last executing test programs:

8m33.346516729s ago: executing program 2 (id=2387):
unshare(0x20020400)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4, 0x4)

8m33.066337836s ago: executing program 2 (id=2388):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0)

8m32.9129255s ago: executing program 2 (id=2390):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0x48}}, 0x20000080)

8m32.804165662s ago: executing program 2 (id=2392):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000180)='./file0\x00', 0x200010, &(0x7f00000008c0)=ANY=[], 0x1, 0xf43, &(0x7f0000002140)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file4\x00', 0x1000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

8m32.142450039s ago: executing program 2 (id=2399):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0xfffffff6, 0x1004}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}})

8m30.923952498s ago: executing program 2 (id=2411):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000340)={[{@uni_xlate}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}]}, 0x83, 0x2ae, &(0x7f0000001980)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

8m30.377153551s ago: executing program 32 (id=2411):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000340)={[{@uni_xlate}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@shortname_winnt}, {@numtail}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}]}, 0x83, 0x2ae, &(0x7f0000001980)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m45.682093259s ago: executing program 4 (id=6305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x1}}, {0x6, 0x2, [0xfffc]}}]}]}, 0x58}}, 0x0)

1m45.546554423s ago: executing program 4 (id=6306):
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2)

1m45.357679707s ago: executing program 4 (id=6309):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000200)='i', 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x9, 0x4)

1m45.091997274s ago: executing program 4 (id=6313):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3970461, &(0x7f0000000440)={[{}]})

1m44.577816946s ago: executing program 4 (id=6320):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff0007058102000200"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m43.99214165s ago: executing program 4 (id=6324):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10)
write(r0, &(0x7f00000008c0)="1b0000001e005f0214fffffffffffff807000000a6000000000000", 0x1b)

1m43.475234333s ago: executing program 33 (id=6324):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10)
write(r0, &(0x7f00000008c0)="1b0000001e005f0214fffffffffffff807000000a6000000000000", 0x1b)

53.108173748s ago: executing program 1 (id=6749):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)

52.791762516s ago: executing program 1 (id=6752):
r0 = epoll_create1(0x80000)
r1 = inotify_init1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000002})

52.651811469s ago: executing program 1 (id=6755):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000)

52.415900085s ago: executing program 1 (id=6757):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000040)=ANY=[@ANYBLOB="726f6f746469723d30303030303030303030303030303030303030362c616e63686f723d30303030303030303030303030303030303132372c7569643d666f726765742c616e63686f723d30303030303030303030303030303030303030332c766f6c756d653d30303030303030303030303030303030313032332c757466382c6e6f6164696e6963622c6c617374626c6f636b3d30303030303030303030303030303030303030322c696f636861727365743d6d616363656c7469632c00de94bafa4af612c980e4d9302173ef495bdcd64890c1a24a8760a5d06fe5659a20bcc3796dbc0ed5e2b53ef0dc06e9bda18c2dfcb0afc57ba9f310f47226bb68fb13776ae17723504afe498a7656f07942e66415e914ac0a3218733df64ce877413393073ea8f0f2b8548c4c650da79e982a816930cfe7dac991323e187105f29fde1b773fc15fa6f653d2540eac44176341d52fb605b4a6b33e8f8c59caf8ed4ce0d4e0bf34e995733863772208028d14"], 0xff, 0xc34, &(0x7f0000000f80)="$eJzs3U1sXNd9N+D/ueSII/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkmQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQomxGFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sWJr5445f4PAE+US/7/HwAAAAAAAAAAAAAA9rsURTwdKeYvrqep6n1X/UKnduPm5OjY9tUOpqrmQFW+/KmfPHX6zJdeGjnbywud2Y+of799Nt6YuHS+8erc9fmF9uJie7oxOdu5Mjfd3vERdlt/q2PVCWhcf/PG9NWri41TL57etPvm8IdDTx0ZPjfy/PHnemUnR8fGJm4XqfeXH7znhnTdbYbHgSjieKR44Xs/Ta2IKGL356L+YMd+q4NVJ45VnZgcHas6MtNpzS6VO8d7J6KIaPRVavbO0fZjEYO1B9qHu2tGLJfNLxt8rOzexHxroXV5pt0Yby0sdZY6c7Pjqdvasj+NKOJsiliJiLWhOw9XiyIGI8V3Dq+nyxEx0DsPX6wmBt+9HcUe9nEHynY2ahErxSMwZvvYUBTxeqT42XtH40q+zlTXmi9EvF7mDyLeKfOViFR+Mc5EfLDN94hH02AU8efl+J9bT9PV9aB3XbnwtcZXZq/O9ZXtXVd+yfvDHVeKh3R/OLglH4x9fm2qRxGt6oq/nu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2K52Nmc3AN5YuB4Gk/pIc8lfpLVo4g/zvP/vvWwGwMAAAAAAAAAAAAAAAAAAPBEK+InkeLl94+mlehfU7wze61xqXV5prsq7HituzRwb830jY2NjUbqZjPnVM7lnCs5V3Ou5Ywi18/ZzDmVcznnSs7VnGs5YyDXz9nMOZVzOedKztWcazljMNfP2cw5lXM550rO1ZxrOWOfrN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA4KaKIX0SKb39jPUWKiGbEVHRzdehhtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2lIr4fKRp/0Ly1bTAiUvVv19HylzPRPFDmJ6M5UuYr0Tyfs1XlYPNbD6H97E4tFfHjSDFUf/fWgOfxr3Xf3foaxDvfvP3us4PdHOjtHP5w6Kkjh8+NjP3as3d7nbZrwLELndkbNxuTo2NjE32bB/Onf7Jv23D+3OL+dJ2IWHzr7TdbMzPthXt/UX4FdlH9EXqRBp+UnnpRvYjBfdGMh9N3ngDl/f+DSPHb7/9774bfvf/X4/913926w8fP/+T2/f/lrQfa4f1/cGu9fP8v7+nb3f+f7tv2cv7dSG0wor50fb52JKK++NbbxzvXW9fa19qzZ06c+PLIyJdPn6gdiKhf7cy0+17dl9MFAAAAAAAAAAAAAAAA8OCkIn43UrR+vJ4aEXGzmq81fG7k+ePPDcRANd9q07ztNyYunW+8Ond9fqG9uNiebkzOdq7MTbd3+nH1arrX5OjYnnTmYx3c4/YfrL86N//WQufaHy5tu/9Q/fzlxaWF1pXtd8fBKCKa/VuOVQ2eHB2rGj3Tac1WVce3nUz/y6ulIv4jUlw500ifz9vy/P+tM/w3zf9f3nqgPZr//4m+beVnplTEzyPFb/3Fs/H5qp2H4o5zlsv9TaQ4dvZzuVwcKMv12tB9rkB3ZmBZ9n8ixT/8YnPZ3nzIp2+XPbnjE/uIKMf/cKT4/p99N349b9v8/Iftx//Q1gPt0fg/07ft0KbnFey66+TxPx4pXnn63fiNvO2jnv/Re/bG0Vz41vM59mj8P9W3bTh/7m/en64DAAAAAAAAAAA80mqpiL+NFD8cG0wv5W07+ft/01sPtEd//+vTfdum7896RR/7YtcnFQAAAAD2iVoq4ieR4trSu7fmUG+e/903//N3bs//HE1b9lZ/zvcr1XMD7uef//Ubzp87tftuAwAAAAAAAAAAAAAAAAAAwL6SUhEv5fXUp6r5/NN3XU99NVK89l8v5HLpSFmutw78cPVr/eLc7PHzMzNzV1pLrcsz7cbEfOtKu6z7TKRY/+vP5bpFtb56b7357hrvt9diX4gUY3/XK9tdi723NvkzvbLL7ZNl2U9Eiv/8+81le+tYf+r2cU+VZf8qUnz9n7Yve+R22dNl2e9Gih99vdEre6gs23s+6qdvl33xylyxB6MCAAAAAAAAAAAAAAAAAADAk6aWivjTSPHf11duzeXP6//X+t5W3vlm33r/W9ys1vkfrtb/v9vre1n/v3quwPLdPhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4O1LMX1xPq0Pl+676hc7sjZuTo2PbVzuYqpoDVfnyp37y1OkzX3pp5GwvP7r+/faZeGPi0vnGq3PX5xfai4vt6cbkbOfK3HR7x0fYbf2tjlUnoHH9zRvTV68uNk69eHrT7pvDHw49dWT43Mjzx5/rlZ0cHRub6CszWLvnT79Dusv2A1HEX0aKF7730/TDoYgidn8uPua7s9cOVp04VnVicnSs6shMpzW7VO4c752IIqLRV6nZO0cPYCx2pRmxXDa/bPCxsnsT862F1uWZdmO8tbDUWerMzY6nbmvL/jSiiLMpYiUi1obuPFwtingzUnzn8Hr656GIgd55+OLFia+eOHX3dhR72McdKNvZqEWsFB81Ztt0mE2Gooh/jBQ/e+9o/MtQxGB0f+ILEa+X+YOId6I73qn8YpyJ+MBpfWwMRhH/W47/ufX03lB5PehdVy58rfGV2atzfWV715VH/v7wQO3v+0k9ivhRdcVfT//qv2sAAAAAAAAAAAAAAACAfaSIX40UL79/NFXzg2/NKe7MXmtcal2e6U7r6839682Z3tjY2GikbjZzTuVczrmSczXnWs4ocv2czTLrGxtT+f1yzpWcqznXcsZArp+zmXMq53LOlZyrOddyxmCun7OZcyrncs6VnKs513LGPpm7BwAAAAAAAAAAAAAAAAAAPF6K6p8U3/7GetoYqtaXHujtW7Ue6GPv/wIAAP//0xz3/w==")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

51.496144538s ago: executing program 1 (id=6762):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
syz_emit_ethernet(0x3a, &(0x7f0000000480)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa0100fd, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)

50.799966324s ago: executing program 1 (id=6770):
syz_clone3(&(0x7f00000002c0)={0x80001000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x2, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

50.373148325s ago: executing program 34 (id=6770):
syz_clone3(&(0x7f00000002c0)={0x80001000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x2, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

16.772607262s ago: executing program 6 (id=6979):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001300050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="1a2006000001000024001a80200004801c00088008"], 0x44}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000)

16.421883271s ago: executing program 6 (id=6982):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

16.197888956s ago: executing program 6 (id=6985):
unshare(0x22020600)
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x28e40)
fadvise64(r0, 0x4, 0x7, 0x300)

15.836289215s ago: executing program 6 (id=6986):
r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$snddsp(r1, 0x0, 0x0)

15.61275501s ago: executing program 6 (id=6988):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

15.386254636s ago: executing program 6 (id=6990):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0)

4.276564656s ago: executing program 3 (id=7062):
r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c)

4.035947812s ago: executing program 3 (id=7064):
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@memory_low}, {@memory_low}, {@noquota}, {@alloc_mode_def}, {@data_flush}, {@discard_unit_segment}, {@noinline_xattr}, {@noextent_cache}, {@age_extent_cache}, {@quota}, {@resgid}, {@resgid}, {@jqfmt_vfsv1}, {@usrjquota={'usrjquota', 0x3d, '-)$-.%\'*,'}}]}, 0xfc, 0x5512, &(0x7f00000079c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x4ef, 0x40a, 0x7})

2.205891206s ago: executing program 3 (id=7076):
unshare(0x60600)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0)

2.005406641s ago: executing program 3 (id=7079):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@flushoncommit}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f00000003c0))

1.560038002s ago: executing program 5 (id=7083):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a402b, &(0x7f00000000c0)=ANY=[@ANYBLOB='nr_inodes=G,size=e'])

1.476166084s ago: executing program 0 (id=7084):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd70100400000008000000080009000200000008000c00a80a000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20)

1.462746275s ago: executing program 5 (id=7085):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000001040)={0xdb, 0x0, 0x7})

1.23876729s ago: executing program 0 (id=7086):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480051ff", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf254a0000000f00a8007365636f6e646e616d65000008000300010000000800010070"], 0x48}, 0x1, 0x0, 0x0, 0x4500}, 0x240001d0)
write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

1.127346763s ago: executing program 5 (id=7087):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000008140)={0x2020}, 0x207f)
pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)

982.872496ms ago: executing program 0 (id=7088):
setresuid(0x0, 0xee01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x45, &(0x7f0000000040), 0x4)

856.021269ms ago: executing program 5 (id=7089):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x4}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003740)=[{{&(0x7f0000000880)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000)

782.463511ms ago: executing program 0 (id=7090):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005480)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4)

626.441584ms ago: executing program 5 (id=7091):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x3000cd0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x308, &(0x7f0000000400)="$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")
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x10, 0x3a, 0xffffffff})

608.107495ms ago: executing program 0 (id=7092):
unshare(0x22020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7, 0xa3, 0x10}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}, 0x38)

361.013321ms ago: executing program 0 (id=7093):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000003c0)={&(0x7f00000007c0)=[{0x1, 0x1000, 0x0, 0x0}], 0x1})

