
[  922.317297][T15040] thrustmaster 0003:044F:B323.0002: unknown main item tag 0xd
[  922.401514][T15040] thrustmaster 0003:044F:B323.0002: hidraw0: USB HID v9.42 Device [HID 044f:b323] on usb-dummy_hcd.4-1/input0
[  922.533022][T15040] thrustmaster 0003:044F:B323.0002: no inputs found
[  922.634473][T15040] usb 5-1: USB disconnect, device number 36
[  923.161775][T21877] fido_id[21877]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  923.248170][T21887] loop3: detected capacity change from 0 to 256
[  923.380711][T21887] FAT-fs (loop3): Directory bread(block 64) failed
[  923.409866][T21887] FAT-fs (loop3): Directory bread(block 65) failed
[  923.464482][T21887] FAT-fs (loop3): Directory bread(block 66) failed
[  923.471374][T21887] FAT-fs (loop3): Directory bread(block 67) failed
[  923.573268][T21887] FAT-fs (loop3): Directory bread(block 68) failed
[  923.579888][T21887] FAT-fs (loop3): Directory bread(block 69) failed
[  923.654340][T21660] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  923.685557][T21887] FAT-fs (loop3): Directory bread(block 70) failed
[  923.716779][T21660] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  923.726109][T21887] FAT-fs (loop3): Directory bread(block 71) failed
[  923.738569][T21889] loop1: detected capacity change from 0 to 4096
[  923.783549][T21887] FAT-fs (loop3): Directory bread(block 72) failed
[  923.790159][T21887] FAT-fs (loop3): Directory bread(block 73) failed
[  923.799346][T21889] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  923.866207][T21660] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  923.987070][T21660] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  924.559161][T21660] 8021q: adding VLAN 0 to HW filter on device bond0
[  924.680995][T21660] 8021q: adding VLAN 0 to HW filter on device team0
[  924.878228][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.885487][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  925.015253][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  925.022472][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  925.156420][T21907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7240'.
[  925.290267][T21660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  925.576690][T21913] loop3: detected capacity change from 0 to 1024
[  926.105494][ T1148] hfsplus: b-tree write err: -5, ino 25
[  926.111371][ T1148] hfsplus: b-tree write err: -5, ino 4
[  926.172915][ T1148] hfsplus: b-tree write err: -5, ino 2
[  926.621051][T21660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  926.783870][T21939] batadv0: entered promiscuous mode
[  926.842193][T21942] loop1: detected capacity change from 0 to 1024
[  926.876318][T21939] batadv0: left promiscuous mode
[  927.002529][T21942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  927.046639][T21942] ext4 filesystem being mounted at /1848/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  927.360453][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  928.070694][T21660] veth0_vlan: entered promiscuous mode
[  928.168183][T21660] veth1_vlan: entered promiscuous mode
[  928.339236][T21660] veth0_macvtap: entered promiscuous mode
[  928.361281][   T28] audit: type=1326 audit(2000000177.150:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.4.7256" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b84d9e0d9 code=0x0
[  928.414797][T21660] veth1_macvtap: entered promiscuous mode
[  928.537018][T21943] loop3: detected capacity change from 0 to 32768
[  928.582862][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.613741][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.656673][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.697575][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.761249][T21660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  928.845919][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.903100][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.959375][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  929.002490][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.035352][T21660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  929.072984][T21660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  929.133168][T21660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  929.253666][T21660] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  929.262491][T21660] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  929.385075][T21660] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  929.452899][T21660] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  929.907707][T21989] loop1: detected capacity change from 0 to 128
[  929.975454][T14252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.007177][T14252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.116576][T21989] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  930.479244][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.518421][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  931.738129][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  932.636539][T22051] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  933.156707][T22060] vivid-007: disconnect
[  933.191307][T22060] vivid-007: reconnect
[  933.414758][T22065] loop5: detected capacity change from 0 to 164
[  935.245311][T22062] loop3: detected capacity change from 0 to 32768
[  935.483865][T22062] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  935.837030][T22122] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  935.914807][T22062] XFS (loop3): Ending clean mount
[  936.000178][T22062] XFS (loop3): Quotacheck needed: Please wait.
[  936.290630][T22062] XFS (loop3): Quotacheck: Done.
[  936.531723][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  937.945975][T22170] fuse: Unexpected value for 'default_permissions'
[  938.080961][T22168] loop5: detected capacity change from 0 to 4096
[  938.502010][ T5813] IPVS: starting estimator thread 0...
[  938.663040][T22181] IPVS: using max 19 ests per chain, 45600 per kthread
[  939.966300][T22203] loop1: detected capacity change from 0 to 64
[  940.827745][T22175] loop3: detected capacity change from 0 to 40427
[  940.871064][T22187] loop4: detected capacity change from 0 to 40427
[  940.878303][T22175] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  940.923176][T22175] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  940.931555][T22175] F2FS-fs (loop3): Image doesn't support compression
[  940.957449][T22187] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  940.998182][T22175] F2FS-fs (loop3): Image doesn't support compression
[  941.016096][T22187] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  941.042841][T22175] F2FS-fs (loop3): invalid crc value
[  941.195745][T22187] F2FS-fs (loop4): Found nat_bits in checkpoint
[  941.359987][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.398633][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.445437][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.487949][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.517674][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.536531][T22175] F2FS-fs (loop3): Start checkpoint disabled!
[  941.560371][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.572813][T22187] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  941.598717][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.623450][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.640569][T22187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  941.683903][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.711073][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.736178][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.793909][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.801735][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.884625][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  941.932919][T21885] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  942.062527][T21885] hid-generic 00A0:0006:0003.0003: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz0
[  942.626219][T22235] fido_id[22235]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  943.167293][T22241] loop5: detected capacity change from 0 to 8192
[  943.343059][T21885] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  943.603236][T21885] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  943.645586][T21885] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11
[  943.690589][T21885] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  943.757916][T21885] usb 2-1: config 0 interface 0 has no altsetting 0
[  943.782952][T21885] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  943.824868][T21885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.854365][T21885] usb 2-1: config 0 descriptor??
[  944.017402][T22257] loop3: detected capacity change from 0 to 512
[  944.187251][T22257] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.7355: corrupted in-inode xattr: invalid ea_ino
[  944.309792][T21885] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x2
[  944.321416][T22257] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.7355: couldn't read orphan inode 15 (err -117)
[  944.369647][T21885] kovaplus 0003:1E7D:2D50.0004: unexpected long global item
[  944.415248][T22257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  944.443899][T21885] kovaplus 0003:1E7D:2D50.0004: parse failed
[  944.489585][T21885] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -22
[  944.568655][T21885] usb 2-1: USB disconnect, device number 48
[  944.648571][T22267] loop4: detected capacity change from 0 to 1024
[  944.807372][   T28] audit: type=1326 audit(2000000193.600:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22269 comm="syz.5.7358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1f899e0d9 code=0x0
[  944.934587][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  944.983705][   T28] audit: type=1800 audit(2000000193.760:1492): pid=22267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7357" name="file1" dev="loop4" ino=20 res=0 errno=0
[  945.783264][T21885] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  945.798367][T22282] loop3: detected capacity change from 0 to 1024
[  946.015071][T21885] usb 2-1: Using ep0 maxpacket: 16
[  946.068200][T21885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  946.068238][T21885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  946.068262][T21885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  946.068310][T21885] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  946.068336][T21885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.073447][T21885] usb 2-1: config 0 descriptor??
[  946.508927][T22289] loop4: detected capacity change from 0 to 4096
[  946.567907][T21885] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max
[  946.569489][T21885] microsoft 0003:045E:07DA.0005: item 0 4 0 9 parsing failed
[  946.570361][T21885] microsoft 0003:045E:07DA.0005: parse failed
[  946.570460][T21885] microsoft: probe of 0003:045E:07DA.0005 failed with error -22
[  946.617677][T22289] NILFS (loop4): invalid segment: Checksum error in segment payload
[  946.617749][T22289] NILFS (loop4): trying rollback from an earlier position
[  946.683946][T22289] NILFS (loop4): recovery complete
[  946.693170][T22293] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  946.921625][T21885] usb 2-1: USB disconnect, device number 49
[  947.482581][T22303] loop3: detected capacity change from 0 to 1024
[  947.661643][   T28] audit: type=1800 audit(2000000196.450:1493): pid=22303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7369" name="file1" dev="loop3" ino=20 res=0 errno=0
[  947.733032][T21885] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  947.915104][T21885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  947.958761][T21885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  948.044673][T21885] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  948.116265][T21885] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  948.234882][T21885] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  948.300301][T21885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.653114][ T5813] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  948.740030][T22311] loop5: detected capacity change from 0 to 4096
[  948.794891][T22311] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  948.855644][ T5813] usb 4-1: Using ep0 maxpacket: 8
[  948.874992][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  948.943203][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  949.001472][T21885] gud 5-1:1.0: Failed to get properties (error=-71)
[  949.026374][ T5813] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  949.057477][T21885] gud: probe of 5-1:1.0 failed with error -71
[  949.076299][T22311] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  949.104361][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.138500][T22311] ntfs3: loop5: Failed to load $Extend (-22).
[  949.174445][ T5813] usb 4-1: config 0 descriptor??
[  949.187219][T22311] ntfs3: loop5: Failed to initialize $Extend.
[  949.215056][T21885] usb 5-1: USB disconnect, device number 37
[  949.722269][ T5813] samsung 0003:0419:0600.0006: unknown main item tag 0x0
[  949.776096][ T5813] samsung 0003:0419:0600.0006: ignoring exceeding usage max
[  949.825833][ T5813] samsung 0003:0419:0600.0006: global environment stack underflow
[  949.863957][ T5813] samsung 0003:0419:0600.0006: item 0 1 1 11 parsing failed
[  949.925602][ T5813] samsung 0003:0419:0600.0006: parse failed
[  949.962228][ T5813] samsung: probe of 0003:0419:0600.0006 failed with error -22
[  950.026665][ T5813] usb 4-1: USB disconnect, device number 45
[  950.939374][T22322] loop1: detected capacity change from 0 to 40427
[  950.952149][T22322] F2FS-fs (loop1): Zoned block device path is missing
[  950.991176][T22322] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  951.030643][T22322] F2FS-fs (loop1): invalid crc value
[  951.259802][T22341] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7388'.
[  951.637489][T22346] loop5: detected capacity change from 0 to 1024
[  951.689952][T22322] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  951.742734][T22322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  951.799059][   T28] audit: type=1800 audit(2000000200.590:1494): pid=22346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7380" name="file1" dev="loop5" ino=20 res=0 errno=0
[  951.964363][   T28] audit: type=1800 audit(2000000200.750:1495): pid=22322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7374" name="file1" dev="loop1" ino=10 res=0 errno=0
[  952.148518][T22336] f2fs_ckpt-7:1: attempt to access beyond end of device
[  952.148518][T22336] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  952.297675][T22336] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  952.686673][T22363] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7389'.
[  952.732960][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7389'.
[  953.546189][T22383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7397'.
[  954.001190][T22391] loop5: detected capacity change from 0 to 2048
[  954.104113][T22397] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  954.262089][   T28] audit: type=1800 audit(2000000203.050:1496): pid=22391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7399" name="file1" dev="loop5" ino=15 res=0 errno=0
[  954.519325][T22404] loop4: detected capacity change from 0 to 128
[  954.643865][T22404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  954.652383][T22404] System zones: 1-3, 19-19, 35-36
[  954.751015][T22404] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  954.812951][T22404] ext4 filesystem being mounted at /1664/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  955.174548][ T7373] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  955.372112][T22422] loop5: detected capacity change from 0 to 1024
[  955.965983][T22429] loop5: detected capacity change from 0 to 136
[  956.611911][T22409] loop3: detected capacity change from 0 to 32768
[  956.687934][T22409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.7405 (22409)
[  956.861239][T22409] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  956.944562][T22409] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  957.003066][T22409] BTRFS info (device loop3): setting nodatasum
[  957.009604][T22409] BTRFS info (device loop3): force zlib compression, level 3
[  957.052981][T22409] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  957.082936][T22409] BTRFS info (device loop3): use lzo compression, level 0
[  957.090236][T22409] BTRFS info (device loop3): turning on flush-on-commit
[  957.159730][T22438] xt_hashlimit: max too large, truncated to 1048576
[  957.163673][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  957.175158][T22409] BTRFS info (device loop3): enabling auto defrag
[  957.182058][T22409] BTRFS info (device loop3): max_inline at 4096
[  957.220560][T22409] BTRFS info (device loop3): using free space tree
[  957.330041][T22420] loop1: detected capacity change from 0 to 32768
[  957.513067][T22409] BTRFS info (device loop3): enabling ssd optimizations
[  958.253190][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  958.283145][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  959.035607][ T5771] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  960.100807][T22471] loop1: detected capacity change from 0 to 512
[  960.232993][T22471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  960.400948][T22471] EXT4-fs (loop1): 1 truncate cleaned up
[  960.460799][T22471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  960.984969][T22479] tipc: Started in network mode
[  960.989926][T22479] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  961.049833][T22479] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002
[  961.165853][T22479] tipc: Enabled bearer <udp:syz0>, priority 10
[  961.475316][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  962.232381][T22468] loop3: detected capacity change from 0 to 32768
[  962.281976][T22468] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.7415 (22468)
[  962.294790][T21885] tipc: Node number set to 1
[  962.319628][T22501] loop4: detected capacity change from 0 to 512
[  962.402315][T22468] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  962.440417][T22501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[  962.473019][T22468] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  962.481811][T22468] BTRFS info (device loop3): setting nodatasum
[  962.488200][T22501] System zones: 1-12
[  962.492591][T22501] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.7428: Directory hole found for htree index block 0
[  962.542951][T22468] BTRFS info (device loop3): force zlib compression, level 3
[  962.550453][T22468] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  962.643275][T22468] BTRFS info (device loop3): use lzo compression, level 0
[  962.650479][T22468] BTRFS info (device loop3): turning on flush-on-commit
[  962.668937][T22501] EXT4-fs (loop4): Remounting filesystem read-only
[  962.745511][T22501] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  962.761366][T22468] BTRFS info (device loop3): enabling auto defrag
[  962.821044][T22501] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  962.839719][T22468] BTRFS info (device loop3): using free space tree
[  962.896894][T22501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  963.032373][T22468] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  963.033709][T22468] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  963.142159][T22468] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  963.243733][T22468] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  963.303654][T22468] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  963.343695][T22468] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  963.374262][ T7373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  963.403652][T22468] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  963.499780][T22468] BTRFS error (device loop3): open_ctree failed: -12
[  964.023027][T21885] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  964.246905][T21885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  964.341927][T21885] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  964.362381][T22550] vlan2: entered promiscuous mode
[  964.384140][T21885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.408800][T22550] bridge0: entered promiscuous mode
[  964.435318][T21885] usb 2-1: config 0 descriptor??
[  964.463918][T22550] vlan2: entered allmulticast mode
[  964.469115][T22550] bridge0: entered allmulticast mode
[  964.966107][T21885] logitech 0003:046D:C293.0007: global environment stack underflow
[  964.998165][T21885] logitech 0003:046D:C293.0007: item 0 2 1 11 parsing failed
[  965.031033][T21885] logitech 0003:046D:C293.0007: parse failed
[  965.063251][T21885] logitech: probe of 0003:046D:C293.0007 failed with error -22
[  965.222234][T21885] usb 2-1: USB disconnect, device number 50
[  965.339385][T22567] netlink: 'syz.3.7444': attribute type 2 has an invalid length.
[  966.093643][T22581] loop3: detected capacity change from 0 to 4096
[  966.218754][T22586] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  966.593846][T22581] syz.3.7449: attempt to access beyond end of device
[  966.593846][T22581] loop3: rw=0, sector=88498, nr_sectors = 2 limit=4096
[  966.685719][T22581] NILFS (loop3): I/O error reading node block for GC (ino=129, vblocknr=32768)
[  966.795099][T22581] NILFS (loop3): error -5 preparing GC: cannot read source blocks
[  966.887104][T22598] loop4: detected capacity change from 0 to 24
[  967.461306][T22607] loop3: detected capacity change from 0 to 512
[  967.529025][T22609] loop4: detected capacity change from 0 to 1024
[  967.537067][T22607] EXT4-fs: Ignoring removed nobh option
[  967.609674][T22607] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  967.705165][T22607] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.7459: attempt to clear invalid blocks 1 len 1
[  967.719718][T22609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  967.806576][T22607] EXT4-fs (loop3): Remounting filesystem read-only
[  967.843748][T22616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7462'.