272.374333ms ago: executing program 35 (id=6990):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0)

242.234044ms ago: executing program 5 (id=7095):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x22004d0, &(0x7f0000000100)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d372c696f636861727365743d63703935302c00ba266516f6fa4924d9fba264348e497675bf335802186301933c289a656051fe8b3ae727ac44171791dc80"], 0x4, 0x33a, &(0x7f0000000200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

241.418394ms ago: executing program 3 (id=7096):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x0, 0x0, {0x81}}, 0x14}}, 0x0)

0s ago: executing program 3 (id=7097):
timer_create(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffff9}]}}}]}, 0x3c}}, 0x4000010)

kernel console output (not intermixed with test programs):

 `syz.3.5870'.
[  690.535310][T20237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5869'.
[  690.853233][    T9] logitech-djreceiver 0003:046D:C71E.0040: hidraw0: USB HID v20.00 Joystick [HID 046d:c71e] on usb-dummy_hcd.4-1/input0
[  691.053202][    T9] usb 5-1: USB disconnect, device number 21
[  691.129031][T20249] kernel profiling enabled (shift: 9)
[  691.897907][T20264] loop4: detected capacity change from 0 to 4096
[  691.968327][T20269] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  692.017097][T20264] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  692.054774][T20264] Remounting filesystem read-only
[  692.060084][T20264] NILFS error (device loop4): nilfs_readdir: bad page in #2
[  692.076656][T20255] loop1: detected capacity change from 0 to 32768
[  692.935059][  T178] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  693.136854][  T178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.181472][  T178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  693.204960][  T178] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  693.222954][  T178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.232217][T20290] loop9: detected capacity change from 0 to 255852544
[  693.246248][  T178] usb 5-1: config 0 descriptor??
[  693.680365][  T178] arvo 0003:1E7D:30D4.0041: unknown main item tag 0x1
[  693.709802][  T178] arvo 0003:1E7D:30D4.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  693.734859][T13971] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  693.885812][  T178] arvo 0003:1E7D:30D4.0041: couldn't init struct arvo_device
[  693.893322][  T178] arvo 0003:1E7D:30D4.0041: couldn't install keyboard
[  693.918302][T20309] loop0: detected capacity change from 0 to 512
[  693.918870][T13971] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  693.928647][  T178] arvo: probe of 0003:1E7D:30D4.0041 failed with error -71
[  693.964128][T20309] FAT-fs (loop0): Unrecognized mount option "tots" or missing value
[  693.980933][T13971] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  694.007825][  T178] usb 5-1: USB disconnect, device number 22
[  694.011381][T13971] usb 2-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00
[  694.067071][T13971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.093275][T20297] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  694.107383][T20297] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  694.128292][T13971] io_edgeport 2-1:1.0: Edgeport 4 port adapter converter detected
[  694.164056][T13971] usb 2-1:   detected
[  694.344953][T13971] usb 2-1: Edgeport 4 port adapter converter now attached to ttyUSB0
[  694.384311][T13971] usb 2-1: Edgeport 4 port adapter converter now attached to ttyUSB1
[  694.425558][T13971] usb 2-1: Edgeport 4 port adapter converter now attached to ttyUSB2
[  694.466813][T13971] usb 2-1: Edgeport 4 port adapter converter now attached to ttyUSB3
[  694.565164][T13971] usb 2-1: USB disconnect, device number 47
[  694.571183][    C1] usb 2-1: edge_interrupt_callback - Error -19 submitting control urb
[  694.622872][T13971] edgeport_4 ttyUSB0: Edgeport 4 port adapter converter now disconnected from ttyUSB0
[  694.655223][T13971] edgeport_4 ttyUSB1: Edgeport 4 port adapter converter now disconnected from ttyUSB1
[  694.658477][T20322] loop9: detected capacity change from 0 to 255852544
[  694.697881][T13971] edgeport_4 ttyUSB2: Edgeport 4 port adapter converter now disconnected from ttyUSB2
[  694.740308][T13971] edgeport_4 ttyUSB3: Edgeport 4 port adapter converter now disconnected from ttyUSB3
[  694.786479][T13971] io_edgeport 2-1:1.0: device disconnected
[  694.911814][   T27] audit: type=1326 audit(1787617170.624:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.4.5908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7af559e0d9 code=0x0
[  694.942564][T20329] ip_tables: iptables: counters copy to user failed while replacing table
[  695.042918][T20325] loop0: detected capacity change from 0 to 4096
[  695.173244][T20332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  695.956983][T20353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5921'.
[  697.422824][T20403] xt_time: invalid argument - start or stop time greater than 23:59:59
[  697.520774][T20405] loop1: detected capacity change from 0 to 4096
[  697.550948][T20405] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  697.574596][    T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  697.754598][    T9] usb 4-1: Using ep0 maxpacket: 16
[  697.761816][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.774035][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.784024][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  697.797561][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  697.806712][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.818700][    T9] usb 4-1: config 0 descriptor??
[  698.165494][T20408] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  698.172028][T20408] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  698.182256][T20408] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  698.193488][T20408] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[  698.200452][T20408] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  698.207913][T20408] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  698.214818][T20408] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  698.221710][T20408] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  698.228331][T20408] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  698.244304][T20408] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  698.252553][T20408] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  698.282351][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0042/input/input53
[  698.284580][T20408] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  698.331161][T20408] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  698.357906][T20413] tipc: Enabled bearer <ib:wg1>, priority 0
[  698.400598][    T9] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  698.495216][T13971] usb 4-1: USB disconnect, device number 37
[  698.638817][T20414] fido_id[20414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  699.260186][T20437] dummy0: entered promiscuous mode
[  699.268867][T20437] macsec2: entered promiscuous mode
[  699.274353][T20437] macsec2: entered allmulticast mode
[  699.289812][T20437] dummy0: entered allmulticast mode
[  699.300956][T20437] dummy0: left allmulticast mode
[  699.340165][T20437] dummy0: left promiscuous mode
[  700.594550][ T5839] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  700.804511][ T5839] usb 2-1: Using ep0 maxpacket: 16
[  700.807927][T20458] loop4: detected capacity change from 0 to 32768
[  700.846201][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  700.865135][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  700.905051][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  700.961534][ T5839] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  700.977628][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.016628][ T5839] usb 2-1: config 0 descriptor??
[  701.512432][ T5839] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0043/input/input54
[  701.638101][T20489] loop4: detected capacity change from 0 to 512
[  701.640519][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5982'.
[  701.673668][T20489] EXT4-fs: Ignoring removed nobh option
[  701.689609][ T5839] microsoft 0003:045E:07DA.0043: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  701.700902][T20489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  701.763306][ T5839] usb 2-1: USB disconnect, device number 48
[  701.804864][T20489] EXT4-fs (loop4): 1 truncate cleaned up
[  701.812081][T20489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  701.920569][T20490] fido_id[20490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  702.059589][T11778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  702.221567][T20494] loop0: detected capacity change from 0 to 4096
[  702.276408][T20496] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  702.402107][T20494] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  702.504514][T20494] Remounting filesystem read-only
[  702.510314][T20494] NILFS error (device loop0): nilfs_readdir: bad page in #2
[  702.662389][T20497] loop4: detected capacity change from 0 to 8192
[  702.719327][T20497] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  702.790336][T20497] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  702.809674][T20497] REISERFS (device loop4): using ordered data mode
[  702.819749][T20497] reiserfs: using flush barriers
[  702.834924][T20497] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  702.865112][T20497] REISERFS (device loop4): checking transaction log (loop4)
[  702.919322][T20497] REISERFS (device loop4): Using r5 hash to sort names
[  702.948273][T20497] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  702.972865][T20497] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  703.065210][T20497] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  703.122839][T20497] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  703.206039][T20497] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  703.278804][T20497] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  703.311033][T20516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5991'.
[  703.584568][ T5814] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  703.796261][ T5814] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  703.812916][ T5814] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  703.842095][ T5814] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  703.860920][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.883010][T20515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  703.891807][T20515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  703.910736][ T5814] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  704.099982][T20531] netlink: 'syz.4.5999': attribute type 1 has an invalid length.
[  704.100100][   T27] audit: type=1326 audit(1787617179.814:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  704.124503][T20531] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5999'.
[  704.185452][   T27] audit: type=1326 audit(1787617179.824:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  704.275029][   T27] audit: type=1326 audit(1787617179.824:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  704.395072][   T27] audit: type=1326 audit(1787617179.834:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  704.452332][ T5814] usb 2-1: USB disconnect, device number 49
[  704.492339][   T27] audit: type=1326 audit(1787617179.834:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  704.594216][   T27] audit: type=1326 audit(1787617179.834:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  704.670001][   T27] audit: type=1326 audit(1787617179.834:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  704.742488][   T27] audit: type=1326 audit(1787617179.834:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  704.768421][   T27] audit: type=1326 audit(1787617179.834:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  704.821751][   T27] audit: type=1326 audit(1787617179.834:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.0.5998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd98b99e0d9 code=0x7ffc0000
[  705.348766][T20559] loop1: detected capacity change from 0 to 1024
[  705.605739][T20565] netlink: 'syz.0.6015': attribute type 49 has an invalid length.
[  706.673439][T20567] loop4: detected capacity change from 0 to 40427
[  706.723690][T20567] F2FS-fs (loop4): Found nat_bits in checkpoint
[  706.786366][T20577] loop0: detected capacity change from 0 to 32768
[  706.871147][T20577] JBD2: Ignoring recovery information on journal
[  706.903156][T20577] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  706.912429][T20577] JBD2: bad block at offset 32
[  706.991947][T20577] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  707.000340][T20567] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  707.021247][T20577] (syz.0.6021,20577,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0
[  707.046021][T20588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.070142][T20588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.190497][T11778] syz-executor: attempt to access beyond end of device
[  707.190497][T11778] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  707.192299][ T5774] ocfs2: Unmounting device (7,0) on (node local)
[  707.210762][T11778] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  707.428145][T20588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.466654][T20588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.660442][T20588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.695992][T20588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.928535][T20588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.965561][T20588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.283897][T20588] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  708.302180][T20592] loop0: detected capacity change from 0 to 32768
[  708.323373][T20605] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  708.326564][T20588] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  708.358658][T20588] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  708.368221][T20588] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  708.396899][T20592] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  708.400800][T20588] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  708.414031][T20588] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  708.435792][T20588] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  708.444229][T20588] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  708.614904][T20592] XFS (loop0): Ending clean mount
[  708.830458][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  708.854766][   T56] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  709.059188][   T56] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  709.094814][   T56] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  709.114823][   T56] usb 4-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00
[  709.156954][   T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.215444][T20620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  709.222846][T20620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  709.267155][   T56] io_edgeport 4-1:1.0: Edgeport 4 port adapter converter detected
[  709.303414][   T56] usb 4-1:   detected
[  709.512824][   T56] usb 4-1: Edgeport 4 port adapter converter now attached to ttyUSB0
[  709.543184][   T56] usb 4-1: Edgeport 4 port adapter converter now attached to ttyUSB1
[  709.582684][   T56] usb 4-1: Edgeport 4 port adapter converter now attached to ttyUSB2
[  709.619748][   T56] usb 4-1: Edgeport 4 port adapter converter now attached to ttyUSB3
[  709.769496][T20623] loop1: detected capacity change from 0 to 32768
[  709.820753][   T56] usb 4-1: USB disconnect, device number 38
[  709.824896][T20623] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  709.827132][    C1] usb 4-1: edge_interrupt_callback - Error -19 submitting control urb
[  709.849106][   T56] edgeport_4 ttyUSB0: Edgeport 4 port adapter converter now disconnected from ttyUSB0
[  709.864001][   T56] edgeport_4 ttyUSB1: Edgeport 4 port adapter converter now disconnected from ttyUSB1
[  709.879258][   T56] edgeport_4 ttyUSB2: Edgeport 4 port adapter converter now disconnected from ttyUSB2
[  709.901534][   T56] edgeport_4 ttyUSB3: Edgeport 4 port adapter converter now disconnected from ttyUSB3
[  709.913126][   T56] io_edgeport 4-1:1.0: device disconnected
[  710.031242][T20623] XFS (loop1): Ending clean mount
[  710.101988][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  710.585884][T20658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6047'.
[  710.769265][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6050'.
[  710.866075][T20664] team0: Device xfrm0 is of different type
[  711.090745][T20670] loop4: detected capacity change from 0 to 1024