[  967.885743][T22607] EXT4-fs (loop3): 1 truncate cleaned up
[  967.904991][T22609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  967.953446][T22607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  968.299762][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  968.759520][T22634] loop1: detected capacity change from 0 to 256
[  968.858345][T22634] exfat: Deprecated parameter 'utf8'
[  968.880459][T22634] exfat: Deprecated parameter 'utf8'
[  968.903138][T22634] exfat: Deprecated parameter 'namecase'
[  969.020185][T22634] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  970.064468][ T5811] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  970.139277][T22669] loop1: detected capacity change from 0 to 512
[  970.174590][T22669] EXT4-fs: Ignoring removed nobh option
[  970.193248][ T5813] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  970.269404][T22669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  970.289360][ T5811] usb 5-1: Using ep0 maxpacket: 8
[  970.302733][ T5811] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  970.316698][ T5811] usb 5-1: config 2 has no interface number 0
[  970.326729][ T5811] usb 5-1: config 2 interface 31 has no altsetting 0
[  970.343242][ T5811] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  970.352707][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.361484][ T5811] usb 5-1: Product: syz
[  970.373085][T22669] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.7480: ea_inode file size=0 entry size=6
[  970.387508][ T5811] usb 5-1: Manufacturer: syz
[  970.392169][ T5811] usb 5-1: SerialNumber: syz
[  970.424159][T22669] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.7480: iget: bad extra_isize 90 (inode size 256)
[  970.446993][ T5813] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  970.509072][ T5813] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  970.547100][T22669] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.7480: error while reading EA inode 11 err=-117
[  970.593148][ T5813] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  970.634165][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.660421][T22669] EXT4-fs (loop1): 1 orphan inode deleted
[  970.681580][T22669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  970.732884][T22664] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  970.789479][ T5813] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  971.205106][ T5811] ch9200: probe of 5-1:2.31 failed with error -22
[  971.234961][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  971.277795][ T5811] usb 5-1: USB disconnect, device number 38
[  971.403796][    T8] usb 4-1: USB disconnect, device number 46
[  971.750748][T22686] loop1: detected capacity change from 0 to 2048
[  971.832173][T22686] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  971.993813][T22686] [syz.1.7484/22686] FS: loop1 File: /file1 would truncate fibmap result
[  972.035051][ T5811] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  972.282176][ T5811] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  972.355667][ T5811] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  972.429372][ T5811] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  972.480348][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.548089][T22697] loop1: detected capacity change from 0 to 1024
[  972.567021][T22688] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  972.645498][ T5811] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  972.653159][T22697] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  972.890453][T22697] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.7488: lblock 2 mapped to illegal pblock 2 (length 1)
[  973.020026][T22697] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  973.081730][T22697] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.7488: lblock 0 mapped to illegal pblock 48 (length 1)
[  973.214024][T22697] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  973.233958][T22697] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.7488: Failed to acquire dquot type 0
[  973.250361][    T8] usb 6-1: USB disconnect, device number 2
[  973.268571][T22697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  973.327212][T22697] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.7488: mark_inode_dirty error
[  973.368490][T22697] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  973.421042][T22697] EXT4-fs (loop1): 1 orphan inode deleted
[  973.434492][T14243] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  973.484793][T22697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  973.516370][T14243] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  973.537096][T14243] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:11: Failed to release dquot type 0
[  973.987829][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  974.042617][ T5772] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0
[  974.099158][ T5772] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  974.179115][ T5772] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[  974.405928][T22726] loop4: detected capacity change from 0 to 256
[  974.996997][T22742] loop4: detected capacity change from 0 to 256
[  975.124177][T22742] FAT-fs (loop4): Directory bread(block 64) failed
[  975.130777][T22742] FAT-fs (loop4): Directory bread(block 65) failed
[  975.202043][T22742] FAT-fs (loop4): Directory bread(block 66) failed
[  975.251215][T22742] FAT-fs (loop4): Directory bread(block 67) failed
[  975.295318][T22742] FAT-fs (loop4): Directory bread(block 68) failed
[  975.342944][T22742] FAT-fs (loop4): Directory bread(block 69) failed
[  975.395269][T22742] FAT-fs (loop4): Directory bread(block 70) failed
[  975.401870][T22742] FAT-fs (loop4): Directory bread(block 71) failed
[  975.479100][T22742] FAT-fs (loop4): Directory bread(block 72) failed
[  975.526778][T22742] FAT-fs (loop4): Directory bread(block 73) failed
[  976.533811][T22762] loop1: detected capacity change from 0 to 256
[  976.699722][T22762] FAT-fs (loop1): Directory bread(block 64) failed
[  976.747921][T22762] FAT-fs (loop1): Directory bread(block 65) failed
[  976.791405][T22744] loop5: detected capacity change from 0 to 32768
[  976.798828][T22762] FAT-fs (loop1): Directory bread(block 66) failed
[  976.853736][T22762] FAT-fs (loop1): Directory bread(block 67) failed
[  976.860486][T22762] FAT-fs (loop1): Directory bread(block 68) failed
[  976.904171][T22744] (syz.5.7501,22744,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  976.973241][T22762] FAT-fs (loop1): Directory bread(block 69) failed
[  977.035109][T22744] (syz.5.7501,22744,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  977.073881][T22762] FAT-fs (loop1): Directory bread(block 70) failed
[  977.080489][T22762] FAT-fs (loop1): Directory bread(block 71) failed
[  977.143074][T22762] FAT-fs (loop1): Directory bread(block 72) failed
[  977.149695][T22762] FAT-fs (loop1): Directory bread(block 73) failed
[  977.170081][T22744] (syz.5.7501,22744,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  977.262400][T22762] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  977.415587][T22744] JBD2: Ignoring recovery information on journal
[  977.622376][T22744] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  978.211261][T21660] ocfs2: Unmounting device (7,5) on (node local)
[  979.213111][T22803] nbd: couldn't find device at index 10240
[  980.243808][ T5811] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  980.462999][ T5811] usb 5-1: Using ep0 maxpacket: 16
[  980.503586][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  980.568287][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  980.629778][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  980.673268][ T5811] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  980.745979][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.808278][ T5811] usb 5-1: config 0 descriptor??
[  981.302435][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.401402][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.454453][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.461749][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.575765][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.643579][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.716075][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.774641][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.823462][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.872822][ T5811] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  981.892831][ T5811] microsoft 0003:045E:07DA.0008: unsupported Resolution Multiplier 0
[  981.903406][    T8] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  981.960766][ T5811] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[  981.991709][ T5811] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  982.075135][ T5811] microsoft 0003:045E:07DA.0008: no inputs found
[  982.113835][ T5811] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  982.143285][    T8] usb 2-1: Using ep0 maxpacket: 8
[  982.183893][    T8] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  982.236578][ T5811] usb 5-1: USB disconnect, device number 39
[  982.244060][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.315920][    T8] usb 2-1: config 0 descriptor??
[  982.450767][T22871] net_ratelimit: 334 callbacks suppressed
[  982.450815][T22871] ip_tables: iptables: counters copy to user failed while replacing table
[  982.555098][T22866] fido_id[22866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  982.806847][    T8] sunplus 0003:04FC:05D8.0009: unknown main item tag 0x0
[  982.852831][    T8] sunplus 0003:04FC:05D8.0009: unknown main item tag 0x5
[  982.860504][    T8] sunplus 0003:04FC:05D8.0009: item fetching failed at offset 36/40
[  982.953501][    T8] sunplus: probe of 0003:04FC:05D8.0009 failed with error -22
[  983.093345][    T8] usb 2-1: USB disconnect, device number 51
[  983.423038][T21885] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  983.623376][T21885] usb 6-1: Using ep0 maxpacket: 32
[  983.647832][T21885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  983.675150][T21885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  983.693606][T22891] loop3: detected capacity change from 0 to 256
[  983.715112][T21885] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  983.779087][   T28] audit: type=1800 audit(2000000232.570:1497): pid=22891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7551" name="file1" dev="loop3" ino=1048754 res=0 errno=0
[  983.802889][T21885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.820533][T22891] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  983.883549][T21885] usb 6-1: config 0 descriptor??
[  983.903271][T22891] FAT-fs (loop3): Filesystem has been set read-only
[  983.911689][T21885] hub 6-1:0.0: USB hub found
[  984.090060][T22893] loop1: detected capacity change from 0 to 64
[  984.138866][T21885] hub 6-1:0.0: 26 ports detected
[  984.178890][T21885] hub 6-1:0.0: insufficient power available to use all downstream ports
[  984.348170][T21885] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  984.378746][T21885] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  984.394107][T22895] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7553'.
[  984.433836][T21885] usbhid 6-1:0.0: can't add hid device: -71
[  984.450099][T21885] usbhid: probe of 6-1:0.0 failed with error -71
[  984.504166][T21885] usb 6-1: USB disconnect, device number 3
[  984.577978][T22897] loop1: detected capacity change from 0 to 4096
[  984.655723][T22901] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  985.648224][T22914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7561'.
[  985.873594][T22920] loop3: detected capacity change from 0 to 128
[  986.251667][T21885] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  986.453449][T21885] usb 6-1: Using ep0 maxpacket: 8
[  986.489406][T21885] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  986.535529][T21885] usb 6-1: config 0 interface 0 has no altsetting 0
[  986.564616][T21885] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[  986.606116][T21885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.665648][T21885] usb 6-1: config 0 descriptor??
[  987.113803][T21885] lenovo 0003:17EF:60A4.000A: unknown main item tag 0x4
[  987.171429][T21885] lenovo 0003:17EF:60A4.000A: unknown main item tag 0xd
[  987.220525][T21885] lenovo 0003:17EF:60A4.000A: hidraw0: USB HID v0.7f Device [HID 17ef:60a4] on usb-dummy_hcd.5-1/input0
[  987.463628][T22947] netlink: 'syz.3.7577': attribute type 3 has an invalid length.
[  987.471754][T22947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7577'.
[  987.507438][ T5811] usb 6-1: USB disconnect, device number 4
[  987.643316][T21885] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  987.839294][T22950] netlink: 'syz.1.7579': attribute type 2 has an invalid length.
[  987.852362][T22950] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7579'.
[  987.873043][T21885] usb 5-1: Using ep0 maxpacket: 16
[  987.890158][T21885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  987.913967][T21885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  987.939113][T21885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  987.957853][T21885] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  987.967392][T21885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.985085][T21885] usb 5-1: config 0 descriptor??
[  988.065844][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  988.304227][T22955] loop5: detected capacity change from 0 to 1024
[  988.408667][T21885] microsoft 0003:045E:07DA.000B: unbalanced delimiter at end of report description
[  988.462726][T21885] microsoft 0003:045E:07DA.000B: parse failed
[  988.506292][T21885] microsoft: probe of 0003:045E:07DA.000B failed with error -22
[  988.742942][T21885] usb 5-1: USB disconnect, device number 40
[  989.683653][T22976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  989.756108][T22976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.799795][T22976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  989.821264][T22982] loop1: detected capacity change from 0 to 16
[  989.856247][T22976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  989.892901][T22982] erofs: (device loop1): mounted with root inode @ nid 36.
[  989.912994][T22976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  989.993238][T22976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.046924][T22982] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46
[  990.096598][T22976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  990.140970][T22986] netlink: 64691 bytes leftover after parsing attributes in process `syz.3.7596'.
[  990.143278][T22976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  990.204360][T22976] batadv_slave_1: entered promiscuous mode
[  990.985439][T23000] netlink: 'syz.4.7603': attribute type 2 has an invalid length.
[  991.131216][T23003] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  991.347501][T23006] program syz.4.7606 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  991.495715][T23010] netlink: 'syz.3.7607': attribute type 3 has an invalid length.
[  992.013123][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7612'.
[  992.075189][T23018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7612'.
[  992.226219][T22992] loop1: detected capacity change from 0 to 32768
[  992.415511][T22992] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  992.498296][   T28] audit: type=1326 audit(2000000241.290:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  992.522697][    C0] vkms_vblank_simulate: vblank timer overrun
[  992.529251][   T28] audit: type=1326 audit(2000000241.290:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  992.553454][    C0] vkms_vblank_simulate: vblank timer overrun
[  992.567805][   T28] audit: type=1326 audit(2000000241.290:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  992.591995][    C0] vkms_vblank_simulate: vblank timer overrun
[  992.715019][   T28] audit: type=1326 audit(2000000241.290:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  992.754441][T22992] XFS (loop1): Ending clean mount
[  992.912832][   T28] audit: type=1326 audit(2000000241.360:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26efd9e0d9 code=0x7ffc0000
[  992.937043][    C0] vkms_vblank_simulate: vblank timer overrun
[  993.097607][   T28] audit: type=1326 audit(2000000241.360:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f26efd9de42 code=0x7ffc0000
[  993.176863][ T5772] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  993.186178][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  993.250588][T23040] [U] ø
[  993.309442][   T28] audit: type=1326 audit(2000000241.360:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f26efd9ded7 code=0x7ffc0000
[  993.430006][   T28] audit: type=1326 audit(2000000241.360:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f26efd5add1 code=0x7ffc0000
[  993.454160][    C0] vkms_vblank_simulate: vblank timer overrun
[  993.472878][    T8] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  993.612956][   T28] audit: type=1326 audit(2000000241.360:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f26efd9eec9 code=0x7ffc0000
[  993.729606][    T8] usb 4-1: Using ep0 maxpacket: 16
[  993.741040][   T28] audit: type=1326 audit(2000000241.360:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23028 comm="syz.3.7616" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f26efd5ae3b code=0x7ffc0000
[  993.778615][T23047] loop5: detected capacity change from 0 to 1024
[  993.785716][    T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  993.829847][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  993.934572][    T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00
[  994.017817][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.147659][    T8] usb 4-1: config 0 descriptor??
[  994.254123][ T1148] hfsplus: b-tree write err: -5, ino 25
[  994.290550][ T1148] hfsplus: b-tree write err: -5, ino 4
[  994.343525][ T1148] hfsplus: b-tree write err: -5, ino 2
[  994.349268][ T1148] hfsplus: b-tree write err: -5, ino 26
[  994.647683][    T8] apple 0003:05AC:027C.000C: ignoring exceeding usage max
[  994.689351][T23056] loop4: detected capacity change from 0 to 1024
[  994.710316][    T8] apple 0003:05AC:027C.000C: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.3-1/input0
[  994.801248][T23058] loop1: detected capacity change from 0 to 128
[  995.023769][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  995.112878][ T5778] usb 4-1: USB disconnect, device number 47
[  995.253440][T23064] loop5: detected capacity change from 0 to 256
[  995.423705][T23064] FAT-fs (loop5): Directory bread(block 64) failed
[  995.467073][T23064] FAT-fs (loop5): Directory bread(block 65) failed
[  995.513004][T23064] FAT-fs (loop5): Directory bread(block 66) failed
[  995.560144][T23064] FAT-fs (loop5): Directory bread(block 67) failed
[  995.583136][T23064] FAT-fs (loop5): Directory bread(block 68) failed
[  995.589746][T23064] FAT-fs (loop5): Directory bread(block 69) failed
[  995.612970][T23064] FAT-fs (loop5): Directory bread(block 70) failed
[  995.619583][T23064] FAT-fs (loop5): Directory bread(block 71) failed
[  995.657198][T23064] FAT-fs (loop5): Directory bread(block 72) failed
[  995.713183][T23064] FAT-fs (loop5): Directory bread(block 73) failed
[  996.573595][T23090] ip6gretap0: entered promiscuous mode
[  997.339727][T23108] loop5: detected capacity change from 0 to 1024
[  997.365521][T23108] EXT4-fs: Ignoring removed bh option
[  997.403726][T23110] netlink: 'syz.4.7649': attribute type 10 has an invalid length.
[  997.436377][T23108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  997.455335][T23110] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  997.470887][T23110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  997.623079][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  997.703885][T21660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  997.846753][T23119] loop4: detected capacity change from 0 to 512
[  997.959150][T23121] loop5: detected capacity change from 0 to 256
[  998.014444][T23119] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  998.026190][T23121] exfat: Deprecated parameter 'utf8'
[  998.092794][T23119] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  998.126986][T23121] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  998.188787][T23119] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.7654: Invalid block bitmap block 0 in block_group 0
[  998.449461][T23119] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  998.546133][T23119] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.7654: attempt to clear invalid blocks 983261 len 1
[  998.586979][T23132] Zero length message leads to an empty skb
[  998.619636][T23119] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.7654: Invalid inode table block 0 in block_group 0
[  998.681059][T23119] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  998.742998][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  998.743015][   T28] audit: type=1326 audit(2000000247.530:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.5.7662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f899e0d9 code=0x7ffc0000
[  998.863164][T23119] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  998.882821][   T28] audit: type=1326 audit(2000000247.530:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.5.7662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1f899e0d9 code=0x7ffc0000
[  998.896305][T23119] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.7654: Invalid inode table block 0 in block_group 0
[  998.949416][T23119] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  998.994834][T23119] EXT4-fs error (device loop4): ext4_truncate:4302: inode #11: comm syz.4.7654: mark_inode_dirty error
[  999.003100][   T28] audit: type=1326 audit(2000000247.530:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.5.7662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1f899e0d9 code=0x7ffc0000
[  999.040699][T23138] loop1: detected capacity change from 0 to 256
[  999.055847][T23119] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  999.084128][T23119] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.7654: Invalid inode table block 0 in block_group 0
[  999.134859][T23119] EXT4-fs (loop4): 1 truncate cleaned up
[  999.157420][T23119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  999.534424][ T7373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1000.142925][ T5811] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1000.375060][ T5811] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1000.412390][ T5811] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1000.467854][ T5811] usb 6-1: config 2 interface 0 has no altsetting 0
[ 1000.523792][ T5811] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1000.570957][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.075289][ T5811] elo 0003:04E7:0009.000D: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0
[ 1001.160893][T23162] loop3: detected capacity change from 0 to 32768
[ 1001.415936][ T5811] usb 6-1: USB disconnect, device number 5
[ 1001.621886][T23181] fido_id[23181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1002.367815][    T8] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1002.483296][ T5811] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1002.621580][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1002.643297][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1002.663249][    T8] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[ 1002.681183][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.693005][ T5811] usb 5-1: Using ep0 maxpacket: 16
[ 1002.704054][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1002.725321][    T8] usb 2-1: config 0 descriptor??