[  711.500647][T20680] loop4: detected capacity change from 0 to 2048
[  711.587171][T20680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  711.764658][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6062'.
[  711.811851][T20693] loop1: detected capacity change from 0 to 512
[  711.820911][T11778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.911129][T20693] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #11: block 10: comm syz.1.6063: lblock 0 mapped to illegal pblock 10 (length 1)
[  711.943079][T20693] EXT4-fs (loop1): Remounting filesystem read-only
[  711.980987][T20693] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -5)
[  712.065250][T20693] EXT4-fs (loop1): 1 orphan inode deleted
[  712.072512][T20693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  712.300264][T20704] loop0: detected capacity change from 0 to 2048
[  712.301216][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  712.381570][T20709] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  712.522962][T20704] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..'
[  712.605189][T20704] Remounting filesystem read-only
[  712.674857][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6072'.
[  712.757322][ T5774] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  712.774784][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=18
[  712.781640][ T5774] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  712.846230][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  712.873656][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  712.908659][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  712.939081][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=2
[  712.973979][ T5774] NILFS (loop0): discard dirty block: blocknr=18, size=1024
[  712.998827][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.010218][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.034499][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.050800][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=6
[  713.067954][ T5774] NILFS (loop0): discard dirty block: blocknr=35, size=1024
[  713.096029][ T5774] NILFS (loop0): discard dirty block: blocknr=36, size=1024
[  713.103400][ T5774] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[  713.128451][ T5774] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[  713.174714][ T5774] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  713.181743][ T5774] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[  713.223000][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.243085][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.264219][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.287052][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=3
[  713.293895][ T5774] NILFS (loop0): discard dirty block: blocknr=42, size=1024
[  713.314719][ T5774] NILFS (loop0): discard dirty block: blocknr=43, size=1024
[  713.345220][ T5774] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  713.352595][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.401033][ T5774] NILFS (loop0): discard dirty page: offset=65536, ino=3
[  713.433559][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.465758][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.485045][ T5774] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  713.492518][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  713.711852][T20745] loop4: detected capacity change from 0 to 1024
[  713.793906][T20745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  714.120014][T11778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.395020][T13971] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  714.598633][T13971] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  714.607749][T13971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.618755][T13971] usb 1-1: config 0 descriptor??
[  714.627242][T13971] cp210x 1-1:0.0: cp210x converter detected
[  715.233856][T13971] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71
[  715.246919][T13971] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  715.257020][T13971] usb 1-1: cp210x converter now attached to ttyUSB0
[  715.273312][T13971] usb 1-1: USB disconnect, device number 31
[  715.285504][T13971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  715.293959][T13971] cp210x 1-1:0.0: device disconnected
[  716.222913][T20777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6102'.
[  717.200693][T20767] loop4: detected capacity change from 0 to 40427
[  717.246171][T20767] F2FS-fs (loop4): Invalid uid value -1
[  718.170516][T20800] loop0: detected capacity change from 0 to 32768
[  718.193392][T20800] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  718.371316][ T5785] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  718.898642][T20829] loop4: detected capacity change from 0 to 4096
[  718.954782][T20829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  718.991237][T20813] loop1: detected capacity change from 0 to 40427
[  719.007581][T20813] F2FS-fs (loop1): invalid crc value
[  719.048899][T20813] F2FS-fs (loop1): Found nat_bits in checkpoint
[  719.291750][T20813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  719.293190][T11778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  719.613111][ T5773] syz-executor: attempt to access beyond end of device
[  719.613111][ T5773] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  719.665443][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  719.665461][   T27] audit: type=1800 audit(1787617195.384:194): pid=20846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6131" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  719.699065][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  721.083583][T20878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  721.096010][T20878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  721.490371][T20868] loop4: detected capacity change from 0 to 32768
[  721.542473][T20868] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  721.656268][T20868] XFS (loop4): Ending clean mount
[  721.751563][T20878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  721.778158][T20878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  721.794018][T20902] loop1: detected capacity change from 0 to 256
[  721.945545][T20902] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  722.115441][T11778] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  722.156396][T20878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  722.225961][T20878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.391839][T20913] loop1: detected capacity change from 0 to 512
[  722.543266][T20913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  722.616763][T20913] ext4 filesystem being mounted at /1525/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  722.637752][T20878] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  722.646821][T20878] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  722.669646][T20878] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  722.678077][T20878] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  722.770378][T20878] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  722.813922][T20878] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  722.888174][T20878] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  722.907057][T20878] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.177263][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  723.490469][T20938] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0)
[  723.650070][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6163'.
[  723.804153][T20943] bond2 (unregistering): Released all slaves
[  724.421587][T20967] loop4: detected capacity change from 0 to 2048
[  724.507136][T20971] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  724.603105][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6174'.
[  725.207529][T20993] Bluetooth: hci0: invalid length 0, exp 2 for type 3
[  725.509143][T21000] loop1: detected capacity change from 0 to 2048
[  725.517653][T20997] loop4: detected capacity change from 0 to 4096
[  725.525792][ T8748] Bluetooth: hci0: command 0x0c1a tx timeout
[  725.634046][T21004] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  725.761710][T21000] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '..'
[  725.796230][T21000] Remounting filesystem read-only
[  725.890769][T20997] ntfs3: loop4: ino=9, attr_set_size
[  725.903043][ T5773] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  725.924003][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=18
[  725.958065][ T5773] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  725.994528][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.003512][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.071797][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.114925][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=2
[  726.121696][ T5773] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  726.155113][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.164088][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.209495][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.232862][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=6
[  726.255038][ T5773] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  726.268845][ T5773] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  726.284889][ T5773] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  726.302468][ T5773] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  726.318410][ T5773] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  726.329167][ T5773] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  726.344985][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.378734][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.406834][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.448738][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=3
[  726.459813][ T5773] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  726.479883][ T5773] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  726.507271][ T5773] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  726.522726][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.537483][ T5773] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  726.549935][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.564020][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  726.604721][ T5773] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  726.624535][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  727.180174][T21038] loop0: detected capacity change from 0 to 4096
[  727.241703][T21038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  727.353326][T21048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6192'.
[  727.396665][T21048] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  727.594848][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.729198][T21055] loop4: detected capacity change from 0 to 512
[  727.768128][T21055] EXT4-fs: Ignoring removed mblk_io_submit option
[  727.858746][T21057] loop0: detected capacity change from 0 to 512
[  727.878283][T21055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  727.962366][T21055] ext4 filesystem being mounted at /886/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  727.981212][T21057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  728.024730][T21057] ext4 filesystem being mounted at /1540/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  728.052670][T21057] EXT4-fs error (device loop0): ext4_readdir:223: inode #12: comm syz.0.6193: path /1540/file0/file0: directory fails checksum at offset 0
[  728.174656][ T5839] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  728.205931][T11778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  728.235350][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  728.418237][ T5839] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  728.450810][ T5839] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  728.486905][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0
[  728.511534][ T5839] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  728.544112][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.569021][ T5839] usb 2-1: config 0 descriptor??
[  728.903986][T21082] loop4: detected capacity change from 0 to 4096
[  728.984791][T13971] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  729.099088][ T5839] ryos 0003:1E7D:3232.0044: unknown main item tag 0x0
[  729.129091][ T5839] ryos 0003:1E7D:3232.0044: unknown main item tag 0xd
[  729.155881][ T5839] ryos 0003:1E7D:3232.0044: hidraw0: USB HID vff.fe Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0
[  729.219702][T13971] usb 1-1: Using ep0 maxpacket: 16
[  729.257965][T13971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  729.299539][T13971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  729.344583][T13971] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  729.374256][T14241] usb 2-1: USB disconnect, device number 50
[  729.397030][T13971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.428217][T13971] usb 1-1: config 0 descriptor??
[  729.545640][T21090] fido_id[21090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  729.918984][T13971] mcp2221 0003:04D8:00DD.0045: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  730.073676][T21108] jffs2: notice: (21108) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  730.161891][T13971] usb 1-1: USB disconnect, device number 32
[  730.817450][T21128] loop1: detected capacity change from 0 to 4096
[  730.852772][T21128] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  730.952599][T21133] loop4: detected capacity change from 0 to 512
[  730.998304][T21133] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  731.121023][T21133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  731.135487][T21133] ext4 filesystem being mounted at /894/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  731.446011][T11778] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.725427][T14241] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  731.924511][T14241] usb 1-1: Using ep0 maxpacket: 32
[  731.936455][T14241] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  731.960247][T14241] usb 1-1: config 0 has no interface number 0
[  731.993627][T14241] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  732.030453][T14241] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  732.050538][T14241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.086069][T14241] usb 1-1: Product: syz
[  732.090318][T14241] usb 1-1: Manufacturer: syz
[  732.124448][T14241] usb 1-1: SerialNumber: syz
[  732.162279][T14241] usb 1-1: config 0 descriptor??
[  732.185399][T21146] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  732.349362][T21163] loop4: detected capacity change from 0 to 4096
[  732.422659][T21163] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  732.508430][T21146] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  732.972415][T14241] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  733.025022][T14241] asix: probe of 1-1:0.188 failed with error -71
[  733.062183][T14241] usb 1-1: USB disconnect, device number 33
[  733.125185][T21186] [U] 
[  733.395766][T21195] netlink: 'syz.3.6237': attribute type 30 has an invalid length.
[  733.443468][T21197] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6238'.
[  733.515117][    T9] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  733.726807][    T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  733.756864][    T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  733.790662][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  733.814913][    T9] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  733.837604][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.896562][    T9] usb 2-1: config 0 descriptor??
[  733.903336][T21191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  734.229142][T21219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6250'.
[  734.369611][    T9] kye 0003:0458:501A.0046: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  734.406322][    T9] kye 0003:0458:501A.0046: unknown main item tag 0x7
[  734.433215][    T9] kye 0003:0458:501A.0046: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0
[  734.464796][    T9] kye 0003:0458:501A.0046: tablet-enabling feature report not found
[  734.472875][    T9] kye 0003:0458:501A.0046: tablet enabling failed
[  734.486309][T14241] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  734.684661][T14241] usb 5-1: Using ep0 maxpacket: 8
[  734.701688][T13971] usb 2-1: USB disconnect, device number 51
[  734.712760][T14241] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  734.737120][T14241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.746612][T14241] usb 5-1: Product: syz
[  734.750823][T14241] usb 5-1: Manufacturer: syz