[ 1002.740470][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1002.771354][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1002.804161][ T5811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1002.834139][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1002.865436][ T5811] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1002.875546][ T5811] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1002.894155][ T5811] usb 5-1: Manufacturer: syz
[ 1002.934480][ T5811] usb 5-1: config 0 descriptor??
[ 1002.942858][ T5778] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1003.095416][T23192] loop3: detected capacity change from 0 to 32768
[ 1003.110629][T23192] 
[ 1003.110629][T23192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1003.110629][T23192] 
[ 1003.180435][    T8] cypress 0003:04B4:DE64.000E: unknown main item tag 0x0
[ 1003.200173][T23192] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1003.200173][T23192] 
[ 1003.230717][    T8] cypress 0003:04B4:DE64.000E: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.1-1/input0
[ 1003.273387][T23192] xtLookup: xtSearch returned -5
[ 1003.302800][ T5778] usb 6-1: Using ep0 maxpacket: 32
[ 1003.311686][ T5778] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1003.334945][ T5811] rc_core: IR keymap rc-hauppauge not found
[ 1003.342817][ T5778] usb 6-1: config 0 has no interface number 0
[ 1003.357740][ T5811] Registered IR keymap rc-empty
[ 1003.383712][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1003.394497][ T5778] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1003.422944][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.431031][ T5778] usb 6-1: Product: syz
[ 1003.442296][ T5771] 
[ 1003.442296][ T5771]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1003.442296][ T5771] 
[ 1003.453958][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1003.463293][ T5778] usb 6-1: Manufacturer: syz
[ 1003.474313][ T5771] 
[ 1003.474313][ T5771]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1003.474313][ T5771] 
[ 1003.486555][ T5778] usb 6-1: SerialNumber: syz
[ 1003.530475][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1003.534882][ T5778] usb 6-1: config 0 descriptor??
[ 1003.553385][    T8] usb 2-1: USB disconnect, device number 52
[ 1003.610426][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29
[ 1003.619396][ T5778] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1003.656448][T23200] fido_id[23200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1003.698715][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1003.773463][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1003.813681][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1003.856673][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1003.895746][ T5778] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1003.923472][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1003.976606][ T5778] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1004.002992][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1004.071161][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1004.126415][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1004.193056][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1004.244121][ T5811] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1004.317354][ T5811] mceusb 5-1:0.0: Registered 〉 with mce emulator interface version 1
[ 1004.368776][ T5811] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1004.394484][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1004.402473][ T5778] usb 6-1: USB disconnect, device number 6
[ 1004.454190][ T5778] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1004.475828][ T5811] usb 5-1: USB disconnect, device number 41
[ 1004.513476][ T5778] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1004.623120][ T5778] quatech2 6-1:0.51: device disconnected
[ 1005.223009][ T5811] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1005.291845][T23221] loop1: detected capacity change from 0 to 2048
[ 1005.342017][T23221] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1005.413235][ T5811] usb 5-1: Using ep0 maxpacket: 16
[ 1005.434175][ T5811] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1005.482844][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.493952][T23222] loop5: detected capacity change from 0 to 4096
[ 1005.542522][ T5811] usb 5-1: Product: syz
[ 1005.551882][T23222] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[ 1005.568449][ T5811] usb 5-1: Manufacturer: syz
[ 1005.603031][ T5811] usb 5-1: SerialNumber: syz
[ 1005.630951][ T5811] usb 5-1: config 0 descriptor??
[ 1005.666735][ T5811] visor 5-1:0.0: Sony Clie 3.5 converter detected
[ 1005.811921][T23222] ntfs3: loop5: failed to convert "c46c" to cp1251
[ 1006.106315][ T5811] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0
[ 1006.431216][ T5811] usb 5-1: USB disconnect, device number 42
[ 1006.479357][ T5811] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[ 1006.544344][ T5811] visor 5-1:0.0: device disconnected
[ 1006.662383][T23234] loop5: detected capacity change from 0 to 2048
[ 1007.191182][T23241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7711'.
[ 1007.851967][T23253] loop5: detected capacity change from 0 to 256
[ 1007.894238][T23255] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7717'.
[ 1007.932464][T23253] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d)
[ 1008.223020][T23260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7719'.
[ 1008.261395][T23260] netlink: 'syz.4.7719': attribute type 4 has an invalid length.
[ 1008.380526][T23262] loop5: detected capacity change from 0 to 128
[ 1008.442891][T23262] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1008.562975][T23262] hpfs: filesystem error: improperly stopped
[ 1008.569318][T23262] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1008.599754][T23262] hpfs: You really don't want any checks? You are crazy...
[ 1008.633437][T23262] hpfs: hpfs_map_sector(): read error
[ 1008.710633][T23262] hpfs: code page support is disabled
[ 1008.762990][T23262] hpfs: hpfs_map_4sectors(): unaligned read
[ 1008.769064][T23262] hpfs: hpfs_map_4sectors(): unaligned read
[ 1008.803259][T23262] hpfs: filesystem error: unable to find root dir
[ 1009.196956][T23274] loop4: detected capacity change from 0 to 128
[ 1009.334348][T23274] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1009.494885][T23274] ext4 filesystem being mounted at /1735/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1009.882658][ T7373] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1010.225323][T23291] loop4: detected capacity change from 0 to 1024
[ 1010.843740][T23298] netlink: 312 bytes leftover after parsing attributes in process `syz.4.7737'.
[ 1011.120645][T23298] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7737'.
[ 1011.592302][T23306] loop4: detected capacity change from 0 to 2048
[ 1011.668124][T23306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1011.712904][T21885] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1011.810470][T23306] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[ 1011.938927][T21885] usb 6-1: Using ep0 maxpacket: 16
[ 1011.945217][T23308] loop1: detected capacity change from 0 to 2048
[ 1011.954905][T21885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[ 1011.996593][T21885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1012.048762][T23308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1012.099975][T21885] usb 6-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00
[ 1012.169224][T21885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.186989][T23293] loop3: detected capacity change from 0 to 32768
[ 1012.242052][T21885] usb 6-1: config 0 descriptor??
[ 1012.755978][T21885] lg-g15 0003:046D:C22E.000F: unknown main item tag 0x7
[ 1012.788191][T21885] lg-g15 0003:046D:C22E.000F: unknown main item tag 0x0
[ 1012.816743][T21885] lg-g15 0003:046D:C22E.000F: unknown main item tag 0x1
[ 1012.842940][T21885] lg-g15 0003:046D:C22E.000F: unknown main item tag 0xd
[ 1012.898570][T21885] lg-g15 0003:046D:C22E.000F: hidraw0: USB HID v4.77 Device [HID 046d:c22e] on usb-dummy_hcd.5-1/input0
[ 1012.989191][T21885] usb 6-1: USB disconnect, device number 7
[ 1013.456971][T23316] fido_id[23316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1013.557794][T23327] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1014.259421][T23341] hugetlbfs: Bad value 'ß' for mount option 'size'
[ 1014.259421][T23341] 
[ 1014.292548][T23337] loop1: detected capacity change from 0 to 4096
[ 1014.702990][T23337] ntfs3: loop1: failed to convert "0080" to cp860
[ 1014.739675][T23337] ntfs3: loop1: failed to convert name for inode 1e.
[ 1014.848121][T23343] loop5: detected capacity change from 0 to 4096
[ 1015.043315][T23348] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1015.054739][T23343] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[ 1015.091382][T23343] NILFS (loop5): mounting fs with errors
[ 1015.305716][T23343] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6
[ 1015.359767][T23343] NILFS error (device loop5): nilfs_readdir: bad page in #2
[ 1015.897636][T23358] loop3: detected capacity change from 0 to 4096
[ 1015.952963][T23358] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1016.210694][T23358] ntfs3: loop3: failed to convert "c46c" to cp1251
[ 1016.375910][T23366] netem: change failed
[ 1016.751129][T23370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7769'.
[ 1016.862946][T23374] loop5: detected capacity change from 0 to 2048
[ 1016.976832][T23374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1017.333517][T23381] loop1: detected capacity change from 0 to 2048
[ 1017.400159][T23381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1017.535061][T23381] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[ 1018.412352][T23377] loop4: detected capacity change from 0 to 32768
[ 1018.477521][T23377] 
[ 1018.477521][T23377]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1018.477521][T23377] 
[ 1018.545704][T23397] loop3: detected capacity change from 0 to 4096
[ 1018.615423][T23377] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1018.615423][T23377] 
[ 1018.712186][T23377] xtLookup: xtSearch returned -5
[ 1018.718057][T23402] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7782'.
[ 1018.813110][T23402] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7782'.
[ 1019.081568][T23397] ntfs3: loop3: failed to convert "0080" to cp860
[ 1019.133548][T23397] ntfs3: loop3: failed to convert name for inode 1e.
[ 1019.293165][T23407] loop5: detected capacity change from 0 to 1024
[ 1019.348119][ T7373] 
[ 1019.348119][ T7373]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1019.348119][ T7373] 
[ 1019.404073][ T7373] 
[ 1019.404073][ T7373]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1019.404073][ T7373] 
[ 1019.445297][T23407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1019.539010][T23407] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1019.602936][T23410] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[ 1019.675447][T23412] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_1
[ 1019.738450][T23410] EXT4-fs (loop5): Remounting filesystem read-only
[ 1020.045327][T21660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1020.252710][T23420] loop3: detected capacity change from 0 to 2048
[ 1020.358590][T23421] loop4: detected capacity change from 0 to 2048
[ 1020.471620][T23420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1020.512124][T23421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1020.634418][T23420] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[ 1021.327338][T23438] loop4: detected capacity change from 0 to 512
[ 1021.367117][T23438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1021.401069][T23438] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.7797: bad orphan inode 131083
[ 1021.445041][T23438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1021.563002][   T27] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1021.630771][ T7373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1021.796758][   T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1021.817070][   T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1021.873344][   T27] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1021.895170][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.938595][   T27] usb 6-1: Product: syz
[ 1021.948679][   T27] usb 6-1: Manufacturer: syz
[ 1021.968923][   T27] usb 6-1: SerialNumber: syz
[ 1021.990308][   T27] usb 6-1: config 0 descriptor??
[ 1022.027552][T23437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1022.045022][T23437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1022.274030][T23437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1022.281395][T23437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1022.529360][   T27] Error reading MAC address
[ 1022.544485][   T27] usb 6-1: USB disconnect, device number 8
[ 1023.111851][T23473] loop4: detected capacity change from 0 to 164
[ 1023.183613][   T27] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1023.545243][   T27] usb 2-1: Using ep0 maxpacket: 32
[ 1023.583439][   T27] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1023.610618][   T27] usb 2-1: config 0 has no interface number 0
[ 1023.653767][   T27] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1023.675717][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.902789][   T27] usb 2-1: Product: syz
[ 1023.907043][   T27] usb 2-1: Manufacturer: syz
[ 1023.911677][   T27] usb 2-1: SerialNumber: syz
[ 1023.944562][   T27] usb 2-1: config 0 descriptor??
[ 1023.954150][   T27] smsc95xx v2.0.0
[ 1024.070729][T23490] loop3: detected capacity change from 0 to 128
[ 1024.108340][   T28] audit: type=1326 audit(2000000272.900:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.4.7819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b84d9e0d9 code=0x0
[ 1024.177642][T23490] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[ 1024.268241][T23494] loop5: detected capacity change from 0 to 256
[ 1024.313204][T23494] FAT-fs (loop5): Directory bread(block 64) failed
[ 1024.341820][T23494] FAT-fs (loop5): Directory bread(block 65) failed
[ 1024.351836][T23494] FAT-fs (loop5): Directory bread(block 66) failed
[ 1024.368095][T23494] FAT-fs (loop5): Directory bread(block 67) failed
[ 1024.382459][T23494] FAT-fs (loop5): Directory bread(block 68) failed
[ 1024.394442][T23494] FAT-fs (loop5): Directory bread(block 69) failed
[ 1024.402112][T23494] FAT-fs (loop5): Directory bread(block 70) failed
[ 1024.421781][T23494] FAT-fs (loop5): Directory bread(block 71) failed
[ 1024.430146][T23494] FAT-fs (loop5): Directory bread(block 72) failed
[ 1024.460546][T23494] FAT-fs (loop5): Directory bread(block 73) failed
[ 1024.595516][   T27] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 1024.644078][   T27] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1024.678595][   T27] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1024.716359][   T27] smsc95xx: probe of 2-1:0.67 failed with error -71
[ 1024.743121][   T27] usb 2-1: USB disconnect, device number 53
[ 1024.831003][T22537] IPVS: starting estimator thread 0...
[ 1024.934211][T23499] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1025.461399][T23512] batadv0: entered promiscuous mode
[ 1025.538337][T23512] batadv0: left promiscuous mode
[ 1025.874113][T23521] vivid-007: disconnect
[ 1025.892548][T23521] vivid-007: reconnect
[ 1026.139416][T23524] loop5: detected capacity change from 0 to 4096
[ 1026.262268][T23524] NILFS (loop5): invalid segment: Checksum error in segment payload
[ 1026.310170][T23524] NILFS (loop5): trying rollback from an earlier position
[ 1026.377234][T23524] NILFS (loop5): recovery complete
[ 1026.386966][T23531] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1027.381074][T23543] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7845'.
[ 1027.608527][   T28] audit: type=1326 audit(2000000276.400:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23546 comm="syz.5.7847" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1f899e0d9 code=0x0
[ 1027.961119][T23533] loop1: detected capacity change from 0 to 32768
[ 1027.995564][T23533] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.7841 (23533)
[ 1028.082019][T23533] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1028.122973][T23533] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[ 1028.132056][T23533] BTRFS info (device loop1): setting nodatasum
[ 1028.158543][T23533] BTRFS info (device loop1): force zlib compression, level 3
[ 1028.236826][T23533] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1028.292789][T23533] BTRFS info (device loop1): use lzo compression, level 0
[ 1028.300026][T23533] BTRFS info (device loop1): turning on flush-on-commit
[ 1028.385651][T23533] BTRFS info (device loop1): enabling auto defrag
[ 1028.392217][T23533] BTRFS info (device loop1): max_inline at 4096
[ 1028.502829][T23533] BTRFS info (device loop1): using free space tree
[ 1028.943490][T23576] loop5: detected capacity change from 0 to 1024
[ 1028.967778][T23533] BTRFS info (device loop1): enabling ssd optimizations
[ 1029.304353][ T1148] hfsplus: b-tree write err: -5, ino 25
[ 1029.338393][ T1148] hfsplus: b-tree write err: -5, ino 4
[ 1029.383545][ T1148] hfsplus: b-tree write err: -5, ino 2
[ 1029.461873][T23582] loop3: detected capacity change from 0 to 4096
[ 1029.512956][T23582] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[ 1029.705988][T23582] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1029.751494][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1029.782481][T23582] ntfs3: loop3: Failed to load $Extend (-22).
[ 1029.794295][T23582] ntfs3: loop3: Failed to initialize $Extend.
[ 1030.363009][T23589] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7859'.
[ 1030.423456][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7859'.