[  734.769851][T14241] usb 5-1: SerialNumber: syz
[  734.785975][T14241] usb 5-1: config 0 descriptor??
[  734.808323][T14241] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  734.845878][T21234] tipc: MTU too low for tipc bearer
[  734.848733][T14241] pctv452e: pctv452e_power_ctrl: 1
[  734.848733][T14241] 
[  734.879047][T14241] usb 5-1: selecting invalid altsetting 3
[  734.894674][T14241] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  734.894674][T14241] 
[  734.932772][T14241] dvb-usb: bulk message failed: -22 (5/0)
[  734.973707][T14241] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  735.001905][T14241] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  735.032510][T14241] usb 5-1: media controller created
[  735.056612][T21220] pctv452e: I2C error -22; AA 01  FC 3A 00 -> 00 00 00 00 00 00 00
[  735.080877][T14241] dvb-usb: bulk message failed: -22 (8/0)
[  735.111524][T14241] pctv452e: I2C error -22; AA 02  A0 01 14 -> aa 02 31 04 a0 01 14
[  735.139643][T14241] dvb-usb: MAC address reading failed.
[  735.202178][T14241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  735.372837][T14241] DVB: Unable to find symbol stb0899_attach()
[  735.392755][T14241] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  735.576785][T14241] rc_core: IR keymap rc-tt-1500 not found
[  735.592971][T14241] Registered IR keymap rc-empty
[  735.634983][T14241] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  735.668526][T14241] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input55
[  735.697428][T14241] dvb-usb: schedule remote query interval to 100 msecs.
[  735.714744][T14241] pctv452e: pctv452e_power_ctrl: 0
[  735.714744][T14241] 
[  735.742532][T14241] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  735.786433][T14241] usb 5-1: USB disconnect, device number 23
[  735.954836][T14241] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  736.562171][T21277] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6274'.
[  736.850315][T21287] netlink: 'syz.0.6280': attribute type 4 has an invalid length.
[  736.986263][T21289] sp0: Synchronizing with TNC
[  737.027211][T21288] [U] è
[  737.187457][T21297] usb usb1: selecting invalid altsetting 1
[  737.343902][T21304] xt_l2tp: v2 tid > 0xffff: 1114116
[  737.648268][T21310] loop1: detected capacity change from 0 to 1024
[  737.666211][T21310] EXT4-fs: Ignoring removed mblk_io_submit option
[  737.683795][T21310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  737.693468][T21310] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  737.728732][T21310] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #11: comm syz.1.6290: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  737.759150][T21310] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.6290: couldn't read orphan inode 11 (err -117)
[  737.800997][T21310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  737.880782][T21310] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.6290: Invalid block bitmap block 0 in block_group 0
[  737.993691][T21310] Quota error (device loop1): write_blk: dquota write failed
[  738.045971][T21310] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  738.077631][T21310] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.6290: Failed to acquire dquot type 0
[  738.255921][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  738.284175][ T2983] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8
[  738.308144][ T2983] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0
[  738.427379][T21331] syz_tun: entered allmulticast mode
[  738.441678][T21331] syz_tun: left allmulticast mode
[  738.874131][T21341] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  738.895981][T21341] team0: Device macvlan2 is already an upper device of the team interface
[  739.769562][T21369] loop4: detected capacity change from 0 to 2048
[  739.856165][T21369] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  739.896160][T21369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  740.019322][ T5839] logitech-hidpp-device 0005:046D:B012.0047: Device not connected
[  740.152092][T21373] loop0: detected capacity change from 0 to 8192
[  740.152918][T11778] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  740.184984][T11778] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  740.218219][T21373] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  740.251683][T21373] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  740.297654][T21373] REISERFS (device loop0): using ordered data mode
[  740.346898][T21373] reiserfs: using flush barriers
[  740.361933][T21373] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  740.386979][T21373] REISERFS (device loop0): checking transaction log (loop0)
[  740.427570][T21373] REISERFS (device loop0): Using r5 hash to sort names
[  740.465508][T21373] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  740.756052][T21373] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "dax=never"
[  741.029350][ T3499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.071382][ T3499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.257779][ T3499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.295135][ T3499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.486862][ T3499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.524682][ T3499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.690486][T21386] loop1: detected capacity change from 0 to 32768
[  741.746685][ T3499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.775387][ T3499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.792638][T21386] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  742.001616][T21386] XFS (loop1): Ending clean mount
[  742.161893][T19746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  742.177809][T19746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  742.191449][T19746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  742.204891][ T3499] tipc: Disabling bearer <udp:syz2>
[  742.220496][T19746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  742.238791][T19746] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  742.248092][T19746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  742.283707][ T3499] tipc: Left network mode
[  742.379152][T21416] loop0: detected capacity change from 0 to 2048
[  742.411004][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  742.747951][T21426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6336'.
[  744.090096][T21461] loop0: detected capacity change from 0 to 1024
[  744.135110][T21410] chnl_net:caif_netlink_parms(): no params data found
[  744.316269][ T8748] Bluetooth: hci2: command tx timeout
[  744.722576][T21475] loop0: detected capacity change from 0 to 4096
[  745.249755][T21475] ntfs3: loop0: failed to convert "0080" to cp1255
[  745.273069][T21475] ntfs3: loop0: failed to convert name for inode 1e.
[  745.532204][T21410] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.553541][T21410] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.592025][T21410] bridge_slave_0: entered allmulticast mode
[  745.627919][T21410] bridge_slave_0: entered promiscuous mode
[  745.765067][T21410] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.790756][T21410] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.831640][T21410] bridge_slave_1: entered allmulticast mode
[  745.856041][T21410] bridge_slave_1: entered promiscuous mode
[  746.291420][T21410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  746.320895][T21410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  746.394682][T19746] Bluetooth: hci2: command tx timeout
[  746.507734][T21496] loop1: detected capacity change from 0 to 32768
[  746.549745][T21496] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  746.559096][ T3499] hsr_slave_0: left promiscuous mode
[  746.596237][ T3499] hsr_slave_1: left promiscuous mode
[  746.623476][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  746.654206][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  746.654957][T21496] XFS (loop1): Ending clean mount
[  746.692759][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  746.724599][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  746.740787][ T3499] bridge_slave_1: left allmulticast mode
[  746.758387][ T3499] bridge_slave_1: left promiscuous mode
[  746.764294][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.803431][ T3499] bridge_slave_0: left allmulticast mode
[  746.822548][ T3499] bridge_slave_0: left promiscuous mode
[  746.841823][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.876633][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  747.073748][ T3499] veth1_macvtap: left promiscuous mode
[  747.079970][ T3499] veth0_macvtap: left promiscuous mode
[  747.104954][ T3499] veth1_vlan: left allmulticast mode
[  747.110412][ T3499] veth1_vlan: left promiscuous mode
[  747.117191][ T3499] veth0_vlan: left promiscuous mode
[  747.520616][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.547578][ T3499] bond1 (unregistering): Released all slaves
[  747.727066][T21544] loop1: detected capacity change from 0 to 64
[  748.484656][T19746] Bluetooth: hci2: command tx timeout
[  749.349368][ T3499] team0 (unregistering): Port device team_slave_1 removed
[  749.500978][ T3499] team0 (unregistering): Port device team_slave_0 removed
[  749.618736][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  749.773942][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  749.784137][T21568] overlayfs: lower data-only dirs require metacopy support.
[  750.570837][T19746] Bluetooth: hci2: command tx timeout
[  750.704205][ T3499] bond0 (unregistering): Released all slaves
[  750.991604][T21410] team0: Port device team_slave_0 added
[  751.026714][T21410] team0: Port device team_slave_1 added
[  751.083112][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6363'.
[  751.100794][T21519] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.290476][T21410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  751.344669][T21410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  751.424678][T21410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.494854][T21410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.503314][T21410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  751.619696][T21410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  751.840449][T21410] hsr_slave_0: entered promiscuous mode
[  751.846387][T21605] netlink: 'syz.0.6399': attribute type 2 has an invalid length.
[  751.909365][T21410] hsr_slave_1: entered promiscuous mode
[  751.975118][T21410] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  751.994742][T21410] Cannot create hsr debugfs directory
[  752.314895][ T3499] IPVS: stop unused estimator thread 0...
[  752.974799][T21410] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  752.998881][T21410] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  753.023623][T21410] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  753.066157][T21410] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  753.289580][T21609] loop0: detected capacity change from 0 to 32768
[  753.368857][T21609] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  753.418281][   T27] audit: type=1800 audit(1787617229.144:195): pid=21609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6400" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  753.497860][T21410] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.617495][T21410] 8021q: adding VLAN 0 to HW filter on device team0
[  753.628191][ T5774] ocfs2: Unmounting device (7,0) on (node local)
[  753.691030][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.698332][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  753.771740][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.779004][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  754.234645][T21626] loop1: detected capacity change from 0 to 32768
[  754.358109][T21626] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  754.489495][T21626] XFS (loop1): Ending clean mount
[  754.530998][T21410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  754.924086][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  755.851717][T21410] veth0_vlan: entered promiscuous mode
[  755.929342][T21410] veth1_vlan: entered promiscuous mode
[  756.071717][T21410] veth0_macvtap: entered promiscuous mode
[  756.111231][T21410] veth1_macvtap: entered promiscuous mode
[  756.176827][T21410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  756.197666][T21410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.233719][T21410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  756.280217][T21410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.304591][T21410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  756.338115][T21708] loop1: detected capacity change from 0 to 128
[  756.363088][T21410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.390437][T21410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  756.423110][T21708] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  756.441743][T21410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  756.532938][T21410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.543539][T21708] ext4 filesystem being mounted at /1586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  756.605181][T21410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  756.638583][T21410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.685894][T21410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  756.711360][   T27] audit: type=1800 audit(1787617232.434:196): pid=21708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6421" name="bus" dev="loop1" ino=12 res=0 errno=0
[  756.744469][T21410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.776179][T21410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  756.785430][   T27] audit: type=1800 audit(1787617232.454:197): pid=21708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6421" name="bus" dev="loop1" ino=12 res=0 errno=0
[  756.877031][T21410] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  756.899130][T21410] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  756.935100][T21410] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  756.943971][T21410] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  757.062040][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  757.452488][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  757.493880][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  757.555588][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  757.586688][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  758.126029][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6431'.
[  758.154401][T21749] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6431'.
[  758.410761][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6434'.
[  758.615347][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6436'.
[  758.749772][T21770] loop0: detected capacity change from 0 to 256
[  759.429016][T21793] loop0: detected capacity change from 0 to 64
[  759.472011][T21793] MINIX-fs: mounting file system with errors, running fsck is recommended
[  759.672950][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6450'.
[  759.839204][T21806] netlink: 'syz.0.6452': attribute type 5 has an invalid length.
[  759.990852][   T27] audit: type=1326 audit(1787617235.714:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe1b9e0d9 code=0x7ffc0000
[  760.014489][T21810] loop1: detected capacity change from 0 to 128
[  760.035891][   T27] audit: type=1326 audit(1787617235.714:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe1b9e0d9 code=0x7ffc0000
[  760.061345][   T27] audit: type=1326 audit(1787617235.714:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe1b9e0d9 code=0x7ffc0000
[  760.119698][   T27] audit: type=1326 audit(1787617235.714:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfe1b5e90e code=0x7ffc0000
[  760.252908][   T27] audit: type=1326 audit(1787617235.714:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfe1b5e90e code=0x7ffc0000
[  760.354496][   T27] audit: type=1326 audit(1787617235.714:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe1b9e0d9 code=0x7ffc0000
[  760.480631][   T27] audit: type=1326 audit(1787617235.714:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe1b9e0d9 code=0x7ffc0000
[  760.504746][    C1] vkms_vblank_simulate: vblank timer overrun
[  760.594749][   T27] audit: type=1326 audit(1787617235.714:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe1b9e0d9 code=0x7ffc0000
[  760.618903][    C1] vkms_vblank_simulate: vblank timer overrun
[  760.716021][   T27] audit: type=1326 audit(1787617235.714:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe1b9e0d9 code=0x7ffc0000
[  760.824488][   T27] audit: type=1326 audit(1787617235.714:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21808 comm="syz.3.6454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe1b9e0d9 code=0x7ffc0000
[  761.074082][T21843] netlink: 'syz.3.6467': attribute type 10 has an invalid length.
[  761.089658][T21843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6467'.
[  761.101572][T21843] nr15: entered promiscuous mode
[  761.149382][T21843] nr15: entered allmulticast mode
[  761.176747][T21843] A link change request failed with some changes committed already. Interface nr15 may have been left with an inconsistent configuration, please check.
[  761.367600][T21848] loop1: detected capacity change from 0 to 512
[  761.541690][T21848] FAT-fs (loop1): FAT read failed (blocknr 128)
[  761.554207][T21855] FAT-fs (loop1): FAT read failed (blocknr 128)
[  761.931283][T21862] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6473'.
[  761.944946][T21862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6473'.
[  761.954000][T21862] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6473'.
[  762.467812][T21883] loop1: detected capacity change from 0 to 512
[  762.519625][T21883] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.6479: Unrecognised inode hash code 255
[  762.531990][T21883] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.6479: Corrupt directory, running e2fsck is recommended
[  762.550683][T21883] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  762.573252][T21883] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.6479: corrupted in-inode xattr: invalid ea_ino
[  762.595664][T21883] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.6479: couldn't read orphan inode 15 (err -117)
[  762.622790][T21883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  762.677090][T21883] EXT4-fs error (device loop1): __ext4_remount:6756: comm syz.1.6479: Abort forced by user
[  762.714703][T21883] EXT4-fs (loop1): Remounting filesystem read-only
[  762.724066][T21883] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  762.724749][  T178] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  762.843126][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.946890][  T178] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  762.984958][  T178] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  763.004819][  T178] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  763.037803][  T178] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  763.084521][  T178] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  763.093651][  T178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.484002][T21908] netlink: 'syz.1.6486': attribute type 15 has an invalid length.
[  763.894648][  T178] gud 6-1:1.0: Failed to get properties (error=-71)
[  763.901420][  T178] gud: probe of 6-1:1.0 failed with error -71
[  764.009485][  T178] usb 6-1: USB disconnect, device number 2
[  764.235561][T21929] veth1_macvtap: left promiscuous mode
[  764.241114][T21929] macsec0: entered promiscuous mode
[  764.268524][T21929] macsec0: entered allmulticast mode
[  764.326712][T21930] veth1_macvtap: entered promiscuous mode
[  764.333745][T21930] veth1_macvtap: entered allmulticast mode
[  764.384991][T21930] macsec0: left promiscuous mode
[  764.390198][T21930] macsec0: left allmulticast mode
[  764.433312][T21930] veth1_macvtap: left allmulticast mode
[  765.798485][T21982] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6513'.
[  765.854520][ T5814] usb 4-1: new low-speed USB device number 39 using dummy_hcd
[  765.885137][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6514'.
[  766.087411][ T5814] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  766.107644][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  766.142348][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  766.164702][ T5814] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[  766.187025][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.215974][ T5814] usb 4-1: config 0 descriptor??
[  766.221861][T21971] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  766.246251][T21995] loop0: detected capacity change from 0 to 2048
[  766.286934][T21995] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  766.321810][T21995] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  766.360579][T21999] loop5: detected capacity change from 0 to 512
[  766.361906][T21995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  766.488512][T21999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  766.531142][T22003] dummy0: entered promiscuous mode
[  766.581785][T21999] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  766.706023][T21999] EXT4-fs error (device loop5): ext4_readdir:223: inode #12: comm syz.5.6521: path /18/file0/file0: directory fails checksum at offset 0
[  766.732686][ T5814] corsair 0003:1B1C:1B3E.0048: unknown main item tag 0x2
[  766.751808][ T5814] corsair 0003:1B1C:1B3E.0048: unknown main item tag 0x6
[  766.767696][ T5814] corsair 0003:1B1C:1B3E.0048: unknown main item tag 0x4
[  766.788508][ T5814] corsair 0003:1B1C:1B3E.0048: unknown main item tag 0x0
[  766.823672][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  766.840864][T22007] loop0: detected capacity change from 0 to 2048
[  766.840886][ T5814] corsair 0003:1B1C:1B3E.0048: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0
[  766.886589][T22007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  767.012331][   T27] kauditd_printk_skb: 35 callbacks suppressed
[  767.012349][   T27] audit: type=1800 audit(1787617242.734:243): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6523" name="file2" dev="loop0" ino=1416 res=0 errno=0
[  767.174047][ T5814] usb 4-1: USB disconnect, device number 39
[  767.456618][T22018] loop0: detected capacity change from 0 to 512
[  767.507445][T22018] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.6528: Unrecognised inode hash code 255
[  767.519454][T22018] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.6528: Corrupt directory, running e2fsck is recommended
[  767.538640][T22018] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  767.547405][T22018] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.6528: corrupted in-inode xattr: invalid ea_ino
[  767.564783][T22018] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.6528: couldn't read orphan inode 15 (err -117)
[  767.587895][T22018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  767.624644][T22018] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.6528: Abort forced by user
[  767.636373][T22018] EXT4-fs (loop0): Remounting filesystem read-only
[  767.653152][T22018] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  767.766444][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.532765][T22055] loop5: detected capacity change from 0 to 512
[  768.598260][T22055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022]
[  768.615268][T22055] System zones: 1-12
[  768.636324][T22055] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.6545: Directory hole found for htree index block 0
[  768.695535][T22055] EXT4-fs (loop5): Remounting filesystem read-only
[  768.729103][T22055] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[  768.769810][T22055] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  768.808887][T22055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  768.989824][T22055] EXT4-fs: user quota file already specified
[  769.101005][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.520428][T22051] loop0: detected capacity change from 0 to 40427
[  769.558546][T22051] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff
[  769.588085][T22051] F2FS-fs (loop0): invalid crc value
[  769.602013][T22051] F2FS-fs (loop0): Found nat_bits in checkpoint
[  769.769592][T22051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  769.832906][T22090] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "\x22"[22090]
[  770.162116][T22097] loop5: detected capacity change from 0 to 2048
[  770.229942][T22097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  770.354874][   T27] audit: type=1800 audit(1787617246.084:244): pid=22097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6559" name="file2" dev="loop5" ino=1416 res=0 errno=0
[  770.824476][  T178] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  771.035694][  T178] usb 4-1: Using ep0 maxpacket: 8
[  771.043322][  T178] usb 4-1: config 1 has an invalid interface descriptor of length 7, skipping
[  771.056558][  T178] usb 4-1: config 1 has an invalid interface descriptor of length 3, skipping
[  771.066318][  T178] usb 4-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  771.079973][  T178] usb 4-1: config 1 interface 0 has no altsetting 0
[  771.091856][  T178] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  771.121490][  T178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.140178][T22101] loop1: detected capacity change from 0 to 40427
[  771.141562][  T178] usb 4-1: Product: syz
[  771.157747][  T178] usb 4-1: Manufacturer: syz
[  771.189424][  T178] usb 4-1: SerialNumber: syz
[  771.195919][T22101] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  771.214663][T22101] F2FS-fs (loop1): Image doesn't support compression
[  771.238950][T22119] loop0: detected capacity change from 0 to 256
[  771.247553][T22101] F2FS-fs (loop1): heap/no_heap options were deprecated
[  771.302477][T22101] F2FS-fs (loop1): invalid crc value
[  771.324117][T22101] F2FS-fs (loop1): Found nat_bits in checkpoint
[  771.452333][T22119] FAT-fs (loop0): Directory bread(block 64) failed
[  771.485679][T22119] FAT-fs (loop0): Directory bread(block 65) failed
[  771.491061][  T178] cdc_ether 4-1:1.0: skipping garbage
[  771.492461][T22119] FAT-fs (loop0): Directory bread(block 66) failed
[  771.523409][T22101] F2FS-fs (loop1): Start checkpoint disabled!
[  771.525427][  T178] cdc_ether: probe of 4-1:1.0 failed with error -22
[  771.546125][T22119] FAT-fs (loop0): Directory bread(block 67) failed
[  771.569266][T22119] FAT-fs (loop0): Directory bread(block 68) failed
[  771.599363][T22119] FAT-fs (loop0): Directory bread(block 69) failed
[  771.609452][  T178] usb 4-1: USB disconnect, device number 40
[  771.624843][T22101] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  771.644958][T22119] FAT-fs (loop0): Directory bread(block 70) failed
[  771.664532][T22119] FAT-fs (loop0): Directory bread(block 71) failed
[  771.684840][T22119] FAT-fs (loop0): Directory bread(block 72) failed
[  771.691459][T22119] FAT-fs (loop0): Directory bread(block 73) failed
[  772.035358][   T49] kworker/u4:3: attempt to access beyond end of device
[  772.035358][   T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  772.062708][   T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  772.084101][   T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  772.316566][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6572'.
[  772.362510][T22123] loop5: detected capacity change from 0 to 32768
[  773.258147][T19746] Bluetooth: hci0: unexpected event for opcode 0x2035
[  774.328659][T22182] loop5: detected capacity change from 0 to 8192
[  774.375107][T22182] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  774.442785][T22182] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  774.505803][T22182] REISERFS (device loop5): using ordered data mode
[  774.512396][T22182] reiserfs: using flush barriers
[  774.571105][T22182] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  774.619636][T22197] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  774.625504][T22182] REISERFS (device loop5): checking transaction log (loop5)
[  774.663584][T22182] REISERFS (device loop5): Using r5 hash to sort names
[  774.676979][T22182] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  774.851959][T22182] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "dax=never"
[  774.904809][T22203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6597'.
[  774.945829][T22199] loop1: detected capacity change from 0 to 8192
[  774.971367][T22199] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  775.038847][T22199] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  775.049112][T22199] REISERFS (device loop1): using ordered data mode
[  775.055810][T22199] reiserfs: using flush barriers
[  775.085451][T22199] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  775.113894][T22199] REISERFS (device loop1): checking transaction log (loop1)
[  775.388758][T22199] REISERFS (device loop1): Using tea hash to sort names
[  775.430327][T22199] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  775.477296][T22199] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  776.349582][T22241] loop1: detected capacity change from 0 to 8
[  776.634219][T22249] loop5: detected capacity change from 0 to 764
[  777.145275][T22263] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  778.202991][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6631'.
[  778.820282][T22321] Bluetooth: hci0: unsupported parameter 5135
[  778.854988][T22321] Bluetooth: hci0: unsupported parameter 8192
[  778.861145][T22321] Bluetooth: hci0: unsupported parameter 5135
[  778.874777][T22321] Bluetooth: hci0: unsupported parameter 8192
[  778.970393][T22322] loop0: detected capacity change from 0 to 4096
[  778.983074][T22287] loop5: detected capacity change from 0 to 32768
[  779.030862][T22287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.6626 (22287)
[  779.050121][T22322] ntfs3: loop0: ino=3, Correct links count -> 2.
[  779.127512][T22287] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  779.193034][T22287] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  779.240504][T22287] BTRFS info (device loop5): using free space tree
[  779.418357][T22287] BTRFS info (device loop5): enabling ssd optimizations
[  779.434892][T22287] BTRFS info (device loop5): auto enabling async discard
[  779.616823][T22352] loop0: detected capacity change from 0 to 2048
[  779.705031][T22352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  779.746853][T22352] ext4 filesystem being mounted at /1639/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  779.761734][T21410] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  780.053186][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  780.875906][T22386] loop5: detected capacity change from 0 to 1024
[  780.987107][T22386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  781.100045][T22395] loop1: detected capacity change from 0 to 16
[  781.135063][T22395] erofs: (device loop1): mounted with root inode @ nid 36.
[  781.204987][T22395] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  781.303575][T22395] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851]
[  781.357164][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  781.365866][T22395] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  781.495431][T22399] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  781.554451][T22399] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851]
[  781.612023][T22399] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  782.086855][T22425] loop0: detected capacity change from 0 to 64
[  782.410618][T22434] loop0: detected capacity change from 0 to 764
[  782.609858][T22440] loop5: detected capacity change from 0 to 64
[  783.781988][T22460] loop5: detected capacity change from 0 to 4096
[  783.786307][T22438] loop1: detected capacity change from 0 to 32768
[  785.073474][T22465] loop0: detected capacity change from 0 to 32768
[  785.106284][T22465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6678 (22465)
[  785.236507][T22465] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  785.282421][T22465] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  785.341604][T22465] BTRFS info (device loop0): using free space tree
[  785.546643][T22513] loop1: detected capacity change from 0 to 1024
[  785.560767][T22513] EXT4-fs: Ignoring removed nomblk_io_submit option
[  785.596028][T22465] BTRFS info (device loop0): enabling ssd optimizations
[  785.597313][T22513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  785.603095][T22465] BTRFS info (device loop0): auto enabling async discard
[  785.946838][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.131281][ T5774] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  786.406552][T22532] loop5: detected capacity change from 0 to 4096
[  786.492317][T22541] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  786.496890][T22540] loop1: detected capacity change from 0 to 128
[  786.592560][T22540] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  786.693124][T22540] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  786.960728][ T3546] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  787.575740][T22565] macsec4: entered promiscuous mode
[  787.581036][T22565] vlan1: entered promiscuous mode
[  787.600024][T22565] macsec4: entered allmulticast mode
[  787.616873][T22565] vlan1: entered allmulticast mode
[  787.622069][T22565] veth0_vlan: entered allmulticast mode
[  787.645463][T22569] loop5: detected capacity change from 0 to 256
[  787.706923][T22569] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  787.721127][T22565] vlan1: left allmulticast mode
[  787.744129][T22565] veth0_vlan: left allmulticast mode
[  787.752900][T22565] vlan1: left promiscuous mode
[  788.204131][T22581] netem: change failed
[  788.715141][T22598] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6718'.
[  789.556281][T22626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6728'.
[  789.593696][T22625] loop1: detected capacity change from 0 to 128
[  789.616942][T22625] hpfs: bad mount options.
[  789.713982][ T5785] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  789.897272][T22609] loop5: detected capacity change from 0 to 32768
[  790.010918][T22609] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  790.162455][T22639] loop0: detected capacity change from 0 to 4096
[  790.173533][T22643] loop1: detected capacity change from 0 to 256
[  790.199373][   T27] audit: type=1800 audit(1787617265.924:245): pid=22609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6723" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  790.298272][T22644] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  790.311486][T22639] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  790.399685][T22639] NILFS (loop0): mounting fs with errors
[  790.566374][T21410] ocfs2: Unmounting device (7,5) on (node local)
[  791.007977][T22654] loop0: detected capacity change from 0 to 128
[  791.755931][T22675] loop0: detected capacity change from 0 to 512
[  791.822335][T22675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  791.839827][T22675] ext4 filesystem being mounted at /1666/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  792.076595][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  792.286102][T22688] loop0: detected capacity change from 0 to 16
[  792.342410][T22688] erofs: (device loop0): mounted with root inode @ nid 36.
[  792.400292][T22692] loop5: detected capacity change from 0 to 512
[  792.425601][T22688] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  792.459936][T22690] loop1: detected capacity change from 0 to 2048
[  792.465699][T22688] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  792.480925][   T27] audit: type=1800 audit(1787617268.204:246): pid=22692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6756" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=1048804 res=0 errno=0
[  792.541928][T22688] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  792.614886][T22688] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  792.647881][T22688] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  792.695693][T22688] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  792.754593][T22688] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  792.759622][T22690] overlayfs: upper fs needs to support d_type.
[  792.817802][T22688] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  792.881136][T22688] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  792.881621][T22690] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  792.908293][T22698] loop5: detected capacity change from 0 to 512
[  792.919485][   T27] audit: type=1800 audit(1787617268.644:247): pid=22688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6754" name="file3" dev="loop0" ino=89 res=0 errno=0
[  792.948189][T22690] overlayfs: failed to set xattr on upper
[  792.956203][T22698] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  792.966688][T22698] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.6759: invalid indirect mapped block 256 (level 2)
[  792.983551][T22690] overlayfs: ...falling back to redirect_dir=nofollow.
[  793.009570][T22690] overlayfs: ...falling back to index=off.
[  793.009586][T22690] overlayfs: ...falling back to uuid=null.
[  793.035483][T22698] EXT4-fs (loop5): 2 truncates cleaned up
[  793.036699][T22698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  793.070610][T22698] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.6759: bg 0: block 5: invalid block bitmap
[  793.126948][T22698] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 59 with error 28
[  793.127103][T22698] EXT4-fs (loop5): This should not happen!! Data will be lost
[  793.127103][T22698] 
[  793.127122][T22698] EXT4-fs (loop5): Total free blocks count 0
[  793.127139][T22698] EXT4-fs (loop5): Free/Dirty block details
[  793.127185][T22698] EXT4-fs (loop5): free_blocks=0
[  793.127272][T22698] EXT4-fs (loop5): dirty_blocks=59
[  793.127289][T22698] EXT4-fs (loop5): Block reservation details
[  793.127303][T22698] EXT4-fs (loop5): i_reserved_data_blocks=59
[  793.252097][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.289481][ T5773] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  793.325572][ T5773] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  794.181102][ T2983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.202137][ T2983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.357793][ T2983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.394464][ T2983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.438158][T22727] loop0: detected capacity change from 0 to 128
[  794.466484][T22727] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  794.543252][T22727] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  794.671303][ T2983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.705195][ T2983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.801340][ T3546] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  794.819863][ T2983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  794.855168][ T2983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.894191][   T49] tipc: Resetting bearer <ib:wg1>
[  794.988984][ T8748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  795.007250][ T8748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  795.025858][ T8748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  795.049392][ T8748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  795.066724][ T8748] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  795.074236][ T8748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  795.177697][ T2983] tipc: Disabling bearer <eth:vlan0>
[  795.198761][ T2983] tipc: Disabling bearer <eth:batadv0>
[  795.209175][ T2983] tipc: Disabling bearer <ib:wg1>
[  795.237681][ T2983] tipc: Left network mode
[  795.926971][T22730] chnl_net:caif_netlink_parms(): no params data found
[  796.083454][T22730] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.091227][T22730] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.098644][T22730] bridge_slave_0: entered allmulticast mode
[  796.106963][T22730] bridge_slave_0: entered promiscuous mode
[  796.120468][T22730] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.128269][T22730] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.136419][T22730] bridge_slave_1: entered allmulticast mode
[  796.143992][T22730] bridge_slave_1: entered promiscuous mode
[  796.245811][T22730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  796.309973][T22730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  796.389258][T22730] team0: Port device team_slave_0 added
[  796.431616][T22730] team0: Port device team_slave_1 added
[  796.515765][T22730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  796.522772][T22730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  796.549259][T22730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  796.603424][T22730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  796.618469][T22730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  796.647958][T22730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  796.737586][T22730] hsr_slave_0: entered promiscuous mode
[  796.744143][T22730] hsr_slave_1: entered promiscuous mode
[  796.750569][T22730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  796.758524][T22730] Cannot create hsr debugfs directory
[  796.838905][ T2983] hsr_slave_0: left promiscuous mode
[  796.845281][ T2983] hsr_slave_1: left promiscuous mode
[  796.852374][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  796.860101][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_0
[  796.868776][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  796.879129][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_1
[  796.889795][ T2983] bridge_slave_1: left allmulticast mode
[  796.896691][ T2983] bridge_slave_1: left promiscuous mode
[  796.902437][ T2983] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.911826][ T2983] bridge_slave_0: left allmulticast mode
[  796.917820][ T2983] bridge_slave_0: left promiscuous mode
[  796.923517][ T2983] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.951561][ T2983] dummy0: left promiscuous mode
[  796.958851][ T2983] veth1_macvtap: left promiscuous mode
[  796.966233][ T2983] veth0_macvtap: left promiscuous mode
[  796.971794][ T2983] veth1_vlan: left allmulticast mode
[  796.977532][ T2983] veth1_vlan: left promiscuous mode
[  796.982826][ T2983] veth0_vlan: left promiscuous mode
[  797.122287][ T8748] Bluetooth: hci0: command tx timeout
[  797.136846][ T2983] bond1 (unregistering): Released all slaves
[  798.133694][ T2983] team0 (unregistering): Port device team_slave_1 removed
[  798.215397][ T2983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  798.293005][ T2983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  798.763732][ T2983] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  798.936355][ T2983] bond0 (unregistering): Released all slaves
[  799.215610][ T8748] Bluetooth: hci0: command tx timeout
[  799.581089][T22730] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  799.590294][ T2983] IPVS: stop unused estimator thread 0...
[  799.606368][T22730] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  799.618897][T22730] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  799.638514][T22730] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  799.806321][T22730] 8021q: adding VLAN 0 to HW filter on device bond0
[  799.836551][T22730] 8021q: adding VLAN 0 to HW filter on device team0
[  799.851064][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state
[  799.858492][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  799.883535][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state
[  799.890740][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state
[  800.228102][T22730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  800.632972][T22730] veth0_vlan: entered promiscuous mode
[  800.663377][T22730] veth1_vlan: entered promiscuous mode
[  800.722607][T22730] veth0_macvtap: entered promiscuous mode
[  800.741453][T22730] veth1_macvtap: entered promiscuous mode
[  800.776886][T22730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.791639][T22730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.803514][T22730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.814939][T22730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.824852][T22730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.835333][T22730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.847119][T22730] batman_adv: batadv0: Interface activated: batadv_slave_0
[  800.906238][T22730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  800.917313][T22730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.930721][T22730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  800.942156][T22730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.952131][T22730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  800.962736][T22730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.973963][T22730] batman_adv: batadv0: Interface activated: batadv_slave_1
[  800.996634][T22730] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  801.008051][T22730] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  801.018639][T22730] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  801.027895][T22730] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  801.167533][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  801.187957][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  801.266090][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  801.274059][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  801.275410][ T8748] Bluetooth: hci0: command tx timeout
[  801.522842][T22816] loop5: detected capacity change from 0 to 256
[  801.651869][T22816] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  802.095035][T22834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6777'.
[  802.793925][T22859] scsi_nl_rcv_msg: discarding partial message
[  803.185775][T22868] overlayfs: failed to resolve './file0': -2
[  803.354665][ T8748] Bluetooth: hci0: command tx timeout
[  803.620678][T22884] 9p: Unknown Cache mode or invalid value m
[  804.146829][T22854] loop5: detected capacity change from 0 to 32768
[  804.924996][T22914] loop6: detected capacity change from 0 to 4096
[  804.971507][T22914] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512).
[  805.099913][T22925] bridge0: entered promiscuous mode
[  805.193048][T22914] ntfs3: loop6: Failed to initialize $Extend/$ObjId.
[  805.845994][T22934] loop0: detected capacity change from 0 to 8192
[  805.872825][T22934] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  805.925685][T22934] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  805.935970][T22934] REISERFS (device loop0): using ordered data mode
[  805.942733][T22934] reiserfs: using flush barriers
[  806.041700][T22934] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  806.139202][T22934] REISERFS (device loop0): checking transaction log (loop0)
[  806.201743][T22934] REISERFS (device loop0): Using r5 hash to sort names
[  806.215159][T22934] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  806.264785][T22934] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  806.664970][T22963] block nbd6: NBD_DISCONNECT
[  806.706782][T22963] syz.6.6832: attempt to access beyond end of device
[  806.706782][T22963] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[  806.753744][T22963] exFAT-fs (nbd6): unable to read boot sector
[  806.774189][T22965] binder: 22964:22965 ioctl 541b 0 returned -22
[  806.794246][T22963] exFAT-fs (nbd6): failed to read boot sector
[  806.835868][T22963] exFAT-fs (nbd6): failed to recognize exfat type
[  807.141112][T22975] lo: entered promiscuous mode
[  807.168813][T22975] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  807.219772][T22938] loop5: detected capacity change from 0 to 32768
[  807.307614][T22938] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  807.556258][T22938] XFS (loop5): Ending clean mount
[  807.585131][T22991] team0: Device gtp0 is of different type
[  807.585669][T22938] XFS (loop5): Quotacheck needed: Please wait.
[  807.771370][T22938] XFS (loop5): Quotacheck: Done.
[  807.957055][T21410] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  808.211953][T23004] loop6: detected capacity change from 0 to 512
[  808.332341][T23004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  808.430288][T23004] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  808.635871][T22730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.675175][ T5814] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  808.864452][ T5814] usb 4-1: Using ep0 maxpacket: 16
[  808.876740][ T5814] usb 4-1: config 127 has an invalid interface number: 124 but max is 0
[  808.901027][ T5814] usb 4-1: config 127 has no interface number 0
[  808.919681][ T5814] usb 4-1: config 127 interface 124 has no altsetting 0
[  808.929563][ T5814] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  808.938795][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.975680][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  808.993523][ T5814] usb 4-1: Product: syz
[  808.999297][ T5814] usb 4-1: Manufacturer: syz
[  809.003954][ T5814] usb 4-1: SerialNumber: syz
[  809.045157][T23029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6850'.
[  809.579327][T23038] loop6: detected capacity change from 0 to 4096
[  809.748668][T23038] ntfs3: loop6: ino=b, Correct links count -> 1.
[  809.796084][T23038] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  809.891708][T23038] ntfs3: loop6: failed to convert "0080" to koi8-r
[  809.905214][  T178] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  809.934991][ T5814] usb 4-1: reset high-speed USB device number 41 using dummy_hcd
[  810.095979][  T178] usb 6-1: Using ep0 maxpacket: 16
[  810.117444][  T178] usb 6-1: unable to get BOS descriptor or descriptor too short
[  810.131486][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short
[  810.146697][  T178] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[  810.164693][ T5814] usb 4-1: device firmware changed
[  810.173348][  T178] usb 6-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40
[  810.186620][ T5814] usb 4-1: USB disconnect, device number 41
[  810.189819][T23058] loop6: detected capacity change from 0 to 64
[  810.194156][  T178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.211897][  T178] usb 6-1: Product: syz
[  810.216304][  T178] usb 6-1: Manufacturer: syz
[  810.220969][  T178] usb 6-1: SerialNumber: syz
[  810.239436][T23040] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  810.509565][  T178] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  810.563219][  T178] usb 6-1: USB disconnect, device number 3
[  810.826250][T23066] loop6: detected capacity change from 0 to 512
[  810.911922][T23066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  810.977029][T23066] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  811.102832][T22730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  811.352017][T23075] loop6: detected capacity change from 0 to 8192
[  811.386271][T23079] 9pnet_fd: Insufficient options for proto=fd
[  811.404519][T23075] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  811.427733][T23075] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  811.440362][T23075] REISERFS (device loop6): using ordered data mode
[  811.447636][T23075] reiserfs: using flush barriers
[  811.462413][T23075] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  811.479874][T23075] REISERFS (device loop6): checking transaction log (loop6)
[  811.492553][T23075] REISERFS (device loop6): Using r5 hash to sort names
[  811.525890][T23075] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  811.574508][T23075] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  811.890931][T23093] loop5: detected capacity change from 0 to 512
[  811.967531][T23093] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  812.014512][T23093] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  812.070395][T23093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  812.103037][T23093] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  812.206140][T23093] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.6867: corrupted inode contents
[  812.275659][T23093] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #2: comm syz.5.6867: mark_inode_dirty error
[  812.308655][T23093] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.6867: corrupted inode contents
[  812.328541][T23106] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.6867: corrupted inode contents
[  812.349659][T23106] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #2: comm syz.5.6867: mark_inode_dirty error
[  812.364080][T23106] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.6867: corrupted inode contents
[  812.377123][T23106] EXT4-fs error (device loop5): __ext4_ext_dirty:208: inode #2: comm syz.5.6867: mark_inode_dirty error
[  812.463499][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.104098][T23130] gtp0: entered promiscuous mode
[  813.120603][T23130] gtp0: entered allmulticast mode
[  813.124859][T23132] loop5: detected capacity change from 0 to 128
[  813.130542][T23130] team0: Device gtp0 is of different type
[  813.184279][T23132] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  813.217254][T23132] hpfs: filesystem error: improperly stopped
[  813.223333][T23132] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  813.241731][T23132] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  813.274107][T23132] hpfs: You really don't want any checks? You are crazy...
[  813.295551][T23132] hpfs: hpfs_map_sector(): read error
[  813.324937][T23132] hpfs: code page support is disabled
[  813.330641][T23132] hpfs: hpfs_map_4sectors(): unaligned read
[  813.361479][T23136] loop0: detected capacity change from 0 to 8
[  813.366489][T23132] hpfs: hpfs_map_4sectors(): unaligned read
[  813.381479][T23132] hpfs: filesystem error: unable to find root dir
[  813.603377][T23141] loop0: detected capacity change from 0 to 256
[  813.626612][T23141] exfat: Deprecated parameter 'utf8'
[  813.680240][T23138] ALSA: seq fatal error: cannot create timer (-19)
[  813.689722][T23141] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  814.294292][T23155] loop5: detected capacity change from 0 to 64
[  814.556328][T23159] team0: Device gtp0 is of different type
[  815.513984][T23166] loop5: detected capacity change from 0 to 32768
[  816.310836][T23183] loop5: detected capacity change from 0 to 4096
[  816.434856][T23183] ntfs3: loop5: ino=b, Correct links count -> 1.
[  816.467591][T23183] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  816.592297][T23191] loop6: detected capacity change from 0 to 512
[  816.598392][T23183] ntfs3: loop5: failed to convert "0080" to koi8-r
[  816.625681][T23191] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  816.640515][T23191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[  816.649005][T23191] EXT4-fs (loop6): orphan cleanup on readonly fs
[  816.657043][T23191] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #13: comm syz.6.6909: iget: bad i_size value: 12154761577498
[  816.683336][T23191] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.6909: couldn't read orphan inode 13 (err -117)
[  816.754841][T23191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  816.906893][T23191] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.6909: dx entry: limit 65535 != root limit 120
[  816.938293][T23191] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6909: Corrupt directory, running e2fsck is recommended
[  816.972881][T23191] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.6909: path /41/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  817.145257][T22730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  818.245907][T23216] team0: Device gtp0 is of different type
[  818.414488][T14241] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  818.614560][T14241] usb 4-1: Using ep0 maxpacket: 16
[  818.627410][T14241] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  818.658217][T14241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  818.692190][T14241] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  818.739233][T14241] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  818.764528][T14241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.796666][T14241] usb 4-1: config 0 descriptor??
[  819.132449][T23222] loop6: detected capacity change from 0 to 32768
[  819.231897][T23222] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  819.262820][T14241] magicmouse 0003:05AC:0324.0049: unknown main item tag 0x0
[  819.274903][T14241] magicmouse 0003:05AC:0324.0049: unknown main item tag 0x0
[  819.282298][T14241] magicmouse 0003:05AC:0324.0049: unknown main item tag 0x0
[  819.290169][T14241] magicmouse 0003:05AC:0324.0049: unknown main item tag 0x0
[  819.297601][T14241] magicmouse 0003:05AC:0324.0049: unknown main item tag 0x0
[  819.305066][T14241] magicmouse 0003:05AC:0324.0049: unknown main item tag 0x0
[  819.312430][T14241] magicmouse 0003:05AC:0324.0049: unknown main item tag 0x0
[  819.325783][T14241] magicmouse 0003:05AC:0324.0049: hidraw0: USB HID v10.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0
[  819.592617][  T178] usb 4-1: USB disconnect, device number 42
[  819.728889][T23224] loop5: detected capacity change from 0 to 40427
[  819.774449][T23224] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12
[  819.782172][T23224] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  820.149999][T22730] ocfs2: Unmounting device (7,6) on (node local)
[  820.486126][T23250] loop5: detected capacity change from 0 to 256
[  820.504296][T23250] exfat: Deprecated parameter 'utf8'
[  820.584967][T23250] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  821.234655][T21730] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  821.428615][T21730] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  821.450375][T21730] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  821.471510][T21730] usb 4-1: config 0 interface 0 has no altsetting 0
[  821.481840][T21730] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  821.493973][T21730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.509696][T21730] usb 4-1: config 0 descriptor??
[  821.946057][T23291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6939'.
[  822.138902][T21730] sony 0003:054C:0268.004A: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[  822.173947][T21730] sony 0003:054C:0268.004A: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.3-1/input0
[  822.223143][T21730] sony 0003:054C:0268.004A: failed to claim input
[  822.294768][T21730] usb 4-1: USB disconnect, device number 43
[  822.467740][T23301] fido_id[23301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  822.597765][T23311] loop0: detected capacity change from 0 to 512
[  822.634706][T23311] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  822.688036][T23311] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  822.718066][T23311] EXT4-fs (loop0): 1 truncate cleaned up
[  822.740752][T23311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  822.964059][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6947'.
[  822.967237][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  823.282062][T23331] loop5: detected capacity change from 0 to 512
[  823.302642][T23331] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  823.377832][T23331] EXT4-fs (loop5): 1 truncate cleaned up
[  823.402761][T23331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  823.435736][T23331] EXT4-fs warning (device loop5): ext4_group_extend:1897: can't read last block, resize aborted
[  823.493943][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  824.125971][T23350] [U] ø
[  824.143883][T23353] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  824.634693][T21897] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  824.668015][T23336] loop0: detected capacity change from 0 to 32768
[  824.734039][T23336] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  824.775095][   T56] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  824.825103][T21897] usb 6-1: Using ep0 maxpacket: 32
[  824.851839][T21897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  824.867504][T21897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  824.881211][T21897] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  824.893691][T21897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.913254][T21897] usb 6-1: config 0 descriptor??
[  824.994488][   T56] usb 4-1: Using ep0 maxpacket: 8
[  825.021054][   T56] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  825.044395][   T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.064006][   T56] usb 4-1: Product: syz
[  825.074158][   T56] usb 4-1: Manufacturer: syz
[  825.082071][   T56] usb 4-1: SerialNumber: syz
[  825.101483][T23336] XFS (loop0): Ending clean mount
[  825.106037][   T56] usb 4-1: config 0 descriptor??
[  825.157541][T23336] XFS (loop0): Quotacheck needed: Please wait.
[  825.157968][   T56] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  825.362871][T23361] loop6: detected capacity change from 0 to 32768
[  825.388685][T23336] XFS (loop0): Quotacheck: Done.
[  825.414853][T21897] input: HID 18b1:0037 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:18B1:0037.004B/input/input57
[  825.596217][T21897] petalynx 0003:18B1:0037.004B: input,hidraw0: USB HID v0.00 Joystick [HID 18b1:0037] on usb-dummy_hcd.5-1/input0
[  825.673385][T21897] usb 6-1: USB disconnect, device number 4
[  825.786333][   T56] gspca_sonixj: reg_w1 err -71
[  825.792935][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  825.806305][   T56] sonixj: probe of 4-1:0.0 failed with error -71
[  825.822549][   T56] usb 4-1: USB disconnect, device number 44
[  825.944179][T23383] fido_id[23383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  826.559414][T23399] loop5: detected capacity change from 0 to 128
[  826.590578][T23398] loop6: detected capacity change from 0 to 512
[  826.618968][T23399] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  826.743665][T23399] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  826.813365][T23398] EXT4-fs (loop6): orphan cleanup on readonly fs
[  826.820348][T23398] EXT4-fs error (device loop6): ext4_ext_check_inode:532: inode #4: comm syz.6.6964: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1)
[  826.850025][T23398] EXT4-fs error (device loop6): ext4_quota_enable:7147: comm syz.6.6964: Bad quota inode: 4, type: 1
[  826.917722][T23398] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  827.019435][T23398] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  827.031009][T23398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  827.046111][T21410] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  827.097577][T23398] EXT4-fs error (device loop6): ext4_lookup:1855: inode #2: comm syz.6.6964: 'file0' linked to parent dir
[  827.357232][T22730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  828.012093][T23441] loop0: detected capacity change from 0 to 256
[  828.333602][T23448] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6980'.
[  828.583703][T23456] loop5: detected capacity change from 0 to 512
[  828.629618][T23456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  828.667227][T23456] EXT4-fs (loop5): 1 truncate cleaned up
[  828.684887][T23456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  828.764433][T23456] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5960: inode #12: comm syz.5.6983: bad extra_isize 62 (inode size 256)
[  828.850059][T23456] EXT4-fs (loop5): Remounting filesystem read-only
[  828.987447][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  829.951670][T23459] loop0: detected capacity change from 0 to 32768
[  831.378823][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7001'.
[  831.424683][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7001'.
[  831.484687][T23521] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22)
[  831.768457][T23532] loop0: detected capacity change from 0 to 512
[  831.796043][T23532] EXT4-fs: inline encryption not supported
[  831.834558][T23532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  831.909378][T23532] EXT4-fs (loop0): 1 truncate cleaned up
[  831.936625][T23532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  832.102097][T23532] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5960: inode #15: comm syz.0.7005: bad extra_isize 62 (inode size 256)
[  832.246379][T23532] EXT4-fs (loop0): Remounting filesystem read-only
[  832.479311][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  833.467319][T23578] loop0: detected capacity change from 0 to 256
[  833.529417][T23578] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  833.621506][T23580] Bluetooth: MGMT ver 1.22
[  833.658913][T23582] loop5: detected capacity change from 0 to 512
[  833.710156][T23582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  833.750974][T23582] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  833.897870][   T27] audit: type=1800 audit(1787617309.624:248): pid=23582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7024" name="file1" dev="loop5" ino=15 res=0 errno=0
[  834.058105][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  834.852301][T23591] loop5: detected capacity change from 0 to 32768
[  835.312407][T23595] loop0: detected capacity change from 0 to 32768
[  836.133529][T23607] loop5: detected capacity change from 0 to 2048
[  836.197405][T23607] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  836.236807][T23607] NILFS (loop5): mounting unchecked fs
[  836.250857][T23607] NILFS (loop5): recovery required for readonly filesystem
[  836.289564][T23607] NILFS (loop5): write access will be enabled during recovery
[  836.298185][ T5785] udevd[5785]: incorrect nilfs2 checksum on /dev/loop5
[  836.307287][T23610] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7037'.
[  836.341290][T23607] NILFS (loop5): recovery complete
[  837.119077][T23629] netlink: 'syz.3.7044': attribute type 1 has an invalid length.
[  837.570793][T23637] loop5: detected capacity change from 0 to 512
[  837.637530][T23637] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.7047: bg 0: block 5: invalid block bitmap
[  837.690520][T23637] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  837.739375][T23637] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.7047: invalid indirect mapped block 3 (level 2)
[  837.864240][T23637] EXT4-fs (loop5): 1 orphan inode deleted
[  837.874107][T23637] EXT4-fs (loop5): 1 truncate cleaned up
[  837.903002][T23637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  838.117339][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  838.258951][T23653] loop5: detected capacity change from 0 to 64
[  838.334131][T23653] syz.5.7053: attempt to access beyond end of device
[  838.334131][T23653] loop5: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  838.383689][T23653] Buffer I/O error on dev loop5, logical block 134217734, lost async page write
[  838.724928][    T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  838.926789][    T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  838.954931][    T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  838.976520][T23649] loop0: detected capacity change from 0 to 32768
[  838.985169][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  839.003578][    T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  839.028569][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.056106][    T9] usb 4-1: config 0 descriptor??
[  839.072879][T23661] loop5: detected capacity change from 0 to 2048
[  839.092263][T23649] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  839.239792][T23661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  839.283681][T23661] EXT4-fs error (device loop5): ext4_find_extent:947: inode #2: comm syz.5.7058: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  839.417809][T23649] XFS (loop0): Ending clean mount
[  839.426708][T23649] XFS (loop0): Quotacheck needed: Please wait.
[  839.480892][T21410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  839.497412][    T9] hid (null): global environment stack underflow
[  839.503836][    T9] hid (null): invalid report_count 57712
[  839.511303][    T9] hid (null): invalid report_count 746552055
[  839.525783][    T9] kye 0003:0458:5013.004C: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  839.540548][    T9] kye 0003:0458:5013.004C: global environment stack underflow
[  839.548868][    T9] kye 0003:0458:5013.004C: item 0 2 1 11 parsing failed
[  839.562921][T23649] XFS (loop0): Quotacheck: Done.
[  839.594183][    T9] kye 0003:0458:5013.004C: parse failed
[  839.600160][    T9] kye: probe of 0003:0458:5013.004C failed with error -22
[  839.792653][    T9] usb 4-1: USB disconnect, device number 45
[  839.858760][ T5774] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  840.757946][T23683] netlink: 'syz.0.7063': attribute type 29 has an invalid length.
[  840.795169][T23683] netlink: 'syz.0.7063': attribute type 29 has an invalid length.
[  840.864633][T23683] netlink: 'syz.0.7063': attribute type 29 has an invalid length.
[  841.446597][T23690] loop0: detected capacity change from 0 to 4096
[  841.554022][T23695] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  841.810319][T23697] loop5: detected capacity change from 0 to 256
[  841.836354][T23697] exfat: Deprecated parameter 'utf8'
[  841.861379][T23697] exfat: Deprecated parameter 'namecase'
[  841.898140][T23697] exfat: Deprecated parameter 'namecase'
[  841.903878][T23697] exfat: Deprecated parameter 'utf8'
[  842.008430][T23697] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  843.383082][T23725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7084'.
[  843.639305][T23731] netlink: 'syz.0.7086': attribute type 16 has an invalid length.
[  843.655997][T23731] netlink: 64122 bytes leftover after parsing attributes in process `syz.0.7086'.
[  844.207292][T23742] loop5: detected capacity change from 0 to 64
[  844.234889][T23742] hfs: unable to locate alternate MDB
[  844.243883][T23742] hfs: continuing without an alternate MDB
[  844.588103][T23748] loop5: detected capacity change from 0 to 64
[  844.734671][T23748] 
[  844.737073][T23748] ======================================================
[  844.744132][T23748] WARNING: possible circular locking dependency detected
[  844.751185][T23748] syzkaller #0 Not tainted
[  844.755639][T23748] ------------------------------------------------------
[  844.762689][T23748] syz.5.7095/23748 is trying to acquire lock:
[  844.768796][T23748] ffff88805acea0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x170/0x1e0
[  844.778396][T23748] 
[  844.778396][T23748] but task is already holding lock:
[  844.785789][T23748] ffff88801d7ecef8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xeb/0x1320
[  844.796637][T23748] 
[  844.796637][T23748] which lock already depends on the new lock.
[  844.796637][T23748] 
[  844.807075][T23748] 
[  844.807075][T23748] the existing dependency chain (in reverse order) is:
[  844.816122][T23748] 
[  844.816122][T23748] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  844.825381][T23748]        __mutex_lock+0x135/0xc80
[  844.830504][T23748]        hfs_extend_file+0xeb/0x1320
[  844.835810][T23748]        hfs_bmap_reserve+0x108/0x430
[  844.841189][T23748]        __hfs_ext_write_extent+0x1fc/0x470
[  844.847088][T23748]        __hfs_ext_cache_extent+0x6e/0x9a0
[  844.852901][T23748]        hfs_extend_file+0x381/0x1320
[  844.858279][T23748]        hfs_get_block+0x402/0xbe0
[  844.863398][T23748]        __block_write_begin_int+0x571/0x1b00
[  844.869507][T23748]        block_write_begin+0x9a/0x1e0
[  844.874885][T23748]        cont_write_begin+0x5fd/0x800
[  844.880260][T23748]        hfs_write_begin+0x8b/0xd0
[  844.885379][T23748]        generic_perform_write+0x2fe/0x5c0
[  844.891195][T23748]        generic_file_write_iter+0xaf/0x2e0
[  844.897096][T23748]        vfs_write+0x474/0x9a0
[  844.901875][T23748]        ksys_write+0x151/0x260
[  844.906732][T23748]        do_syscall_64+0x55/0xb0
[  844.911691][T23748]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  844.918116][T23748] 
[  844.918116][T23748] -> #0 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[  844.926225][T23748]        __lock_acquire+0x37ef/0x7d80
[  844.931607][T23748]        lock_acquire+0x19e/0x420
[  844.936636][T23748]        __mutex_lock+0x135/0xc80
[  844.941672][T23748]        hfs_find_init+0x170/0x1e0
[  844.946794][T23748]        hfs_extend_file+0x342/0x1320
[  844.952174][T23748]        hfs_bmap_reserve+0x108/0x430
[  844.957571][T23748]        hfs_cat_create+0x203/0x6a0
[  844.962794][T23748]        hfs_create+0x66/0xd0
[  844.967475][T23748]        path_openat+0x1705/0x3270
[  844.972590][T23748]        do_filp_open+0x1f2/0x430
[  844.977617][T23748]        do_sys_openat2+0x134/0x1d0
[  844.982825][T23748]        __x64_sys_openat+0x139/0x160
[  844.988206][T23748]        do_syscall_64+0x55/0xb0
[  844.993152][T23748]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  844.999575][T23748] 
[  844.999575][T23748] other info that might help us debug this:
[  844.999575][T23748] 
[  845.009804][T23748]  Possible unsafe locking scenario:
[  845.009804][T23748] 
[  845.017257][T23748]        CPU0                    CPU1
[  845.022624][T23748]        ----                    ----
[  845.027994][T23748]   lock(&HFS_I(tree->inode)->extents_lock);
[  845.033980][T23748]                                lock(&tree->tree_lock#2/1);
[  845.041382][T23748]                                lock(&HFS_I(tree->inode)->extents_lock);
[  845.049890][T23748]   lock(&tree->tree_lock#2/1);
[  845.054761][T23748] 
[  845.054761][T23748]  *** DEADLOCK ***
[  845.054761][T23748] 
[  845.062919][T23748] 4 locks held by syz.5.7095/23748:
[  845.068120][T23748]  #0: ffff88807ed6c418 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  845.077406][T23748]  #1: ffff88801d7ea9b8 (&type->i_mutex_dir_key#15){++++}-{3:3}, at: path_openat+0x7f4/0x3270
[  845.087691][T23748]  #2: ffff88805acee0b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfs_find_init+0x170/0x1e0
[  845.097457][T23748]  #3: ffff88801d7ecef8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xeb/0x1320
[  845.108691][T23748] 
[  845.108691][T23748] stack backtrace:
[  845.114580][T23748] CPU: 1 PID: 23748 Comm: syz.5.7095 Not tainted syzkaller #0
[  845.122042][T23748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  845.132113][T23748] Call Trace:
[  845.135403][T23748]  <TASK>
[  845.138388][T23748]  dump_stack_lvl+0x18c/0x250
[  845.143080][T23748]  ? load_image+0x420/0x420
[  845.147599][T23748]  ? show_regs_print_info+0x20/0x20
[  845.152814][T23748]  ? print_circular_bug+0x12b/0x1a0
[  845.158027][T23748]  check_noncircular+0x2fc/0x400
[  845.162980][T23748]  ? look_up_lock_class+0x75/0x140
[  845.168110][T23748]  ? print_deadlock_bug+0x5d0/0x5d0
[  845.173322][T23748]  ? lockdep_lock+0xf5/0x230
[  845.177926][T23748]  ? _find_first_zero_bit+0xd6/0x100
[  845.183232][T23748]  __lock_acquire+0x37ef/0x7d80
[  845.188102][T23748]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  845.194023][T23748]  ? verify_lock_unused+0x140/0x140
[  845.199240][T23748]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  845.205202][T23748]  ? _raw_spin_unlock+0x40/0x40
[  845.210063][T23748]  ? stack_trace_save+0xaa/0x100
[  845.215099][T23748]  ? stack_trace_snprint+0xf0/0xf0
[  845.220224][T23748]  lock_acquire+0x19e/0x420
[  845.224743][T23748]  ? hfs_find_init+0x170/0x1e0
[  845.229543][T23748]  ? hfs_extend_file+0x342/0x1320
[  845.234575][T23748]  ? hfs_bmap_reserve+0x108/0x430
[  845.239608][T23748]  ? hfs_cat_create+0x203/0x6a0
[  845.244471][T23748]  ? __x64_sys_openat+0x139/0x160
[  845.249522][T23748]  ? __might_sleep+0xe0/0xe0
[  845.254131][T23748]  ? read_lock_is_recursive+0x20/0x20
[  845.259518][T23748]  __mutex_lock+0x135/0xc80
[  845.264032][T23748]  ? hfs_find_init+0x170/0x1e0
[  845.268804][T23748]  ? hfs_find_init+0x170/0x1e0
[  845.273596][T23748]  ? mutex_lock_nested+0x20/0x20
[  845.278636][T23748]  ? __kmem_cache_alloc_node+0x194/0x250
[  845.284288][T23748]  ? hfs_find_init+0x99/0x1e0
[  845.288974][T23748]  ? hfs_find_init+0x99/0x1e0
[  845.293655][T23748]  ? __kmalloc+0xe5/0x240
[  845.298006][T23748]  hfs_find_init+0x170/0x1e0
[  845.302617][T23748]  hfs_extend_file+0x342/0x1320
[  845.307483][T23748]  ? hfs_get_block+0xbe0/0xbe0
[  845.312314][T23748]  ? rcu_is_watching+0x15/0xb0
[  845.317178][T23748]  ? trace_contention_end+0x39/0xe0
[  845.322384][T23748]  ? __mutex_lock+0x30d/0xc80
[  845.327083][T23748]  ? hfs_find_init+0x170/0x1e0
[  845.331857][T23748]  ? mutex_lock_nested+0x20/0x20
[  845.336826][T23748]  hfs_bmap_reserve+0x108/0x430
[  845.341690][T23748]  hfs_cat_create+0x203/0x6a0
[  845.346375][T23748]  ? hfs_cat_build_key+0x170/0x170
[  845.351501][T23748]  ? _raw_spin_unlock+0x28/0x40
[  845.356357][T23748]  ? hfs_new_inode+0x92d/0xc00
[  845.361151][T23748]  hfs_create+0x66/0xd0
[  845.365315][T23748]  ? hfs_lookup+0x320/0x320
[  845.369823][T23748]  path_openat+0x1705/0x3270
[  845.374432][T23748]  ? do_filp_open+0x430/0x430
[  845.379126][T23748]  do_filp_open+0x1f2/0x430
[  845.383640][T23748]  ? vfs_tmpfile+0x620/0x620
[  845.388247][T23748]  ? _raw_spin_unlock+0x28/0x40
[  845.393104][T23748]  ? alloc_fd+0x590/0x640
[  845.397453][T23748]  do_sys_openat2+0x134/0x1d0
[  845.402146][T23748]  ? do_sys_open+0xe0/0xe0
[  845.406573][T23748]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  845.412567][T23748]  ? lock_chain_count+0x20/0x20
[  845.417429][T23748]  __x64_sys_openat+0x139/0x160
[  845.422297][T23748]  do_syscall_64+0x55/0xb0
[  845.426724][T23748]  ? clear_bhb_loop+0x40/0x90
[  845.431416][T23748]  ? clear_bhb_loop+0x40/0x90
[  845.436111][T23748]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  845.442013][T23748] RIP: 0033:0x7f5d9e39e0d9
[  845.446448][T23748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  845.466064][T23748] RSP: 002b:00007f5d9f20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  845.474576][T23748] RAX: ffffffffffffffda RBX: 00007f5d9e625fa0 RCX: 00007f5d9e39e0d9
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  845.482556][T23748] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c
[  845.490533][T23748] RBP: 00007f5d9e435024 R08: 0000000000000000 R09: 0000000000000000
[  845.498512][T23748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  845.506496][T23748] R13: 00007f5d9e626038 R14: 00007f5d9e625fa0 R15: 00007fffbc733448
[  845.514487][T23748]  </TASK>
[  845.638985][ T6868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  846.359725][ T3473] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.430015][ T3473] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.496606][ T3473] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.575402][ T3473] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.363424][ T3473] hsr_slave_0: left promiscuous mode
[  847.380335][ T3473] hsr_slave_1: left promiscuous mode
[  847.386788][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  847.394221][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_0
[  847.407846][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  847.415774][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_1
[  847.423522][ T3473] bridge_slave_1: left allmulticast mode
[  847.431254][ T3473] bridge_slave_1: left promiscuous mode
[  847.437328][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.448042][ T3473] bridge_slave_0: left allmulticast mode
[  847.453907][ T3473] bridge_slave_0: left promiscuous mode
[  847.460449][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.477468][ T3473] veth1_macvtap: left promiscuous mode
[  847.483047][ T3473] veth0_macvtap: left promiscuous mode
[  847.491147][ T3473] veth1_vlan: left promiscuous mode
[  847.496518][ T3473] veth0_vlan: left promiscuous mode
[  847.829178][ T3473] team0 (unregistering): Port device team_slave_1 removed
[  847.869338][ T3473] team0 (unregistering): Port device team_slave_0 removed
[  847.912470][ T3473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  847.955941][ T3473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  848.095844][ T3473] bond0 (unregistering): Released all slaves
[  848.562884][ T3473] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.619793][ T3473] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.661170][ T3473] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.721946][ T3473] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.843905][ T3473] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  848.875091][ T3473] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.929621][ T3473] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  848.939519][ T3473] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.008375][ T3473] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  849.019073][ T3473] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.079646][ T3473] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  849.101503][ T3473] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.219351][ T3473] tipc: Left network mode
[  850.152756][ T3473] hsr_slave_0: left promiscuous mode
[  850.161215][ T3473] hsr_slave_1: left promiscuous mode
[  850.169383][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  850.177423][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_0
[  850.196121][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  850.203578][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_1
[  850.212421][ T3473] bridge_slave_1: left allmulticast mode
[  850.218498][ T3473] bridge_slave_1: left promiscuous mode
[  850.224363][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.233928][ T3473] bridge_slave_0: left allmulticast mode
[  850.241667][ T3473] bridge_slave_0: left promiscuous mode
[  850.249058][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.272451][ T3473] hsr_slave_0: left promiscuous mode
[  850.279614][ T3473] hsr_slave_1: left promiscuous mode
[  850.291597][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  850.299221][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_0
[  850.307210][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  850.316670][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_1
[  850.325001][ T3473] bridge_slave_1: left allmulticast mode
[  850.330779][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.339705][ T3473] bridge_slave_0: left allmulticast mode
[  850.346953][ T3473] bridge_slave_0: left promiscuous mode
[  850.352708][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.376624][ T3473] veth1_macvtap: left promiscuous mode
[  850.382220][ T3473] veth0_macvtap: left promiscuous mode
[  850.389231][ T3473] veth1_vlan: left promiscuous mode
[  850.396069][ T3473] veth0_vlan: left promiscuous mode
[  850.402726][ T3473] bridge0: left promiscuous mode
[  850.409224][ T3473] veth1_macvtap: left promiscuous mode
[  850.414905][ T3473] veth0_macvtap: left promiscuous mode
[  850.420544][ T3473] veth1_vlan: left promiscuous mode
[  850.426674][ T3473] veth0_vlan: left promiscuous mode
[  850.611934][T23378] infiniband syz1: ib_query_port failed (-19)
[  850.794603][ T3473] team0 (unregistering): Port device team_slave_1 removed
[  850.836232][ T3473] team0 (unregistering): Port device team_slave_0 removed
[  850.877317][ T3473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  850.921656][ T3473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  851.001291][ T3473] bond0 (unregistering): Released all slaves
[  851.287283][ T3473] team0 (unregistering): Port device team_slave_1 removed
[  851.330127][ T3473] team0 (unregistering): Port device team_slave_0 removed
[  851.399612][ T3473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  851.439600][ T3473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  851.539220][ T3473] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  851.547761][T23378] infiniband syz1: ib_query_port failed (-19)
[  851.580136][ T3473] bond0 (unregistering): Released all slaves
[  852.253007][ T3473] IPVS: stop unused estimator thread 0...