[ 1030.810910][T23559] loop4: detected capacity change from 0 to 32768
[ 1031.047645][T23597] loop3: detected capacity change from 0 to 512
[ 1031.093123][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[ 1031.204561][T23599] loop5: detected capacity change from 0 to 128
[ 1031.229404][T23597] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1031.315161][T23599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[ 1031.459657][T23599] System zones: 1-3, 19-19, 35-36
[ 1031.470028][T23597] EXT4-fs (loop3): 1 truncate cleaned up
[ 1031.505343][T23599] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1031.534360][T23597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1031.624102][T23599] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1032.075117][T21660] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1032.107948][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1032.777579][T23621] loop1: detected capacity change from 0 to 24
[ 1032.863198][ T5813] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1033.073661][ T5813] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1033.110651][T23627] loop4: detected capacity change from 0 to 512
[ 1033.127887][ T5813] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1033.170093][T23627] EXT4-fs: Ignoring removed nobh option
[ 1033.182815][ T5813] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1033.200772][T23629] loop1: detected capacity change from 0 to 1024
[ 1033.237680][ T5813] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1033.268238][T23627] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1033.324500][ T5813] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1033.358292][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1033.425485][T23627] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.7883: ea_inode file size=0 entry size=6
[ 1033.440327][T23629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1033.454182][T23627] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.7883: iget: bad extra_isize 90 (inode size 256)
[ 1033.505939][T23629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1033.519673][T23627] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.7883: error while reading EA inode 11 err=-117
[ 1033.651468][T23627] EXT4-fs (loop4): 1 orphan inode deleted
[ 1033.684527][T23627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1034.072002][ T5813] gud 6-1:1.0: Failed to get properties (error=-71)
[ 1034.072039][ T5813] gud: probe of 6-1:1.0 failed with error -71
[ 1034.153029][ T5813] usb 6-1: USB disconnect, device number 9
[ 1034.220054][ T7373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1034.810555][T23646] batadv0: entered promiscuous mode
[ 1034.836170][T23646] batadv0: left promiscuous mode
[ 1035.122115][T23650] loop5: detected capacity change from 0 to 2048
[ 1035.170839][T23650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1035.746858][T23658] loop5: detected capacity change from 0 to 1024
[ 1035.805930][T23658] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[ 1035.926881][T23658] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 2: comm syz.5.7887: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1035.953761][T23658] Quota error (device loop5): qtree_write_dquot: dquota write failed
[ 1035.961949][T23658] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.7887: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1036.023106][T23658] Quota error (device loop5): v2_write_file_info: Can't write info structure
[ 1036.032004][T23658] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.7887: Failed to acquire dquot type 0
[ 1036.090148][T23658] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[ 1036.118628][T23658] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.7887: mark_inode_dirty error
[ 1036.165285][T23658] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[ 1036.212850][T23658] EXT4-fs (loop5): 1 orphan inode deleted
[ 1036.254281][   T79] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1036.274360][T23658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1036.362643][   T79] Quota error (device loop5): remove_tree: Can't read quota data block 1
[ 1036.389678][   T79] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0
[ 1036.454635][T23658] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.7887: Invalid inode table block 1 in block_group 0
[ 1036.600126][T21660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1036.633296][T21660] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1036.693258][T21660] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[ 1036.726957][T21660] EXT4-fs error (device loop5): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[ 1037.619201][T23662] loop3: detected capacity change from 0 to 40427
[ 1037.669387][T23662] F2FS-fs (loop3): Zoned block device path is missing
[ 1037.687047][T23662] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1037.752930][T23662] F2FS-fs (loop3): invalid crc value
[ 1038.223542][T23662] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[ 1038.252795][T23662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1038.284603][T23670] loop5: detected capacity change from 0 to 40427
[ 1038.351907][T23670] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1038.361960][T23670] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1038.433143][   T28] audit: type=1800 audit(2000000287.220:1527): pid=23662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7890" name="file1" dev="loop3" ino=10 res=0 errno=0
[ 1038.477534][T23670] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1038.502987][T23682] f2fs_ckpt-7:3: attempt to access beyond end of device
[ 1038.502987][T23682] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1038.576868][T23682] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1038.729134][T23670] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1038.776158][T23670] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1039.080977][T23681] loop1: detected capacity change from 0 to 32768
[ 1039.230627][T23681] JBD2: Ignoring recovery information on journal
[ 1039.481552][T23697] loop4: detected capacity change from 0 to 136
[ 1039.498313][T23681] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1039.808082][T23681] 
[ 1039.810484][T23681] ======================================================
[ 1039.817561][T23681] WARNING: possible circular locking dependency detected
[ 1039.824607][T23681] syzkaller #0 Not tainted
[ 1039.829049][T23681] ------------------------------------------------------
[ 1039.836085][T23681] syz.1.7896/23681 is trying to acquire lock:
[ 1039.842171][T23681] ffff888077863f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_reflink+0x4cf/0x920
[ 1039.852444][T23681] 
[ 1039.852444][T23681] but task is already holding lock:
[ 1039.859842][T23681] ffff888077863ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_reflink+0x4c0/0x920
[ 1039.869122][T23681] 
[ 1039.869122][T23681] which lock already depends on the new lock.
[ 1039.869122][T23681] 
[ 1039.879553][T23681] 
[ 1039.879553][T23681] the existing dependency chain (in reverse order) is:
[ 1039.888600][T23681] 
[ 1039.888600][T23681] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}:
[ 1039.896472][T23681]        down_read+0x46/0x2e0
[ 1039.901210][T23681]        ocfs2_init_acl+0x30a/0x770
[ 1039.906496][T23681]        ocfs2_mknod+0x1427/0x2310
[ 1039.911659][T23681]        ocfs2_create+0x196/0x430
[ 1039.916717][T23681]        path_openat+0x1705/0x3270
[ 1039.921867][T23681]        do_filp_open+0x1f2/0x430
[ 1039.926962][T23681]        do_sys_openat2+0x134/0x1d0
[ 1039.932213][T23681]        __x64_sys_open+0x11f/0x140
[ 1039.937461][T23681]        do_syscall_64+0x55/0xb0
[ 1039.942430][T23681]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1039.948884][T23681] 
[ 1039.948884][T23681] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}:
[ 1039.957438][T23681]        down_read+0x46/0x2e0
[ 1039.962163][T23681]        ocfs2_start_trans+0x3a8/0x6f0
[ 1039.967676][T23681]        ocfs2_shutdown_local_alloc+0x1f7/0xac0
[ 1039.973953][T23681]        ocfs2_dismount_volume+0x1e5/0x890
[ 1039.979798][T23681]        generic_shutdown_super+0x134/0x2b0
[ 1039.985734][T23681]        kill_block_super+0x44/0x90
[ 1039.990974][T23681]        deactivate_locked_super+0x97/0x100
[ 1039.996921][T23681]        cleanup_mnt+0x3d7/0x460
[ 1040.001896][T23681]        task_work_run+0x1d4/0x260
[ 1040.007061][T23681]        exit_to_user_mode_loop+0xe6/0x110
[ 1040.012917][T23681]        exit_to_user_mode_prepare+0xee/0x180
[ 1040.019039][T23681]        syscall_exit_to_user_mode+0x1a/0x50
[ 1040.025102][T23681]        do_syscall_64+0x61/0xb0
[ 1040.030075][T23681]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1040.036551][T23681] 
[ 1040.036551][T23681] -> #3 (sb_internal#3){.+.+}-{0:0}:
[ 1040.044075][T23681]        ocfs2_start_trans+0x2a9/0x6f0
[ 1040.049581][T23681]        ocfs2_shutdown_local_alloc+0x1f7/0xac0
[ 1040.055872][T23681]        ocfs2_dismount_volume+0x1e5/0x890
[ 1040.061710][T23681]        generic_shutdown_super+0x134/0x2b0
[ 1040.067646][T23681]        kill_block_super+0x44/0x90
[ 1040.072887][T23681]        deactivate_locked_super+0x97/0x100
[ 1040.078816][T23681]        cleanup_mnt+0x3d7/0x460
[ 1040.083808][T23681]        task_work_run+0x1d4/0x260
[ 1040.088959][T23681]        exit_to_user_mode_loop+0xe6/0x110
[ 1040.094817][T23681]        exit_to_user_mode_prepare+0xee/0x180
[ 1040.100916][T23681]        syscall_exit_to_user_mode+0x1a/0x50
[ 1040.106964][T23681]        do_syscall_64+0x61/0xb0
[ 1040.111944][T23681]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1040.118431][T23681] 
[ 1040.118431][T23681] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[ 1040.129017][T23681]        down_write+0x97/0x200
[ 1040.133835][T23681]        ocfs2_reserve_suballoc_bits+0x171/0x44a0
[ 1040.140302][T23681]        ocfs2_reserve_clusters_with_limit+0x3bd/0xc20
[ 1040.147197][T23681]        ocfs2_mknod+0xed1/0x2310
[ 1040.152270][T23681]        ocfs2_create+0x196/0x430
[ 1040.157540][T23681]        path_openat+0x1705/0x3270
[ 1040.162704][T23681]        do_filp_open+0x1f2/0x430
[ 1040.167774][T23681]        do_sys_openat2+0x134/0x1d0
[ 1040.173031][T23681]        __x64_sys_open+0x11f/0x140
[ 1040.178275][T23681]        do_syscall_64+0x55/0xb0
[ 1040.183263][T23681]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1040.189724][T23681] 
[ 1040.189724][T23681] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[ 1040.200294][T23681]        down_write+0x97/0x200
[ 1040.205114][T23681]        ocfs2_reserve_suballoc_bits+0x171/0x44a0
[ 1040.211577][T23681]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[ 1040.218483][T23681]        ocfs2_extend_dir+0xd3c/0x49b0
[ 1040.223984][T23681]        ocfs2_prepare_dir_for_insert+0x30e7/0x5520
[ 1040.230617][T23681]        ocfs2_mknod+0x831/0x2310
[ 1040.235695][T23681]        ocfs2_mkdir+0x196/0x430
[ 1040.240675][T23681]        vfs_mkdir+0x2a5/0x470
[ 1040.245476][T23681]        do_mkdirat+0x1dc/0x450
[ 1040.250357][T23681]        __x64_sys_mkdirat+0x89/0xa0
[ 1040.255680][T23681]        do_syscall_64+0x55/0xb0
[ 1040.260677][T23681]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1040.267144][T23681] 
[ 1040.267144][T23681] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[ 1040.275969][T23681]        __lock_acquire+0x37ef/0x7d80
[ 1040.281377][T23681]        lock_acquire+0x19e/0x420
[ 1040.286432][T23681]        down_write+0x97/0x200
[ 1040.291238][T23681]        ocfs2_reflink+0x4cf/0x920
[ 1040.296405][T23681]        ocfs2_vfs_reflink+0x333/0x450
[ 1040.301905][T23681]        ocfs2_reflink_ioctl+0x3a0/0x450
[ 1040.307578][T23681]        ocfs2_ioctl+0x5b9/0x7e0
[ 1040.312565][T23681]        __se_sys_ioctl+0xfd/0x170
[ 1040.317719][T23681]        do_syscall_64+0x55/0xb0
[ 1040.322694][T23681]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1040.329147][T23681] 
[ 1040.329147][T23681] other info that might help us debug this:
[ 1040.329147][T23681] 
[ 1040.339403][T23681] Chain exists of:
[ 1040.339403][T23681]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[ 1040.339403][T23681] 
[ 1040.354688][T23681]  Possible unsafe locking scenario:
[ 1040.354688][T23681] 
[ 1040.362165][T23681]        CPU0                    CPU1
[ 1040.367605][T23681]        ----                    ----
[ 1040.373002][T23681]   lock(&oi->ip_xattr_sem);
[ 1040.377632][T23681]                                lock(&journal->j_trans_barrier);
[ 1040.385482][T23681]                                lock(&oi->ip_xattr_sem);
[ 1040.392661][T23681]   lock(&ocfs2_file_ip_alloc_sem_key);
[ 1040.398265][T23681] 
[ 1040.398265][T23681]  *** DEADLOCK ***
[ 1040.398265][T23681] 
[ 1040.406430][T23681] 4 locks held by syz.1.7896/23681:
[ 1040.411660][T23681]  #0: ffff88805965e418 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1040.421009][T23681]  #1: ffff88807797ed98 (&type->i_mutex_dir_key#24/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450
[ 1040.431784][T23681]  #2: ffff8880778642d8 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: ocfs2_vfs_reflink+0x2f3/0x450
[ 1040.442819][T23681]  #3: ffff888077863ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_reflink+0x4c0/0x920
[ 1040.452539][T23681] 
[ 1040.452539][T23681] stack backtrace:
[ 1040.458458][T23681] CPU: 0 PID: 23681 Comm: syz.1.7896 Not tainted syzkaller #0
[ 1040.465962][T23681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1040.476053][T23681] Call Trace:
[ 1040.479368][T23681]  <TASK>
[ 1040.482344][T23681]  dump_stack_lvl+0x18c/0x250
[ 1040.487066][T23681]  ? load_image+0x420/0x420
[ 1040.491632][T23681]  ? show_regs_print_info+0x20/0x20
[ 1040.496884][T23681]  ? print_circular_bug+0x12b/0x1a0
[ 1040.502217][T23681]  check_noncircular+0x2fc/0x400
[ 1040.507203][T23681]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1040.512445][T23681]  ? lockdep_lock+0xf5/0x230
[ 1040.517093][T23681]  ? lockdep_unlock+0x146/0x2e0
[ 1040.521992][T23681]  ? _find_first_zero_bit+0xd6/0x100
[ 1040.527389][T23681]  __lock_acquire+0x37ef/0x7d80
[ 1040.532289][T23681]  ? ocfs2_refresh_inode+0x900/0x900
[ 1040.537642][T23681]  ? verify_lock_unused+0x140/0x140
[ 1040.542898][T23681]  ? lockdep_unlock+0x146/0x2e0
[ 1040.547812][T23681]  lock_acquire+0x19e/0x420
[ 1040.552362][T23681]  ? ocfs2_reflink+0x4cf/0x920
[ 1040.557170][T23681]  ? ocfs2_downconvert_lock+0x4c0/0x4c0
[ 1040.562803][T23681]  ? __might_sleep+0xe0/0xe0
[ 1040.567446][T23681]  ? read_lock_is_recursive+0x20/0x20
[ 1040.572948][T23681]  ? verify_lock_unused+0x140/0x140
[ 1040.578191][T23681]  ? aa_get_newest_label+0xfd/0x5c0
[ 1040.583466][T23681]  down_write+0x97/0x200
[ 1040.587756][T23681]  ? ocfs2_reflink+0x4cf/0x920
[ 1040.592568][T23681]  ? down_read_killable+0x340/0x340
[ 1040.597823][T23681]  ocfs2_reflink+0x4cf/0x920
[ 1040.602450][T23681]  ? ocfs2_clear_ext_refcount+0x760/0x760
[ 1040.608220][T23681]  ? __asan_memset+0x22/0x40
[ 1040.612869][T23681]  ? __dquot_initialize+0x21f/0xd10
[ 1040.618116][T23681]  ? kasan_quarantine_put+0xd8/0x220
[ 1040.623452][T23681]  ? dquot_initialize+0x20/0x20
[ 1040.628357][T23681]  ? down_write+0x16e/0x200
[ 1040.632905][T23681]  ? down_read_killable+0x340/0x340
[ 1040.638144][T23681]  ? HAS_UNMAPPED_ID+0x101/0x170
[ 1040.643124][T23681]  ? inode_permission+0xf3/0x480
[ 1040.648097][T23681]  ? bpf_lsm_inode_permission+0x9/0x10
[ 1040.653597][T23681]  ? security_inode_permission+0xb0/0xf0
[ 1040.659291][T23681]  ocfs2_vfs_reflink+0x333/0x450
[ 1040.664285][T23681]  ocfs2_reflink_ioctl+0x3a0/0x450
[ 1040.669431][T23681]  ? ocfs2_add_refcount_flag+0xe10/0xe10
[ 1040.675107][T23681]  ? __lock_acquire+0x7d80/0x7d80
[ 1040.680186][T23681]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1040.685696][T23681]  ? __might_fault+0xaa/0x120
[ 1040.690413][T23681]  ? __might_fault+0xc6/0x120
[ 1040.695130][T23681]  ? __might_fault+0xaa/0x120
[ 1040.699850][T23681]  ocfs2_ioctl+0x5b9/0x7e0
[ 1040.704310][T23681]  ? ocfs2_fileattr_set+0x800/0x800
[ 1040.709556][T23681]  ? __fget_files+0x28/0x460
[ 1040.714233][T23681]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1040.719211][T23681]  ? security_file_ioctl+0x80/0xa0
[ 1040.724388][T23681]  ? ocfs2_fileattr_set+0x800/0x800
[ 1040.729657][T23681]  __se_sys_ioctl+0xfd/0x170
[ 1040.734293][T23681]  do_syscall_64+0x55/0xb0
[ 1040.738774][T23681]  ? clear_bhb_loop+0x40/0x90
[ 1040.743490][T23681]  ? clear_bhb_loop+0x40/0x90
[ 1040.748237][T23681]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1040.754280][T23681] RIP: 0033:0x7fe13b79e0d9
[ 1040.758776][T23681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1040.778420][T23681] RSP: 002b:00007fe13c5f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1040.786895][T23681] RAX: ffffffffffffffda RBX: 00007fe13ba25fa0 RCX: 00007fe13b79e0d9
[ 1040.794901][T23681] RDX: 00002000000001c0 RSI: 0000000040186f04 RDI: 0000000000000004
[ 1040.802903][T23681] RBP: 00007fe13b835024 R08: 0000000000000000 R09: 0000000000000000
[ 1040.810901][T23681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1040.818904][T23681] R13: 00007fe13ba26038 R14: 00007fe13ba25fa0 R15: 00007ffeb6af7138
[ 1040.826930][T23681]  </TASK>
[ 1040.998232][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[ 1041.506506][T23704] loop5: detected capacity change from 0 to 32768
[ 1041.528179][T23704] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.7899 (23704)
[ 1041.567788][T23704] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1041.582301][T23704] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1041.616756][T23704] BTRFS info (device loop5): setting nodatacow, compression disabled
[ 1041.638331][T23704] BTRFS info (device loop5): turning on flush-on-commit
[ 1041.658526][T23704] BTRFS info (device loop5): trying to use backup root at mount time
[ 1041.674908][T23704] BTRFS info (device loop5): max_inline at 0
[ 1041.687836][T23704] BTRFS info (device loop5): using free space tree
[ 1042.024559][ T1148] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1042.037945][T23704] BTRFS error (device loop5): failed to load root extent
[ 1042.050533][T23704] BTRFS warning (device loop5): try to load backup roots slot 1
[ 1042.059239][ T1148] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1042.074219][T23704] BTRFS warning (device loop5): couldn't read tree root
[ 1042.081294][T23704] BTRFS warning (device loop5): try to load backup roots slot 2
[ 1042.090250][ T1148] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1042.102196][T23704] BTRFS warning (device loop5): couldn't read tree root
[ 1042.109467][T23704] BTRFS warning (device loop5): try to load backup roots slot 3
[ 1042.124564][T23704] BTRFS info (device loop5): enabling ssd optimizations
[ 1042.131687][T23704] BTRFS info (device loop5): auto enabling async discard
[ 1042.139725][T23704] BTRFS info (device loop5): rebuilding free space tree
[ 1042.157789][T23704] BTRFS info (device loop5): checking UUID tree
[ 1042.286693][T21660] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf