last executing test programs:

1m5.86979684s ago: executing program 2 (id=26086):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@mcast2, 0x800, 0x0, 0x2, 0x1, 0x1, 0x100}, 0x20)

1m5.265954385s ago: executing program 2 (id=26094):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8001}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x20000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806)

1m4.921813927s ago: executing program 2 (id=26109):
r0 = socket(0x18, 0x0, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)='\n', 0x1}], 0x1}, 0x80)

1m4.818670708s ago: executing program 2 (id=26100):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
chdir(&(0x7f0000000240)='./file0\x00')
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x0, 0x0)

1m4.364242112s ago: executing program 2 (id=26101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m2.933828783s ago: executing program 2 (id=26121):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r0 = open(&(0x7f0000000040)='./file1\x00', 0x8000, 0x1c4)
ftruncate(r0, 0x2007ffc)

1m2.667637555s ago: executing program 32 (id=26121):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
r0 = open(&(0x7f0000000040)='./file1\x00', 0x8000, 0x1c4)
ftruncate(r0, 0x2007ffc)

3.7739478s ago: executing program 5 (id=26828):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

3.455524243s ago: executing program 0 (id=26834):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2.867001207s ago: executing program 0 (id=26851):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24)

2.734972529s ago: executing program 0 (id=26845):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00')

2.57700348s ago: executing program 0 (id=26848):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

2.122456293s ago: executing program 1 (id=26856):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24)

2.019761764s ago: executing program 1 (id=26858):
unshare(0x28000600)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x8f, 0x7fff0000}]})
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80042103, 0x0)

1.886080735s ago: executing program 1 (id=26862):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}})
write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'syz0\x00'}], 0xa, "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"}, 0x2ac)

1.875026695s ago: executing program 5 (id=26863):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r0, 0x540b, 0x2)

1.779387146s ago: executing program 1 (id=26865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
sendmsg$netlink(r0, &(0x7f0000000780)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc, &(0x7f0000004300)=[{&(0x7f0000000640)={0x10, 0x3c, 0x4, 0x70bd29, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x20000000}, 0x4)

1.705234896s ago: executing program 1 (id=26866):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x5525, &(0x7f0000001600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x6, 0x10000002000003, 0x1000000, 0x401})

1.692237936s ago: executing program 5 (id=26867):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

1.572054297s ago: executing program 5 (id=26871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd06, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2021}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

1.361323279s ago: executing program 5 (id=26874):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10008, &(0x7f0000000000), 0xff, 0x49e, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0)

1.354613239s ago: executing program 4 (id=26875):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000100)={[{@fat=@tz_utc}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@nfs}, {@fat=@nfs}, {@fat=@fmask={'fmask', 0x3d, 0x100}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs}]}, 0x1, 0x11ab, &(0x7f0000001280)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x4b4, 0x4010})

1.170134931s ago: executing program 3 (id=26877):
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r0, &(0x7f00000000c0)=[{0xb, 0x28, 0x0, 0xfd, @tick=0x1, {0x20}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}], 0x1c)

1.001224962s ago: executing program 3 (id=26878):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000004580)=ANY=[@ANYBLOB=',uid=', @ANYRESDEC=0x0])

977.549722ms ago: executing program 5 (id=26879):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000004a00)='./file1\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0xff, 0x5ecd, &(0x7f000000a900)="$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")
lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x8, 0x9}, {0x1000}]}, 0x18, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45)

874.062893ms ago: executing program 3 (id=26880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c000280050003000e000000080002400000000a08000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

698.889764ms ago: executing program 4 (id=26881):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e31, @private=0xa010102}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="08001efbb056e9ff", 0x8}, {0x0, 0x15}], 0x2, 0x0, 0x0, 0x60000000}, 0x8c00)

687.238984ms ago: executing program 3 (id=26882):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000000080)="e3", 0x1}], 0x1}, 0x24048401)
sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x20040001)

528.261926ms ago: executing program 4 (id=26883):
unshare(0x2040400)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$setsig(r0, 0xa, 0x2027)

527.672076ms ago: executing program 3 (id=26884):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0)

380.244407ms ago: executing program 4 (id=26885):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000100ffff000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000002000008500000086000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

379.528087ms ago: executing program 3 (id=26886):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)

198.150228ms ago: executing program 4 (id=26887):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x1, 0xdd9f83, 0x1, 0xcf49, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x4, 0x6fd8e843}, 0x3, 0xec}})

172.005259ms ago: executing program 1 (id=26888):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
getdents(r0, &(0x7f00000001c0)=""/59, 0x3b)
getdents64(r0, 0xffffffffffffffff, 0x43)

130.922299ms ago: executing program 0 (id=26889):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x1, 0x0, &(0x7f0000000280))

105.334769ms ago: executing program 4 (id=26890):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)

0s ago: executing program 0 (id=26891):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000005200010000000000040000000a00000008000100"], 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

7602] usb 2-1: SerialNumber: syz
[ 1638.020530][ T7602] usb 2-1: config 0 descriptor??
[ 1638.320565][ T7602] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[ 1638.332376][ T7602] usb 2-1: No valid video chain found.
[ 1638.363582][T19756] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1638.483765][T32052] netdevsim netdevsim2: Firmware load for '/../file0' refused, path contains '..' component
[ 1638.565390][ T6407] usb 2-1: USB disconnect, device number 116
[ 1638.716301][T19756] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1638.730949][T19756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1638.733873][T32072] netlink: 'syz.0.25471': attribute type 1 has an invalid length.
[ 1638.747259][T19756] usb 5-1: Product: syz
[ 1638.760404][T19756] usb 5-1: Manufacturer: syz
[ 1638.787463][T19756] usb 5-1: SerialNumber: syz
[ 1639.125009][T19756] usb 5-1: selecting invalid altsetting 1
[ 1639.197718][T19756] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[ 1639.256359][T19756] usb 5-1: USB disconnect, device number 102
[ 1639.423764][T32127] netlink: 'syz.3.25484': attribute type 1 has an invalid length.
[ 1639.431858][T32127] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.25484'.
[ 1639.508021][ T4508] udevd[4508]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1639.663872][T32142] loop1: detected capacity change from 0 to 512
[ 1639.715572][T32142] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[ 1639.805912][T32142] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.25488: invalid indirect mapped block 4294967295 (level 0)
[ 1639.909637][T32142] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.25488: invalid indirect mapped block 4294967295 (level 1)
[ 1639.965889][T32142] EXT4-fs (loop1): 1 orphan inode deleted
[ 1639.977482][T32142] EXT4-fs (loop1): 1 truncate cleaned up
[ 1639.983601][T32142] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x00000000000009f8,lazytime,jqfmt=vfsv1,block_validity,nojournal_checksum,mblk_io_submit,jqfmt=vfsv0,,errors=continue. Quota mode: none.
[ 1640.004945][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1640.098861][T32167] loop3: detected capacity change from 0 to 1024
[ 1640.322301][T32167] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,grpid,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[ 1640.687973][T32207] netlink: 'syz.2.25505': attribute type 4 has an invalid length.
[ 1640.723395][T32207] netlink: 'syz.2.25505': attribute type 10 has an invalid length.
[ 1640.801729][T32207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.25505'.
[ 1640.821377][T32213] loop4: detected capacity change from 0 to 128
[ 1640.848381][T32207] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1640.891172][T32215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25507'.
[ 1640.903156][T32213] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1641.126883][T32230] loop1: detected capacity change from 0 to 1024
[ 1641.353950][T32230] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodiscard,journal_dev=0x0000000000000000,usrjquota=,nodiscard,lazytime,init_itable=0x0000000000000005,jqfmt=vfsold,grpjquota=,,errors=continue. Quota mode: none.
[ 1641.361298][T32254] loop4: detected capacity change from 0 to 64
[ 1641.379035][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1641.557997][T32270] loop2: detected capacity change from 0 to 1024
[ 1641.629942][T32278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25528'.
[ 1641.679992][T32278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25528'.
[ 1641.870677][T32298] loop4: detected capacity change from 0 to 512
[ 1641.920069][T32303] loop3: detected capacity change from 0 to 64
[ 1642.002689][T32298] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1642.107738][T32298] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[ 1642.129895][T32298] Quota error (device loop4): write_blk: dquota write failed
[ 1642.138679][T32298] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[ 1642.149159][T32298] Quota error (device loop4): write_blk: dquota write failed
[ 1642.156927][T32298] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[ 1642.172159][T32298] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.25531: Failed to acquire dquot type 1
[ 1642.190919][T32298] EXT4-fs (loop4): 1 truncate cleaned up
[ 1642.197149][T32298] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,norecovery,quota,resuid=0x0000000000000000,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[ 1642.288177][T32319] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[ 1642.364431][T32335] loop3: detected capacity change from 0 to 64
[ 1642.381703][T32319] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[ 1642.449847][T32319] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume.
[ 1642.634206][T32356] loop2: detected capacity change from 0 to 64
[ 1642.999111][T32382] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1643.012127][T32392] tmpfs: Too small a size for current use
[ 1643.025168][T32386] exFAT-fs (loop2): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d)
[ 1643.153788][T32402] netlink: 'syz.4.25558': attribute type 29 has an invalid length.
[ 1643.166136][T32402] netlink: 'syz.4.25558': attribute type 29 has an invalid length.
[ 1643.188061][T32402] netlink: 'syz.4.25558': attribute type 29 has an invalid length.
[ 1643.374131][T32424] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:18980
[ 1643.517040][T32432] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«=
[ 1643.656256][T32450] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25572'.
[ 1644.201025][T32494] exfat: Bad value for 'uid'
[ 1644.270750][T32494] netlink: 148 bytes leftover after parsing attributes in process `syz.4.25588'.
[ 1644.323285][T32494] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[ 1644.461998][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25594'.
[ 1644.666792][T32512] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[ 1644.766919][T32512] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1644.828694][T32547] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1644.864270][T32547] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[ 1644.922870][T32547] overlayfs: missing 'lowerdir'
[ 1645.158324][T32544] set_capacity_and_notify: 4 callbacks suppressed
[ 1645.158343][T32544] loop3: detected capacity change from 0 to 8192
[ 1645.352095][T32544] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[ 1645.389751][T32544] REISERFS (device loop3): using ordered data mode
[ 1645.442703][T32544] reiserfs: using flush barriers
[ 1645.506921][T32544] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1645.569227][T32544] REISERFS (device loop3): checking transaction log (loop3)
[ 1645.697115][T10734] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1645.964192][T10734] usb 3-1: Using ep0 maxpacket: 16
[ 1645.971345][T32544] REISERFS (device loop3): Using r5 hash to sort names
[ 1646.008024][T32544] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 1646.285241][T10734] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1646.313634][T32463] loop1: detected capacity change from 0 to 32768
[ 1646.316999][T10734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.395076][T10734] usb 3-1: Product: syz
[ 1646.428717][T10734] usb 3-1: Manufacturer: syz
[ 1646.433481][T10734] usb 3-1: SerialNumber: syz
[ 1646.495371][T10734] usb 3-1: config 0 descriptor??
[ 1646.615913][T32463] JBD2: Ignoring recovery information on journal
[ 1646.650170][T10734] visor 3-1:0.0: Sony Clie 3.5 converter detected
[ 1646.812015][T32598] loop4: detected capacity change from 0 to 512
[ 1646.938135][T32598] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.25614: inode has both inline data and extents flags
[ 1646.974749][T32598] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.25614: couldn't read orphan inode 15 (err -117)
[ 1646.988690][T32609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25616'.
[ 1647.004185][T32598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1647.013591][T32463] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1647.125574][T10734] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0
[ 1647.373491][T10734] usb 3-1: USB disconnect, device number 88
[ 1647.396376][ T4243] ocfs2: Unmounting device (7,1) on (node local)
[ 1647.405520][T32631] loop4: detected capacity change from 0 to 1024
[ 1647.430221][T10734] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[ 1647.476618][T10734] visor 3-1:0.0: device disconnected
[ 1647.728933][T32640] loop3: detected capacity change from 0 to 8192
[ 1647.738114][T32631] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[ 1647.919188][T32640] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[ 1647.931419][T32640] REISERFS (device loop3): using ordered data mode
[ 1647.938244][T32640] reiserfs: using flush barriers
[ 1647.974093][T32640] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1648.054174][T32640] REISERFS (device loop3): checking transaction log (loop3)
[ 1648.118982][T32640] REISERFS (device loop3): Using r5 hash to sort names
[ 1648.142388][T32640] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 1649.738683][T32694] loop4: detected capacity change from 0 to 32768
[ 1649.900320][T32694] (syz.4.25637,32694,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1649.941481][T32694] (syz.4.25637,32694,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1650.061092][T32694] (syz.4.25637,32694,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[ 1650.141132][T32694] JBD2: Ignoring recovery information on journal
[ 1650.262349][T32694] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1650.717997][ T4248] ocfs2: Unmounting device (7,4) on (node local)
[ 1651.109139][  T352] tipc: Started in network mode
[ 1651.115439][  T352] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[ 1651.149693][  T352] tipc: Enabled bearer <eth:team0>, priority 6
[ 1651.464240][T32734] loop1: detected capacity change from 0 to 32768
[ 1651.812256][T32734] ialloc: diAlloc returned -5!
[ 1651.854930][T10734] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1651.869189][  T333] loop2: detected capacity change from 0 to 32768
[ 1652.189239][  T333] XFS (loop2): Mounting V5 Filesystem
[ 1652.254372][  T425] loop4: detected capacity change from 0 to 4096
[ 1652.337212][  T333] XFS (loop2): Ending clean mount
[ 1652.350817][ T7602] tipc: Node number set to 43690
[ 1652.442040][  T425] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 1652.473179][ T4240] XFS (loop2): Unmounting Filesystem
[ 1652.474844][  T425] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1652.549995][T10734] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[ 1652.590429][T10734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1652.635464][  T425] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1652.657859][T10734] usb 4-1: Product: syz
[ 1652.662331][T10734] usb 4-1: Manufacturer: syz
[ 1652.688896][T10734] usb 4-1: SerialNumber: syz
[ 1652.695023][  T425] ntfs: volume version 3.1.
[ 1652.718103][T10734] usb 4-1: config 0 descriptor??
[ 1652.789707][T10734] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1652.800393][T10734] hub: probe of 4-1:0.0 failed with error -5
[ 1652.817422][T10734] f81232 4-1:0.0: f81534a converter detected
[ 1652.926550][ T4248] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[ 1652.946939][  T448] loop1: detected capacity change from 0 to 1764
[ 1653.075793][T10734] usb 4-1: f81534a converter now attached to ttyUSB0
[ 1653.281516][  T468] loop4: detected capacity change from 0 to 4096
[ 1653.409824][  T468] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[ 1653.423618][T10734] usb 4-1: USB disconnect, device number 109
[ 1653.456322][T10734] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[ 1653.469428][  T468] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1653.499380][T10734] f81232 4-1:0.0: device disconnected
[ 1653.530533][  T468] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 1653.562843][  T468] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1653.630826][  T468] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1653.715306][  T468] ntfs: volume version 3.1.
[ 1653.731603][  T468] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[ 1654.323272][  T543] IPVS: Unknown mcast interface: pimreg0
[ 1654.672927][  T563] loop3: detected capacity change from 0 to 128
[ 1654.732174][  T563] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[ 1654.813327][  T563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1655.068311][  T568] loop1: detected capacity change from 0 to 4096
[ 1655.152430][  T536] loop4: detected capacity change from 0 to 32768
[ 1655.216223][  T568] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[ 1655.340859][  T536] XFS (loop4): Mounting V5 Filesystem
[ 1655.392840][  T568] ntfs3: loop1: failed to convert "c46c" to macromanian
[ 1655.491910][  T536] XFS (loop4): Ending clean mount
[ 1655.661169][ T4248] XFS (loop4): Unmounting Filesystem
[ 1655.766485][  T561] loop2: detected capacity change from 0 to 32768
[ 1656.183041][  T561] XFS (loop2): Mounting V5 Filesystem
[ 1656.258618][  T561] XFS (loop2): Ending clean mount
[ 1656.264855][ T7598] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 
[ 1656.323711][ T7598] XFS (loop2): Unmount and run xfs_repair
[ 1656.342536][  T627] loop4: detected capacity change from 0 to 512
[ 1656.370985][ T7598] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 1656.457955][  T627] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1656.470497][ T7598] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[ 1656.488296][  T627] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.25726: Failed to acquire dquot type 1
[ 1656.513448][  T627] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.25726: Failed to acquire dquot type 1
[ 1656.528523][  T627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.25726: bg 0: block 248: padding at end of block bitmap is not set
[ 1656.533666][ T7598] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[ 1656.561420][  T627] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[ 1656.563198][  T579] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1656.581922][  T627] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.25726: Failed to acquire dquot type 1
[ 1656.609543][ T7598] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[ 1656.610568][  T627] EXT4-fs (loop4): 1 orphan inode deleted
[ 1656.640892][ T7598] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[ 1656.660391][ T7598] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[ 1656.671159][ T7598] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1656.680849][ T7598] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[ 1656.690495][  T579] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1656.699896][ T7598] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1656.711749][  T561] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74
[ 1656.730560][  T561] XFS (loop2): Failed to initialize disk quotas.
[ 1656.735066][  T627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1656.829363][  T644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25729'.
[ 1656.879305][ T7598] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1656.922295][  T644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.25729'.
[ 1656.959641][  T644] netlink: 'syz.0.25729': attribute type 10 has an invalid length.
[ 1656.979858][ T4240] XFS (loop2): Unmounting Filesystem
[ 1656.987245][ T4246] attempt to access beyond end of device
[ 1656.987245][ T4246] loop3: rw=2049, want=45104, limit=40427
[ 1657.146538][ T7598] usb 2-1: Using ep0 maxpacket: 8
[ 1657.352473][ T7598] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1657.649471][ T7598] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[ 1657.690940][ T7598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1657.714267][ T7598] usb 2-1: Product: syz
[ 1657.718550][ T7598] usb 2-1: Manufacturer: syz
[ 1657.753239][ T7598] usb 2-1: SerialNumber: syz
[ 1658.184371][  T677] set_capacity_and_notify: 1 callbacks suppressed
[ 1658.184397][  T677] loop3: detected capacity change from 0 to 32768
[ 1658.330815][  T696] loop4: detected capacity change from 0 to 512
[ 1658.424449][  T677] XFS (loop3): Mounting V5 Filesystem
[ 1658.428413][  T696] EXT4-fs (loop4): revision level too high, forcing read-only mode
[ 1658.453389][  T696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[ 1658.469236][  T696] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1658.479981][  T696] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #13: comm syz.4.25742: iget: bad i_size value: 12154761577498
[ 1658.523275][ T7598] usb 2-1: USB disconnect, device number 117
[ 1658.605316][  T696] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.25742: couldn't read orphan inode 13 (err -117)
[ 1658.664963][  T677] XFS (loop3): Ending clean mount
[ 1658.669232][  T696] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none.
[ 1658.733697][  T696] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.25742: dx entry: limit 65535 != root limit 120
[ 1658.752775][ T4246] XFS (loop3): Unmounting Filesystem
[ 1658.793574][  T696] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.25742: Corrupt directory, running e2fsck is recommended
[ 1658.824516][  T696] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.25742: path /5177/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[ 1659.362101][T19755] Bluetooth: hci4: command 0x0405 tx timeout
[ 1659.552090][T19755] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1660.008561][  T788] loop3: detected capacity change from 0 to 4096
[ 1660.011234][T19755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1660.048890][T19755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1660.075353][T19755] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1660.097950][  T788] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[ 1660.125238][T19755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1660.182187][T19755] usb 5-1: config 0 descriptor??
[ 1660.214973][  T788] ntfs3: loop3: Failed to load root.
[ 1660.755823][  T851] loop2: detected capacity change from 0 to 2048
[ 1660.779087][  T846] loop3: detected capacity change from 0 to 4096
[ 1660.805565][  T846] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1660.834046][  T846] NILFS (loop3): mounting unchecked fs
[ 1660.911832][  T846] NILFS (loop3): recovery complete
[ 1660.914157][ T4508] udevd[4508]: incorrect nilfs2 checksum on /dev/loop3
[ 1660.963501][T19755] hid-led: probe of 0003:27B8:01ED.0002 failed with error -71
[ 1661.001828][  T867] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1661.028788][  T851] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback.
[ 1661.084028][T19755] usb 5-1: USB disconnect, device number 103
[ 1661.848788][  T942] loop1: detected capacity change from 0 to 128
[ 1661.949353][  T945] loop2: detected capacity change from 0 to 2048
[ 1661.994954][  T942] VFS: Found a Xenix FS (block size = 1024) on device loop1
[ 1662.040565][  T945] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,errors=continue,bsddf,,errors=continue. Quota mode: writeback.
[ 1662.168351][  T945] __quota_error: 16 callbacks suppressed
[ 1662.168376][  T945] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[ 1662.224995][  T945] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[ 1662.234830][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.248085][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.263063][  T945] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.25802: Failed to acquire dquot type 0
[ 1662.302924][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.309521][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.358666][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.398684][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.404778][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.449252][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.455743][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.495750][ T4243] sysv_free_block: flc_count > flc_size
[ 1662.504743][ T4243] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1662.605066][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1662.640511][  T988] loop2: detected capacity change from 0 to 256
[ 1662.685413][  T988] exfat: Deprecated parameter 'utf8'
[ 1662.811231][  T988] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[ 1663.539745][T10734] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1663.605069][ T1016] loop4: detected capacity change from 0 to 32768
[ 1663.658422][ T1016] JBD2: Ignoring recovery information on journal
[ 1663.786347][ T1016] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1663.870014][ T1016] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[ 1663.899350][ T1016] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1663.919320][ T1016] OCFS2: File system is now read-only.
[ 1663.926860][ T1016] (syz.4.25822,1016,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[ 1663.957111][ T1016] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[ 1663.977342][ T1016] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1663.988902][ T1016] (syz.4.25822,1016,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[ 1663.997312][ T1016] (syz.4.25822,1016,0):ocfs2_mknod:502 ERROR: status = -30
[ 1664.006015][ T1016] (syz.4.25822,1016,0):ocfs2_create:676 ERROR: status = -30
[ 1664.062411][ T4248] ocfs2: Unmounting device (7,4) on (node local)
[ 1664.069637][T10734] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1664.203710][T10734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.218449][T10734] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1664.329725][ T1090] xt_HMARK: proto mask must be zero with L3 mode
[ 1664.427206][ T7599] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[ 1664.443113][ T1097] overlayfs: bad mount option "redirect_dir=off:/"
[ 1664.562591][T10734] usb 2-1: string descriptor 0 read error: -22
[ 1664.564131][ T1107] loop3: detected capacity change from 0 to 1024
[ 1664.570241][T10734] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1664.598062][ T1112] loop4: detected capacity change from 0 to 512
[ 1664.604593][T10734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1664.636168][ T1107] EXT4-fs (loop3): Ignoring removed bh option
[ 1664.662852][T10734] usb 2-1: selecting invalid altsetting 1
[ 1664.673492][ T1112] EXT4-fs (loop4): Ignoring removed bh option
[ 1664.680135][ T1112] EXT4-fs (loop4): inline encryption not supported
[ 1664.691599][T10734] usb 2-1: unit 3 not found!
[ 1664.702317][ T1107] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[ 1664.709768][ T1112] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1664.803259][ T1112] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[ 1664.818705][ T1112] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.25844: bg 0: block 248: padding at end of block bitmap is not set
[ 1664.836557][ T1112] Quota error (device loop4): write_blk: dquota write failed
[ 1664.845765][ T1112] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[ 1664.857517][ T1112] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.25844: Failed to acquire dquot type 1
[ 1664.865471][ T7599] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1664.886782][T10734] usb 2-1: unit 0 not found!
[ 1664.892476][ T7599] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1664.913731][ T7599] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1664.923674][ T7599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1664.938767][ T1112] EXT4-fs (loop4): 1 truncate cleaned up
[ 1664.955741][ T1112] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,inlinecrypt,max_batch_time=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[ 1665.067627][ T4508] udevd[4508]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1665.079525][ T1112] EXT4-fs (loop4): Cannot change journaled quota options when quota turned on
[ 1665.158430][ T8124] usb 2-1: USB disconnect, device number 118
[ 1665.235556][ T1144] loop2: detected capacity change from 0 to 8192
[ 1665.250218][ T7598] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1665.343024][ T1144] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[ 1665.393560][ T1144] REISERFS (device loop2): using ordered data mode
[ 1665.428526][ T1144] reiserfs: using flush barriers
[ 1665.467808][ T1144] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1665.508232][ T1144] REISERFS (device loop2): checking transaction log (loop2)
[ 1665.524297][ T1144] REISERFS (device loop2): Using rupasov hash to sort names
[ 1665.538831][ T1144] REISERFS (device loop2): using 3.5.x disk format
[ 1665.546081][ T1144] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1665.558449][ T1144] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1665.570537][ T1144] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1665.583516][ T1144] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[ 1665.647112][ T1144] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "noload"
[ 1665.668464][ T7598] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 1665.677011][ T7598] usb 4-1: config 0 has no interface number 0
[ 1665.704034][ T7598] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1665.760934][ T1186] loop1: detected capacity change from 0 to 8
[ 1665.767832][ T6416] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1665.824748][ T1194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25853'.
[ 1665.913204][ T7599] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[ 1665.921397][ T7598] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1665.946393][ T7599] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input107
[ 1665.978266][ T7598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1665.986479][ T7598] usb 4-1: Product: syz
[ 1666.030787][ T7598] usb 4-1: Manufacturer: syz
[ 1666.043169][ T7598] usb 4-1: SerialNumber: syz
[ 1666.080931][ T7598] usb 4-1: config 0 descriptor??
[ 1666.091638][ T7599] input: failed to attach handler kbd to device input107, error: -5
[ 1666.135290][ T7598] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 1666.166693][ T7599] usb 1-1: USB disconnect, device number 5
[ 1666.240693][ T1232] loop2: detected capacity change from 0 to 1024
[ 1666.250368][ T6416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1666.275030][ T6416] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1666.306742][ T6416] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1666.330888][ T1232] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1666.348967][ T6416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1666.361519][ T6416] usb 5-1: config 0 descriptor??
[ 1666.367999][ T1232] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[ 1666.391971][ T1232] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.25862: unexpected bad inode w/o EXT4_IGET_BAD
[ 1666.392639][ T1232] EXT4-fs (loop2): no journal found
[ 1666.392661][ T1232] EXT4-fs (loop2): can't get journal size
[ 1666.394749][ T1232] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[ 1666.612670][ T7599] usb 4-1: USB disconnect, device number 110
[ 1666.676827][ T7599] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 1666.922161][ T6416] hkems 0003:2006:0118.0003: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0
[ 1666.948474][ T6416] hkems 0003:2006:0118.0003: no inputs found
[ 1666.958795][ T1282] loop1: detected capacity change from 0 to 512
[ 1666.959851][ T6416] hkems 0003:2006:0118.0003: force feedback init failed
[ 1667.021772][ T1282] EXT4-fs (loop1): Ignoring removed bh option
[ 1667.032903][ T1282] EXT4-fs (loop1): inline encryption not supported
[ 1667.041378][ T1282] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1667.135720][ T1282] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[ 1667.151775][ T6416] usb 5-1: USB disconnect, device number 104
[ 1667.153204][ T7598] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1667.187802][ T1282] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.25869: bg 0: block 248: padding at end of block bitmap is not set
[ 1667.256866][ T1282] Quota error (device loop1): write_blk: dquota write failed
[ 1667.277302][ T1282] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[ 1667.291459][ T1282] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.25869: Failed to acquire dquot type 1
[ 1667.311438][ T1282] EXT4-fs (loop1): 1 truncate cleaned up
[ 1667.318929][ T1282] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,inlinecrypt,max_batch_time=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[ 1667.417812][ T1282] EXT4-fs (loop1): Cannot change journaled quota options when quota turned on
[ 1667.595678][ T1300] loop3: detected capacity change from 0 to 32768
[ 1667.659887][ T7598] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1667.729789][ T1300] JBD2: Ignoring recovery information on journal
[ 1667.751995][ T7598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1667.772978][ T7598] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1667.877107][ T1300] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1667.943718][ T1300] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[ 1668.006574][ T1300] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1668.018063][ T1300] OCFS2: File system is now read-only.
[ 1668.033325][ T1300] (syz.3.25870,1300,1):ocfs2_find_entry_dx:1029 ERROR: status = -30
[ 1668.046779][ T1300] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[ 1668.091230][ T7598] usb 3-1: string descriptor 0 read error: -22
[ 1668.104701][ T7598] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1668.132569][ T7598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.156454][ T1336] loop4: detected capacity change from 0 to 1024
[ 1668.157145][ T1300] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1668.197983][ T1300] (syz.3.25870,1300,1):ocfs2_find_entry_dx:1029 ERROR: status = -30
[ 1668.217139][ T1300] (syz.3.25870,1300,1):ocfs2_mknod:502 ERROR: status = -30
[ 1668.235693][ T7598] usb 3-1: selecting invalid altsetting 1
[ 1668.242108][ T7598] usb 3-1: unit 3 not found!
[ 1668.255410][ T1300] (syz.3.25870,1300,0):ocfs2_create:676 ERROR: status = -30
[ 1668.264474][ T1336] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1668.327216][ T1341] loop1: detected capacity change from 0 to 4096
[ 1668.371328][ T4246] ocfs2: Unmounting device (7,3) on (node local)
[ 1668.468166][ T7598] usb 3-1: unit 0 not found!
[ 1668.658920][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1668.776809][ T1368] tipc: Enabling of bearer <eto:s> rejected, media not registered
[ 1668.777767][ T7599] usb 3-1: USB disconnect, device number 89
[ 1669.021376][ T1386] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[ 1669.060259][ T1389] tmpfs: Too small a size for current use
[ 1670.016441][ T1444] loop1: detected capacity change from 0 to 4096
[ 1670.063463][ T1444] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[ 1670.072282][ T1458] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1670.135705][ T1458] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[ 1670.214191][ T1458] overlayfs: missing 'lowerdir'
[ 1670.250681][ T1444] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[ 1670.572965][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1670.818639][ T1512] device gre0 left promiscuous mode
[ 1670.831094][ T1512] netlink: 148 bytes leftover after parsing attributes in process `syz.0.25921'.
[ 1670.864683][ T1512] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[ 1670.966086][ T1524] tmpfs: Bad value for 'size'
[ 1671.458905][ T1554] loop1: detected capacity change from 0 to 256
[ 1671.529137][ T1558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25936'.
[ 1671.550405][ T1554] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1672.070707][T19755] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1672.301459][ T1608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25946'.
[ 1672.408983][T19755] usb 4-1: Using ep0 maxpacket: 8
[ 1672.754085][ T1574] loop2: detected capacity change from 0 to 32768
[ 1672.761824][T19755] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1672.778842][T19755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1672.797298][T19755] usb 4-1: Product: syz
[ 1672.802353][T19755] usb 4-1: Manufacturer: syz
[ 1672.807085][T19755] usb 4-1: SerialNumber: syz
[ 1672.850419][T19755] usb 4-1: config 0 descriptor??
[ 1672.869884][ T1584] loop1: detected capacity change from 0 to 32768
[ 1672.917557][T19755] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1672.930375][ T1654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25953'.
[ 1672.942208][ T1574] JBD2: Ignoring recovery information on journal
[ 1673.062206][ T1574] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1673.076629][ T1584] XFS (loop1): Mounting V5 Filesystem
[ 1673.143679][ T1574] (syz.2.25939,1574,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[ 1673.236628][ T1681] loop4: detected capacity change from 0 to 4096
[ 1673.257353][ T1574] (syz.2.25939,1574,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[ 1673.269133][ T1574] (syz.2.25939,1574,0):ocfs2_mknod:298 ERROR: status = -2
[ 1673.276958][ T1574] (syz.2.25939,1574,0):ocfs2_mknod:502 ERROR: status = -2
[ 1673.280197][ T1584] XFS (loop1): Ending clean mount
[ 1673.286622][ T1574] (syz.2.25939,1574,0):ocfs2_create:676 ERROR: status = -2
[ 1673.326097][ T1681] NILFS (loop4): invalid segment: Checksum error in segment payload
[ 1673.341365][ T1681] NILFS (loop4): trying rollback from an earlier position
[ 1673.385922][T19755] gspca_sq930x: ucbus_write failed -71
[ 1673.394188][T19755] sq930x: probe of 4-1:0.0 failed with error -71
[ 1673.428634][T19755] usb 4-1: USB disconnect, device number 111
[ 1673.457687][ T1681] NILFS (loop4): recovery complete
[ 1673.466454][ T4240] ocfs2: Unmounting device (7,2) on (node local)
[ 1673.479680][ T1697] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1673.584247][ T4243] XFS (loop1): Unmounting Filesystem
[ 1674.343333][ T1737] loop4: detected capacity change from 0 to 1024
[ 1674.588947][  T144] hfsplus: b-tree write err: -5, ino 25
[ 1674.601392][  T144] hfsplus: b-tree write err: -5, ino 4
[ 1674.641522][  T144] hfsplus: b-tree write err: -5, ino 2
[ 1674.719395][  T144] hfsplus: b-tree write err: -5, ino 26
[ 1675.871043][ T1834] loop3: detected capacity change from 0 to 4096
[ 1676.017487][ T1834] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback.
[ 1676.055211][ T1834] EXT4-fs (loop3): Online resizing not supported with bigalloc
[ 1676.139930][ T1782] loop2: detected capacity change from 0 to 32768
[ 1676.176065][ T1858] loop1: detected capacity change from 0 to 8192
[ 1676.246374][ T1858] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[ 1676.279094][ T1858] REISERFS (device loop1): using ordered data mode
[ 1676.290056][ T1858] reiserfs: using flush barriers
[ 1676.359473][ T1782] ialloc: diAlloc returned -5!
[ 1676.368852][ T1858] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1676.465397][ T1858] REISERFS (device loop1): checking transaction log (loop1)
[ 1676.568875][ T1886] loop4: detected capacity change from 0 to 1024
[ 1676.763058][ T4257] hfsplus: b-tree write err: -5, ino 25
[ 1676.769230][ T1858] REISERFS (device loop1): Using r5 hash to sort names
[ 1676.785374][ T4257] hfsplus: b-tree write err: -5, ino 4
[ 1676.800059][ T1858] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[ 1676.817635][ T4257] hfsplus: b-tree write err: -5, ino 2
[ 1676.823745][ T4257] hfsplus: b-tree write err: -5, ino 26
[ 1677.243105][ T1917] loop3: detected capacity change from 0 to 64
[ 1677.880277][ T1939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26025'.
[ 1678.253150][ T1962] loop4: detected capacity change from 0 to 64
[ 1678.260006][ T1959] bridge0: Device is already in use.
[ 1678.354008][ T1969] loop3: detected capacity change from 0 to 64
[ 1678.474448][ T1969] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[ 1678.474999][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26039'.
[ 1678.694695][T19755] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1678.932279][ T2016] loop3: detected capacity change from 0 to 4096
[ 1678.997129][ T2016] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[ 1679.019650][T19755] usb 2-1: Using ep0 maxpacket: 8
[ 1679.121173][ T2016] ntfs3: loop3: failed to convert "c46c" to macromanian
[ 1679.367198][ T2023] loop4: detected capacity change from 0 to 8192
[ 1679.408183][T19755] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1679.434224][T19755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1679.458426][ T2023] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[ 1679.497443][ T2034] loop3: detected capacity change from 0 to 1024
[ 1679.538487][ T2023] REISERFS (device loop4): using ordered data mode
[ 1679.554120][T19755] usb 2-1: Product: syz
[ 1679.596786][T19755] usb 2-1: Manufacturer: syz
[ 1679.601825][T19755] usb 2-1: SerialNumber: syz
[ 1679.610900][ T2034] hfsplus: bad catalog entry type
[ 1679.624891][ T2023] reiserfs: using flush barriers
[ 1679.651456][T19755] usb 2-1: config 0 descriptor??
[ 1679.680485][  T144] hfsplus: b-tree write err: -5, ino 25
[ 1679.689129][ T2023] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1679.693818][  T144] hfsplus: b-tree write err: -5, ino 4
[ 1679.720280][T19755] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1679.739977][   T26] audit: type=1800 audit(1861.265:104): pid=2015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26048" name="file1" dev="loop2" ino=4 res=0 errno=0
[ 1679.747858][ T2023] REISERFS (device loop4): checking transaction log (loop4)
[ 1679.796700][  T144] hfsplus: b-tree write err: -5, ino 2
[ 1680.122177][ T2023] REISERFS (device loop4): Using r5 hash to sort names
[ 1680.151600][ T2023] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[ 1680.174314][T19755] gspca_sq930x: ucbus_write failed -71
[ 1680.180340][T19755] sq930x: probe of 2-1:0.0 failed with error -71
[ 1680.206460][T19755] usb 2-1: USB disconnect, device number 119
[ 1680.586605][ T2088] device veth1_to_team entered promiscuous mode
[ 1680.617701][ T2088] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 1680.856921][ T2092] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[ 1681.137207][ T2121] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[ 1681.539119][ T2127] set_capacity_and_notify: 3 callbacks suppressed
[ 1681.539137][ T2127] loop3: detected capacity change from 0 to 40427
[ 1681.649511][ T2127] F2FS-fs (loop3): Invalid SB checksum offset: 0
[ 1681.671096][ T2127] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1681.694468][ T2127] F2FS-fs (loop3): invalid crc value
[ 1681.755700][ T2143] loop2: detected capacity change from 0 to 8192
[ 1681.770553][ T2127] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1681.840400][ T2143] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[ 1681.919627][ T2143] REISERFS (device loop2): using ordered data mode
[ 1681.958082][ T2143] reiserfs: using flush barriers
[ 1681.991723][ T2143] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1681.991754][ T2127] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[ 1682.032496][ T2127] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1682.053063][ T2143] REISERFS (device loop2): checking transaction log (loop2)
[ 1682.072455][ T2149] loop4: detected capacity change from 0 to 32768
[ 1682.164730][ T2149] JBD2: Ignoring recovery information on journal
[ 1682.186423][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[ 1682.195414][ T1432] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1682.309503][ T2149] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1682.330446][ T4246] attempt to access beyond end of device
[ 1682.330446][ T4246] loop3: rw=2049, want=45104, limit=40427
[ 1682.417648][ T2143] REISERFS (device loop2): Using r5 hash to sort names
[ 1682.430492][ T2143] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[ 1682.548006][ T4248] ocfs2: Unmounting device (7,4) on (node local)
[ 1683.075093][ T2197] loop4: detected capacity change from 0 to 128
[ 1683.199883][ T2197] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1683.313918][ T2205] loop3: detected capacity change from 0 to 4096
[ 1683.428461][ T2205] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[ 1683.466988][ T2205] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1683.537131][ T2205] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 1683.573978][ T2205] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1683.625793][ T2205] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1683.680458][ T2205] ntfs: volume version 3.1.
[ 1683.703950][ T2205] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[ 1683.753675][ T2205] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[ 1683.820297][ T2205] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 1683.866624][ T2205] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1683.919764][ T2237] loop2: detected capacity change from 0 to 2048
[ 1684.022068][ T2239] loop1: detected capacity change from 0 to 8192
[ 1684.084453][ T2237] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,journal_ioprio=0x0000000000000007,inode_readahead_blks=0x0000000000002000,. Quota mode: none.
[ 1684.155777][ T2239] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[ 1684.213024][ T2239] REISERFS (device loop1): using ordered data mode
[ 1684.260772][ T2239] reiserfs: using flush barriers
[ 1684.276242][ T4240] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /5219/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[ 1684.306257][ T2239] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1684.323120][ T4240] EXT4-fs (loop2): Remounting filesystem read-only
[ 1684.346445][ T2239] REISERFS (device loop1): checking transaction log (loop1)
[ 1684.378740][ T4240] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 345: padding at end of block bitmap is not set
[ 1684.505483][ T4240] EXT4-fs (loop2): Remounting filesystem read-only
[ 1684.512563][ T4240] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[ 1684.536828][ T4240] EXT4-fs (loop2): Remounting filesystem read-only
[ 1684.593021][ T4240] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[ 1684.673673][ T2239] REISERFS (device loop1): Using r5 hash to sort names
[ 1684.674987][ T4240] EXT4-fs (loop2): Remounting filesystem read-only
[ 1684.685408][ T2239] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[ 1684.771947][ T4240] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[ 1684.853824][ T4240] EXT4-fs (loop2): Remounting filesystem read-only
[ 1685.827600][ T2268] loop3: detected capacity change from 0 to 32768
[ 1685.865749][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1685.880724][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0
[ 1686.011597][ T2268] XFS (loop3): Mounting V5 Filesystem
[ 1686.090443][ T2268] XFS (loop3): Ending clean mount
[ 1686.108663][ T7598] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 
[ 1686.129351][ T7598] XFS (loop3): Unmount and run xfs_repair
[ 1686.140432][ T7598] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[ 1686.152808][ T7598] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[ 1686.162598][ T7598] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[ 1686.172867][ T7598] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[ 1686.182323][ T7598] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[ 1686.192282][ T7598] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[ 1686.202167][ T7598] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1686.215669][ T7598] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[ 1686.225411][ T7598] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1686.234690][ T2268] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74
[ 1686.265554][ T2268] XFS (loop3): Failed to initialize disk quotas.
[ 1686.341921][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1686.405893][ T2354] netlink: get zone limit has 8 unknown bytes
[ 1686.412864][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0
[ 1686.503736][ T4246] XFS (loop3): Unmounting Filesystem
[ 1686.834702][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1686.896628][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0
[ 1687.076768][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1687.120716][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19971 - 0
[ 1687.322011][ T2355] lo speed is unknown, defaulting to 1000
[ 1687.524049][ T2368] loop1: detected capacity change from 0 to 40427
[ 1687.652831][ T2368] F2FS-fs (loop1): Invalid SB checksum offset: 0
[ 1687.690359][ T2368] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 1687.780955][ T2368] F2FS-fs (loop1): invalid crc value
[ 1687.844867][ T2368] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1688.046458][ T2447] loop3: detected capacity change from 0 to 2048
[ 1688.233789][ T2368] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[ 1688.243711][ T2447] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback.
[ 1688.257008][ T2368] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1688.315029][ T4243] attempt to access beyond end of device
[ 1688.315029][ T4243] loop1: rw=2049, want=45104, limit=40427
[ 1688.848532][ T2355] chnl_net:caif_netlink_parms(): no params data found
[ 1688.962946][T10734] Bluetooth: hci1: command 0x0409 tx timeout
[ 1689.557040][ T2355] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1689.579493][ T2355] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1689.613074][ T2355] device bridge_slave_0 entered promiscuous mode
[ 1689.646875][ T2355] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1689.665899][ T2355] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1689.679729][ T2355] device bridge_slave_1 entered promiscuous mode
[ 1689.859639][ T2355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1689.876395][ T2355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1690.200267][ T2355] team0: Port device team_slave_0 added
[ 1690.231248][ T2612] loop1: detected capacity change from 0 to 32768
[ 1690.262585][ T2355] team0: Port device team_slave_1 added
[ 1690.274455][  T154] IPVS: stopping backup sync thread 23787 ...
[ 1690.374029][ T2355] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1690.382160][ T2355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1690.413536][ T2355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1690.424966][ T2612] XFS (loop1): Mounting V5 Filesystem
[ 1690.448015][ T2355] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1690.455571][ T2355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1690.483705][ T2355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1690.545366][ T2612] XFS (loop1): Ending clean mount
[ 1690.693866][ T4243] XFS (loop1): Unmounting Filesystem
[ 1690.706830][ T2355] device hsr_slave_0 entered promiscuous mode
[ 1690.739591][ T2355] device hsr_slave_1 entered promiscuous mode
[ 1690.830629][ T2355] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1690.871316][ T2355] Cannot create hsr debugfs directory
[ 1690.927265][   T26] kauditd_printk_skb: 7 callbacks suppressed
[ 1690.927283][   T26] audit: type=1326 audit(1871.723:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2816 comm="syz.3.26170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80ed5edd9 code=0x7ffc0000
[ 1690.958564][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1691.118893][   T26] audit: type=1326 audit(1871.732:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2816 comm="syz.3.26170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80ed5edd9 code=0x7ffc0000
[ 1691.177174][T19756] Bluetooth: hci1: command 0x041b tx timeout
[ 1691.230971][   T26] audit: type=1326 audit(1871.732:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2816 comm="syz.3.26170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80ed5edd9 code=0x7ffc0000
[ 1691.314763][   T26] audit: type=1326 audit(1871.732:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2816 comm="syz.3.26170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa80ed5edd9 code=0x7ffc0000
[ 1691.435676][   T26] audit: type=1326 audit(1871.760:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2816 comm="syz.3.26170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80ed5edd9 code=0x7ffc0000
[ 1691.571013][   T26] audit: type=1326 audit(1871.835:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2816 comm="syz.3.26170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80ed5edd9 code=0x7ffc0000
[ 1691.595588][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1691.718582][   T26] audit: type=1326 audit(1871.872:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2816 comm="syz.3.26170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa80ed5edd9 code=0x7ffc0000
[ 1691.863264][ T2932] loop4: detected capacity change from 0 to 2048
[ 1691.871398][   T26] audit: type=1326 audit(1871.872:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2816 comm="syz.3.26170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa80ed5edd9 code=0x7ffc0000
[ 1691.978453][ T2932] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,errors=continue,bsddf,,errors=continue. Quota mode: writeback.
[ 1692.000804][ T2932] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present
[ 1692.020766][ T2932] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[ 1692.035347][ T2355] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1692.039253][ T2932] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.26179: Failed to acquire dquot type 0
[ 1692.124232][ T2990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26190'.
[ 1692.255562][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1692.273428][ T2355] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1692.320167][ T2993] loop1: detected capacity change from 0 to 4096
[ 1692.374096][ T2355] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1692.386490][ T2993] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1692.447223][ T2993] NILFS (loop1): mounting unchecked fs
[ 1692.456622][ T3014] loop3: detected capacity change from 0 to 1024
[ 1692.477775][ T2355] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1692.552465][ T2993] NILFS (loop1): recovery complete
[ 1692.583623][ T3014] hfsplus: failed to load root directory
[ 1692.607414][ T3025] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1693.100526][ T2355] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1693.209182][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1693.229676][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1693.314553][ T2355] 8021q: adding VLAN 0 to HW filter on device team0
[ 1693.398553][T19756] Bluetooth: hci1: command 0x040f tx timeout
[ 1693.432106][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1693.469037][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1693.539532][ T2514] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1693.546884][ T2514] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1693.565900][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1693.591711][ T3062] loop1: detected capacity change from 0 to 4096
[ 1693.624009][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1693.643783][ T2514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1693.650963][ T2514] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1693.738545][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1693.786762][ T3071] PM: Enabling pm_trace changes system date and time during resume.
[ 1693.786762][ T3071] PM: Correct system time has to be restored manually after resume.
[ 1693.839135][  T501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1693.874854][ T3018] loop4: detected capacity change from 0 to 32768
[ 1693.900535][  T154] device hsr_slave_0 left promiscuous mode
[ 1693.932068][  T154] device hsr_slave_1 left promiscuous mode
[ 1693.967638][ T3018] jfs_lookup: iget failed on inum 4
[ 1693.992280][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1694.024244][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1694.060615][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1694.078074][  T154] device batadv0 left promiscuous mode
[ 1694.099067][  T154] bridge0: port 3(batadv0) entered disabled state
[ 1694.139602][  T154] device bridge_slave_1 left promiscuous mode
[ 1694.146102][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1694.175546][ T3094] loop3: detected capacity change from 0 to 1024
[ 1694.216215][  T154] device veth1_macvtap left promiscuous mode
[ 1694.260840][  T154] device veth0_macvtap left promiscuous mode
[ 1694.323766][  T154] device veth1_vlan left promiscuous mode
[ 1694.342508][ T3094] hfsplus: found bad thread record in catalog
[ 1694.352278][ T3095] loop4: detected capacity change from 0 to 4096
[ 1694.364454][ T3094] hfsplus: found bad thread record in catalog
[ 1694.421150][ T2514] hfsplus: found bad thread record in catalog
[ 1694.444901][ T3095] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1694.457002][ T7598] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1694.493343][ T3095] NILFS (loop4): mounting unchecked fs
[ 1694.497719][ T2514] hfsplus: found bad thread record in catalog
[ 1694.544669][ T3095] NILFS (loop4): recovery complete
[ 1694.560422][ T4508] udevd[4508]: incorrect nilfs2 checksum on /dev/loop4
[ 1694.604963][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1694.623359][ T3102] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1694.636571][ T4508] udevd[4508]: incorrect nilfs2 checksum on /dev/loop4
[ 1694.713501][ T7598] usb 1-1: Using ep0 maxpacket: 32
[ 1694.841982][ T7598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1694.885727][ T7598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1694.900868][ T7598] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1694.912902][ T7598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1694.949088][  T154] bond8 (unregistering): Released all slaves
[ 1695.008619][ T7598] usb 1-1: config 0 descriptor??
[ 1695.064373][ T7598] hub 1-1:0.0: USB hub found
[ 1695.071914][  T154] bond7 (unregistering): Released all slaves
[ 1695.102077][ T3116] loop4: detected capacity change from 0 to 4096
[ 1695.144460][ T3091] loop1: detected capacity change from 0 to 32768
[ 1695.200399][  T154] bond6 (unregistering): Released all slaves
[ 1695.235770][  T154] bond5 (unregistering): Released all slaves
[ 1695.341052][ T7598] hub 1-1:0.0: config failed, can't read hub descriptor (err -90)
[ 1695.401321][  T154] bond4 (unregistering): Released all slaves
[ 1695.567534][  T154] bond3 (unregistering): Released all slaves
[ 1695.622339][T19755] Bluetooth: hci1: command 0x0419 tx timeout
[ 1695.632430][  T154] bond2 (unregistering): Released all slaves
[ 1695.648521][ T7598] usbhid 1-1:0.0: can't add hid device: -71
[ 1695.675673][ T7598] usbhid: probe of 1-1:0.0 failed with error -71
[ 1695.751541][ T7598] usb 1-1: USB disconnect, device number 6
[ 1695.752253][  T154] bond1 (unregistering): Released all slaves
[ 1695.962481][ T3127] loop3: detected capacity change from 0 to 32768
[ 1695.994667][ T3127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.26213 (3127)
[ 1696.037234][ T3127] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1696.047682][ T3127] BTRFS info (device loop3): setting nodatasum
[ 1696.056720][ T3127] BTRFS info (device loop3): force zlib compression, level 3
[ 1696.074702][ T3127] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1696.087045][ T3127] BTRFS info (device loop3): use lzo compression, level 0
[ 1696.097188][ T3127] BTRFS info (device loop3): turning on flush-on-commit
[ 1696.115737][ T3127] BTRFS info (device loop3): enabling auto defrag
[ 1696.135421][ T3127] BTRFS info (device loop3): max_inline at 4096
[ 1696.151695][ T3127] BTRFS info (device loop3): using free space tree
[ 1696.184438][ T3127] BTRFS info (device loop3): has skinny extents
[ 1696.298932][ T3127] BTRFS info (device loop3): enabling ssd optimizations
[ 1696.339960][  T154] device team_slave_1 left promiscuous mode
[ 1696.344368][   T26] kauditd_printk_skb: 9 callbacks suppressed
[ 1696.344386][   T26] audit: type=1800 audit(1876.792:122): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.26213" name="file1" dev="loop3" ino=260 res=0 errno=0
[ 1696.400207][  T154] team0 (unregistering): Port device team_slave_1 removed
[ 1696.417319][  T154] device team_slave_0 left promiscuous mode
[ 1696.437829][  T154] team0 (unregistering): Port device team_slave_0 removed
[ 1696.523970][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1696.613291][ T4508] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4508)
[ 1697.076895][  T154] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1697.095295][  T154] device bridge0 left promiscuous mode
[ 1697.131306][  T154] team0 (unregistering): Port device bridge0 removed
[ 1697.191794][  T154] bond0 (unregistering): Released all slaves
[ 1697.257070][T25838] smc: removing ib device syz1
[ 1697.284311][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1697.304305][ T3155] bridge0: Device is already in use.
[ 1697.352678][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1697.390414][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1697.475375][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1697.494062][ T3217] [U] 	
[ 1697.520152][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1697.546562][ T3219] loop1: detected capacity change from 0 to 2048
[ 1697.561183][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1697.646933][ T2355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1697.696224][ T3228] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1697.737365][ T2355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1697.813133][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1697.831365][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1697.865287][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1697.901955][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1697.974010][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1698.428420][ T2355] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1698.463776][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1698.510875][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1698.594489][ T3261] loop4: detected capacity change from 0 to 2048
[ 1698.741910][ T3210] loop3: detected capacity change from 0 to 32768
[ 1698.769224][ T3261] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1698.831104][   T26] audit: type=1800 audit(1879.122:123): pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.26236" name="file1" dev="loop4" ino=1367 res=0 errno=0
[ 1698.874673][ T3283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26240'.
[ 1699.557888][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1699.624975][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1699.757519][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1699.796431][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1699.851710][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1699.888591][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1699.906319][ T2355] device veth0_vlan entered promiscuous mode
[ 1699.946144][ T2355] device veth1_vlan entered promiscuous mode
[ 1700.082816][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1700.113109][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1700.149748][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1700.198423][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1700.209945][ T2355] device veth0_macvtap entered promiscuous mode
[ 1700.259670][ T2355] device veth1_macvtap entered promiscuous mode
[ 1700.350905][ T2355] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1700.425359][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1700.444297][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1700.465628][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26254'.
[ 1700.497868][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1700.506754][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1700.543293][ T2355] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1700.582873][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1700.601113][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1700.663715][ T2355] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1700.693173][ T2355] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1700.728741][ T2355] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1700.752676][ T2355] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1701.147426][ T3337] loop4: detected capacity change from 0 to 32768
[ 1701.162960][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1701.179886][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1701.236157][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1701.312350][  T501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1701.367720][  T501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1701.417413][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1701.433797][ T3432] loop1: detected capacity change from 0 to 1024
[ 1701.637126][ T3432] hfsplus: found bad thread record in catalog
[ 1701.662292][ T3432] hfsplus: found bad thread record in catalog
[ 1701.876647][ T6522] hfsplus: found bad thread record in catalog
[ 1701.887584][ T6522] hfsplus: found bad thread record in catalog
[ 1702.701742][ T3512] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1702.712441][ T3512] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1702.722131][ T3512] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1702.731148][ T3512] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1702.964590][ T3527] loop3: detected capacity change from 0 to 128
[ 1703.160082][ T3540] netlink: 108 bytes leftover after parsing attributes in process `syz.0.26285'.
[ 1703.610517][ T3576] loop4: detected capacity change from 0 to 1024
[ 1703.623421][ T3571] loop5: detected capacity change from 0 to 2048
[ 1703.784228][ T3495] loop1: detected capacity change from 0 to 32768
[ 1703.831442][ T3584] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1703.850790][ T3576] hfsplus: found bad thread record in catalog
[ 1703.893471][ T3576] hfsplus: found bad thread record in catalog
[ 1704.054987][ T4257] hfsplus: found bad thread record in catalog
[ 1704.074773][ T4257] hfsplus: found bad thread record in catalog
[ 1704.118887][ T3595] comedi: No check for data length of config insn id 8 is implemented
[ 1704.149401][ T3595] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[ 1704.236478][ T3595] comedi: Assuming n=86 is correct
[ 1704.292120][T19755] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1704.405711][ T3613] netlink: 108 bytes leftover after parsing attributes in process `syz.5.26300'.
[ 1704.570173][T19755] usb 2-1: Using ep0 maxpacket: 32
[ 1704.663546][ T3618] loop3: detected capacity change from 0 to 4096
[ 1704.709435][T19755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1704.740687][T19755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1704.773590][T19755] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1704.794599][T19755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1704.829066][T19755] usb 2-1: config 0 descriptor??
[ 1704.870848][T19755] hub 2-1:0.0: USB hub found
[ 1705.147845][T19755] hub 2-1:0.0: config failed, can't read hub descriptor (err -90)
[ 1705.468375][T19755] usbhid 2-1:0.0: can't add hid device: -71
[ 1705.482049][T19755] usbhid: probe of 2-1:0.0 failed with error -71
[ 1705.535200][T19755] usb 2-1: USB disconnect, device number 120
[ 1705.562825][ T3607] loop4: detected capacity change from 0 to 32768
[ 1705.665913][ T3607] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.26299 (3607)
[ 1705.767730][ T3607] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[ 1705.776525][ T3607] BTRFS info (device loop4): using free space tree
[ 1705.830106][ T3607] BTRFS info (device loop4): has skinny extents
[ 1706.221233][ T3607] BTRFS info (device loop4): enabling ssd optimizations
[ 1706.270048][ T2287] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1706.526516][ T2287] usb 4-1: Using ep0 maxpacket: 32
[ 1706.699373][ T2287] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1706.715123][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26330'.
[ 1706.794124][ T2287] usb 4-1: config 0 has an invalid interface number: 227 but max is 0
[ 1706.800753][   T26] audit: type=1326 audit(1886.577:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3753 comm="syz.0.26331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cee887dd9 code=0x0
[ 1706.808923][ T2287] usb 4-1: config 0 has no interface number 0
[ 1706.834281][ T3757] netlink: 100 bytes leftover after parsing attributes in process `syz.1.26330'.
[ 1706.865685][ T2287] usb 4-1: config 0 interface 227 altsetting 19 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1706.912732][ T2287] usb 4-1: config 0 interface 227 has no altsetting 0
[ 1707.082737][ T2287] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=95.8d
[ 1707.136246][ T2287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1707.144686][ T2287] usb 4-1: Product: syz
[ 1707.185101][ T2287] usb 4-1: Manufacturer: syz
[ 1707.210811][ T2287] usb 4-1: SerialNumber: syz
[ 1707.237321][ T2287] usb 4-1: config 0 descriptor??
[ 1707.593931][ T3739] loop5: detected capacity change from 0 to 32768
[ 1707.671214][ T2287] cxacru 4-1:0.227: cxacru_bind: interface has incorrect endpoints
[ 1707.682568][ T2287] cxacru 4-1:0.227: usbatm_usb_probe: bind failed: -19!
[ 1707.715934][ T2287] usb 4-1: USB disconnect, device number 112
[ 1707.763107][ T3798] loop4: detected capacity change from 0 to 256
[ 1707.826994][ T3739] XFS (loop5): Mounting V5 Filesystem
[ 1707.969855][ T3739] XFS (loop5): Ending clean mount
[ 1707.985518][ T3813] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.26337'.
[ 1708.006847][ T3739] XFS (loop5): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve.
[ 1708.102305][ T3739] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 
[ 1708.151539][ T3739] XFS (loop5): Unmount and run xfs_repair
[ 1708.157592][ T3739] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1708.204982][ T3739] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[ 1708.249294][ T3739] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10  ....... ........
[ 1708.283357][ T3739] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 1708.311924][ T3739] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37  ...... ....@..@7
[ 1708.344256][ T3739] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[ 1708.366275][ T3829] usb usb8: usbfs: process 3829 (syz.3.26343) did not claim interface 4 before use
[ 1708.404151][ T3739] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1708.431774][ T3835] loop1: detected capacity change from 0 to 64
[ 1708.450084][ T3739] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1708.482992][ T3739] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1708.522024][ T3739] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74
[ 1708.588487][ T3842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.26346'.
[ 1708.632890][ T3739] XFS (loop5): Failed to initialize disk quotas.
[ 1708.735292][ T3850] netlink: 44 bytes leftover after parsing attributes in process `syz.4.26349'.
[ 1708.827465][ T3850] netlink: 43 bytes leftover after parsing attributes in process `syz.4.26349'.
[ 1708.893536][ T3867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26352'.
[ 1708.899884][ T3850] netlink: 'syz.4.26349': attribute type 6 has an invalid length.
[ 1708.918211][ T2355] XFS (loop5): Unmounting Filesystem
[ 1709.010536][ T3850] netlink: 'syz.4.26349': attribute type 5 has an invalid length.
[ 1709.038852][ T3850] netlink: 43 bytes leftover after parsing attributes in process `syz.4.26349'.
[ 1709.561054][ T3887] loop3: detected capacity change from 0 to 2368
[ 1709.596917][ T3898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.26360'.
[ 1710.166478][ T3922] loop5: detected capacity change from 0 to 256
[ 1710.216504][ T3922] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[ 1710.636975][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26373'.
[ 1710.694769][ T3965] netlink: 100 bytes leftover after parsing attributes in process `syz.4.26373'.
[ 1710.969362][ T3987] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.26380'.
[ 1710.986380][ T3980] loop5: detected capacity change from 0 to 2048
[ 1711.113398][ T4000] netlink: 44 bytes leftover after parsing attributes in process `syz.0.26382'.
[ 1711.147554][ T4000] netlink: 43 bytes leftover after parsing attributes in process `syz.0.26382'.
[ 1711.190358][ T3980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1711.197445][ T4000] netlink: 'syz.0.26382': attribute type 6 has an invalid length.
[ 1711.244586][ T4000] netlink: 'syz.0.26382': attribute type 5 has an invalid length.
[ 1711.263929][ T4000] netlink: 43 bytes leftover after parsing attributes in process `syz.0.26382'.
[ 1711.832171][ T3968] loop3: detected capacity change from 0 to 32768
[ 1711.918185][ T4286] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1712.024322][ T3968] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[ 1712.091880][ T3968] JBD2: Ignoring recovery information on journal
[ 1712.181914][ T4286] usb 6-1: Using ep0 maxpacket: 8
[ 1712.216322][ T4053] loop4: detected capacity change from 0 to 2048
[ 1712.258930][ T3968] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1712.315289][   T26] audit: type=1800 audit(1891.731:125): pid=3968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.26376" name="file1" dev="loop3" ino=17058 res=0 errno=0
[ 1712.353074][ T4286] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1712.380519][ T4246] ocfs2: Unmounting device (7,3) on (node local)
[ 1712.396916][ T4012] loop1: detected capacity change from 0 to 32768
[ 1712.460284][ T4286] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[ 1712.501556][ T4053] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1712.646568][ T4012] JBD2: Ignoring recovery information on journal
[ 1712.748754][ T4286] usb 6-1: string descriptor 0 read error: -22
[ 1712.759611][ T4286] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1712.784352][ T4286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1712.787913][ T4012] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1712.883083][ T4286] usb 6-1: 1:1 : bogus bTerminalLink 8
[ 1713.034268][ T4243] ocfs2: Unmounting device (7,1) on (node local)
[ 1713.208877][ T4286] usb 6-1: USB disconnect, device number 2
[ 1713.447263][   T26] audit: type=1326 audit(1892.797:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4131 comm="syz.4.26403" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4442498dd9 code=0x0
[ 1713.699624][ T4154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26409'.
[ 1714.181383][T10734] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1714.218290][ T4185] netlink: 44 bytes leftover after parsing attributes in process `syz.5.26416'.
[ 1714.491143][T10734] usb 1-1: Using ep0 maxpacket: 8
[ 1714.677699][ T4207] loop5: detected capacity change from 0 to 164
[ 1714.726581][T10734] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1714.737239][ T4215] loop4: detected capacity change from 0 to 512
[ 1714.768381][ T4159] loop1: detected capacity change from 0 to 32768
[ 1714.833375][T10734] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[ 1714.907298][ T4215] EXT4-fs (loop4): Ignoring removed nobh option
[ 1714.963732][ T4215] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1715.030448][ T4215] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 1: comm syz.4.26425: invalid block
[ 1715.038953][ T4214] loop3: detected capacity change from 0 to 32768
[ 1715.067376][ T4159] XFS (loop1): Mounting V5 Filesystem
[ 1715.074695][ T4215] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.26425: couldn't read orphan inode 11 (err -117)
[ 1715.087850][ T4215] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,noauto_da_alloc,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none.
[ 1715.114821][ T4214] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.26426 (4214)
[ 1715.194944][ T4159] XFS (loop1): Ending clean mount
[ 1715.224294][T10734] usb 1-1: string descriptor 0 read error: -22
[ 1715.230969][T10734] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1715.250127][T10734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1715.261901][ T4214] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 1715.307824][ T4214] BTRFS info (device loop3): using free space tree
[ 1715.331025][T10734] usb 1-1: 1:1 : bogus bTerminalLink 8
[ 1715.343438][ T4214] BTRFS info (device loop3): has skinny extents
[ 1715.463238][ T4243] XFS (loop1): Unmounting Filesystem
[ 1715.625308][T10734] usb 1-1: USB disconnect, device number 7
[ 1715.745004][ T4312] loop4: detected capacity change from 0 to 64
[ 1715.875849][ T4214] BTRFS info (device loop3): enabling ssd optimizations
[ 1715.980926][ T4214] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1716.115684][ T8167] udevd[8167]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1716.276371][T19745] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1716.586606][T19745] usb 6-1: Using ep0 maxpacket: 32
[ 1716.764011][T19745] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1716.789834][T19745] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1716.796509][ T4379] loop1: detected capacity change from 0 to 128
[ 1716.816879][ T4382] loop4: detected capacity change from 0 to 512
[ 1716.929794][ T4382] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1716.991577][ T4382] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.26445: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[ 1717.012495][T19745] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1717.022200][T19745] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1717.031148][T19745] usb 6-1: Product: syz
[ 1717.035599][T19745] usb 6-1: Manufacturer: syz
[ 1717.043640][ T4382] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 12: comm syz.4.26445: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[ 1717.134180][ T4382] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.26445: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[ 1717.157385][T19745] hub 6-1:4.0: USB hub found
[ 1717.184977][ T4382] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 14: comm syz.4.26445: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[ 1717.253292][ T4382] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 15: comm syz.4.26445: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[ 1717.284072][ T4382] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.26445: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[ 1717.324369][ T4382] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 17: comm syz.4.26445: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[ 1717.351620][ T4382] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 18: comm syz.4.26445: lblock 23 mapped to illegal pblock 18 (length 1)
[ 1717.418970][ T4382] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 19: comm syz.4.26445: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[ 1717.468093][ T4382] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 20: comm syz.4.26445: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[ 1717.493562][T19745] hub 6-1:4.0: config failed, hub has too many ports! (err -19)
[ 1717.522263][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26447'.
[ 1717.783883][ T2287] usb 2-1: new low-speed USB device number 121 using dummy_hcd
[ 1717.837668][ T7598] usb 6-1: USB disconnect, device number 3
[ 1718.145917][ T4431] loop4: detected capacity change from 0 to 2048
[ 1718.169359][ T2287] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1718.177641][ T2287] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.00
[ 1718.187429][ T2287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1718.199092][ T2287] usb 2-1: config 0 descriptor??
[ 1718.231127][ T4431] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1718.609954][ T4455] loop4: detected capacity change from 0 to 256
[ 1718.620236][ T4452] loop5: detected capacity change from 0 to 2368
[ 1718.696880][ T4455] FAT-fs (loop4): Directory bread(block 64) failed
[ 1718.718423][ T4455] FAT-fs (loop4): Directory bread(block 65) failed
[ 1718.737172][ T2287] apple 0003:05AC:030A.0004: unknown main item tag 0x2
[ 1718.737254][ T2287] apple 0003:05AC:030A.0004: unknown main item tag 0xe
[ 1718.737280][ T2287] apple 0003:05AC:030A.0004: unknown main item tag 0x7
[ 1718.737303][ T2287] apple 0003:05AC:030A.0004: unknown main item tag 0x0
[ 1718.742802][ T2287] apple 0003:05AC:030A.0004: hidraw0: USB HID v0.20 Device [HID 05ac:030a] on usb-dummy_hcd.1-1/input0
[ 1718.760569][ T4455] FAT-fs (loop4): Directory bread(block 66) failed
[ 1718.760640][ T4455] FAT-fs (loop4): Directory bread(block 67) failed
[ 1718.760760][ T4455] FAT-fs (loop4): Directory bread(block 68) failed
[ 1718.760796][ T4455] FAT-fs (loop4): Directory bread(block 69) failed
[ 1718.760873][ T4455] FAT-fs (loop4): Directory bread(block 70) failed
[ 1718.760906][ T4455] FAT-fs (loop4): Directory bread(block 71) failed
[ 1718.760979][ T4455] FAT-fs (loop4): Directory bread(block 72) failed
[ 1718.761014][ T4455] FAT-fs (loop4): Directory bread(block 73) failed
[ 1718.772949][   T26] audit: type=1326 audit(1897.773:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4467 comm="syz.3.26462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa80ed5edd9 code=0x0
[ 1718.961023][ T2287] usb 2-1: USB disconnect, device number 121
[ 1719.084450][ T4484] fido_id[4484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1719.841541][ T4516] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1719.995995][ T4530] hfsplus: bad catalog folder entry
[ 1720.316809][ T4553] set_capacity_and_notify: 2 callbacks suppressed
[ 1720.316829][ T4553] loop1: detected capacity change from 0 to 2368
[ 1720.481596][ T4561] loop3: detected capacity change from 0 to 512
[ 1720.568491][ T4561] EXT4-fs (loop3): Ignoring removed nobh option
[ 1720.568828][ T4561] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1720.628597][ T4561] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 1: comm syz.3.26480: invalid block
[ 1720.629435][ T4561] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.26480: couldn't read orphan inode 11 (err -117)
[ 1720.629843][ T4561] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,noauto_da_alloc,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none.
[ 1720.641547][ T4575] loop4: detected capacity change from 0 to 8
[ 1720.743394][ T4575] SQUASHFS error: Failed to read block 0x260685: -5
[ 1720.743512][ T4575] SQUASHFS error: Unable to read metadata cache entry [260685]
[ 1720.743528][ T4575] SQUASHFS error: Unable to read directory block [260685:0]
[ 1720.744242][ T4575] binfmt_misc: register: failed to install interpreter file ./file2
[ 1721.086653][ T4594] loop3: detected capacity change from 0 to 512
[ 1721.142076][ T4594] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1721.145721][ T4594] EXT4-fs (loop3): external journal device major/minor numbers have changed
[ 1721.145989][ T4594] EXT4-fs (loop3): failed to open journal device unknown-block(8,1) -16
[ 1721.758912][ T4573] loop5: detected capacity change from 0 to 32768
[ 1721.773849][ T4589] loop4: detected capacity change from 0 to 32768
[ 1721.844024][ T4589] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.26484 (4589)
[ 1721.953282][ T4589] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[ 1721.972250][ T4589] BTRFS info (device loop4): using free space tree
[ 1721.979560][ T4589] BTRFS info (device loop4): has skinny extents
[ 1722.009597][ T8124] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1722.038044][ T4589] BTRFS info (device loop4): enabling ssd optimizations
[ 1722.056576][ T4573] XFS (loop5): Mounting V5 Filesystem
[ 1722.079076][ T4589] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1722.083944][ T8124] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1722.184457][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1722.373115][ T4678] fido_id[4678]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1722.402102][ T8124] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1722.575575][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1722.669490][ T8124] usb 1-1: Using ep0 maxpacket: 8
[ 1722.808641][ T8124] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1722.861940][ T8124] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1722.925944][ T8124] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1722.956361][ T8124] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[ 1722.965150][ T4694] loop4: detected capacity change from 0 to 2368
[ 1722.966596][ T8124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1723.035321][ T4573] XFS (loop5): Ending clean mount
[ 1723.037674][ T8124] usb 1-1: config 0 descriptor??
[ 1723.269935][ T2355] XFS (loop5): Unmounting Filesystem
[ 1723.433720][ T4720] loop1: detected capacity change from 0 to 8
[ 1723.582372][ T8124] kye 0003:0458:0138.0006: unknown main item tag 0x1
[ 1723.597451][ T8124] kye 0003:0458:0138.0006: unknown main item tag 0x0
[ 1723.597525][ T8124] kye 0003:0458:0138.0006: unknown global tag 0xc
[ 1723.597544][ T8124] kye 0003:0458:0138.0006: item 0 1 1 12 parsing failed
[ 1723.598021][ T8124] kye 0003:0458:0138.0006: parse failed
[ 1723.598060][ T8124] kye: probe of 0003:0458:0138.0006 failed with error -22
[ 1723.875536][   T13] usb 1-1: USB disconnect, device number 8
[ 1724.174108][ T4723] loop3: detected capacity change from 0 to 32768
[ 1724.324851][ T4723] JBD2: Ignoring recovery information on journal
[ 1724.502040][ T4723] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1724.566472][ T4723] (syz.3.26508,4723,1):ocfs2_reflink_ioctl:4461 ERROR: status = -14
[ 1724.641867][ T4788] device bridge_slave_0 left promiscuous mode
[ 1724.663340][ T4246] ocfs2: Unmounting device (7,3) on (node local)
[ 1724.687654][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1725.225916][ T4753] loop4: detected capacity change from 0 to 32768
[ 1725.302191][ T4753] JBD2: Ignoring recovery information on journal
[ 1725.436545][ T4753] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1725.559540][ T4248] ocfs2: Unmounting device (7,4) on (node local)
[ 1725.588756][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1725.695811][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1725.753645][ T4832] loop3: detected capacity change from 0 to 8
[ 1725.927551][ T4843] device vlan2 entered promiscuous mode
[ 1725.986860][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26526'.
[ 1726.010354][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26528'.
[ 1726.047889][ T4850] device vlan2 entered promiscuous mode
[ 1726.079793][ T4850] device bridge0 entered promiscuous mode
[ 1726.788176][ T4900] device vlan3 entered promiscuous mode
[ 1726.847089][ T4908] loop4: detected capacity change from 0 to 8
[ 1727.020939][ T4916] loop3: detected capacity change from 0 to 256
[ 1727.109914][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready
[ 1727.154135][ T4916] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1727.622018][ T4966] device vlan1 entered promiscuous mode
[ 1728.228589][   T13] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1728.413385][ T5035] device vlan0 entered promiscuous mode
[ 1728.448156][ T5038] loop1: detected capacity change from 0 to 512
[ 1728.506173][ T5050] bond0: option downdelay: invalid value (18446744073709551607)
[ 1728.515498][   T13] usb 4-1: Using ep0 maxpacket: 8
[ 1728.521841][ T5050] bond0: option downdelay: allowed values 0 - 2147483647
[ 1728.625123][ T5038] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #11: comm syz.1.26576: unexpected EA_INODE flag
[ 1728.645914][ T5038] EXT4-fs (loop1): Remounting filesystem read-only
[ 1728.656375][   T13] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1728.674365][ T5038] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.26576: couldn't read orphan inode 11 (err -117)
[ 1728.711242][   T13] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1728.735970][ T5038] EXT4-fs (loop1): Remounting filesystem read-only
[ 1728.753976][ T5038] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[ 1728.800892][   T13] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1728.842006][   T13] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[ 1728.889424][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1728.915588][ T5069] loop4: detected capacity change from 0 to 512
[ 1728.941431][   T13] usb 4-1: config 0 descriptor??
[ 1729.011428][ T5069] EXT4-fs (loop4): Ignoring removed bh option
[ 1729.022389][ T5069] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1729.118582][ T5069] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1729.189462][ T5069] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.26581: Invalid block bitmap block 0 in block_group 0
[ 1729.207152][ T5069] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[ 1729.218567][ T5069] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.26581: attempt to clear invalid blocks 983261 len 1
[ 1729.245075][ T5069] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.26581: Invalid inode table block 0 in block_group 0
[ 1729.308922][ T5069] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[ 1729.338926][ T5069] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[ 1729.371268][ T5106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26588'.
[ 1729.381873][ T5069] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.26581: Invalid inode table block 0 in block_group 0
[ 1729.401958][ T5069] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[ 1729.404615][ T7598] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[ 1729.413353][ T5106] device vlan3 entered promiscuous mode
[ 1729.427153][ T5069] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.26581: mark_inode_dirty error
[ 1729.451933][ T5069] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[ 1729.487159][ T5115] netlink: 128 bytes leftover after parsing attributes in process `syz.0.26589'.
[ 1729.497547][ T5069] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.26581: Invalid inode table block 0 in block_group 0
[ 1729.522332][   T13] kye 0003:0458:0138.0007: unknown main item tag 0x1
[ 1729.529432][   T13] kye 0003:0458:0138.0007: unknown main item tag 0x0
[ 1729.560730][ T5069] EXT4-fs (loop4): 1 truncate cleaned up
[ 1729.567069][   T13] kye 0003:0458:0138.0007: unknown global tag 0xc
[ 1729.579552][ T5069] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,grpquota,bh,noblock_validity,,errors=continue. Quota mode: writeback.
[ 1729.596094][   T13] kye 0003:0458:0138.0007: item 0 1 1 12 parsing failed
[ 1729.615631][   T13] kye 0003:0458:0138.0007: parse failed
[ 1729.628139][   T13] kye: probe of 0003:0458:0138.0007 failed with error -22
[ 1729.777451][ T2287] usb 4-1: USB disconnect, device number 113
[ 1729.855539][ T7598] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1729.862465][ T7598] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.00
[ 1729.902769][ T7598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1729.964117][ T7598] usb 6-1: config 0 descriptor??
[ 1730.011656][ T5150] device bridge_slave_0 left promiscuous mode
[ 1730.045346][ T5150] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1730.475514][ T7598] apple 0003:05AC:030A.0008: unknown main item tag 0x2
[ 1730.482890][ T7598] apple 0003:05AC:030A.0008: unknown main item tag 0xe
[ 1730.539033][ T7598] apple 0003:05AC:030A.0008: unknown main item tag 0x7
[ 1730.563692][ T7598] apple 0003:05AC:030A.0008: unknown main item tag 0x0
[ 1730.612666][ T7598] apple 0003:05AC:030A.0008: hidraw0: USB HID v0.20 Device [HID 05ac:030a] on usb-dummy_hcd.5-1/input0
[ 1730.670729][ T5201] loop4: detected capacity change from 0 to 64
[ 1730.774937][ T5201] attempt to access beyond end of device
[ 1730.774937][ T5201] loop4: rw=0, want=1026, limit=64
[ 1730.782088][ T7598] usb 6-1: USB disconnect, device number 4
[ 1730.828360][ T5201] Buffer I/O error on dev loop4, logical block 512, async page read
[ 1730.891261][ T5201] attempt to access beyond end of device
[ 1730.891261][ T5201] loop4: rw=0, want=113154, limit=64
[ 1730.896690][ T5209] fido_id[5209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1730.941283][ T5201] Buffer I/O error on dev loop4, logical block 56576, async page read
[ 1731.811959][ T5309] loop5: detected capacity change from 0 to 64
[ 1731.833722][ T5307] device bridge_slave_0 left promiscuous mode
[ 1731.840360][ T5307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1732.622343][ T5375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26652'.
[ 1733.163840][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26665'.
[ 1733.177707][ T5413] loop3: detected capacity change from 0 to 4096
[ 1733.307073][ T5428] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1733.752412][ T5441] loop4: detected capacity change from 0 to 512
[ 1733.784882][ T5379] loop1: detected capacity change from 0 to 32768
[ 1734.061846][ T5456] read_mapping_page failed!
[ 1734.095364][ T5456] ERROR: (device loop1): txCommit: 
[ 1734.095364][ T5456] 
[ 1734.400434][ T4243] ERROR: (device loop1): diFree: numfree > numinos
[ 1734.400434][ T4243] 
[ 1734.975700][ T5519] netlink: 'syz.1.26696': attribute type 29 has an invalid length.
[ 1735.017555][ T5519] netlink: 'syz.1.26696': attribute type 29 has an invalid length.
[ 1735.081489][ T5524] netlink: 'syz.1.26696': attribute type 29 has an invalid length.
[ 1735.335184][ T5523] loop5: detected capacity change from 0 to 8192
[ 1735.439976][ T5523] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[ 1735.464472][ T5523] REISERFS (device loop5): using ordered data mode
[ 1735.476860][ T5523] reiserfs: using flush barriers
[ 1735.493867][ T5523] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1735.526896][ T5523] REISERFS (device loop5): checking transaction log (loop5)
[ 1735.611847][ T5546] loop4: detected capacity change from 0 to 4096
[ 1735.688818][ T5546] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1735.709458][ T5546] EXT4-fs (loop4): Ignoring removed oldalloc option
[ 1735.767932][ T5546] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003]
[ 1735.867052][ T5515] loop3: detected capacity change from 0 to 32768
[ 1735.880248][ T5546] System zones: 0-5
[ 1735.898683][ T5523] REISERFS (device loop5): Using r5 hash to sort names
[ 1735.953281][ T5523] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[ 1735.982271][ T5546] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[ 1735.991481][ T5515] read_mapping_page failed!
[ 1736.013753][ T5564] loop1: detected capacity change from 0 to 4096
[ 1736.020412][ T5515] ERROR: (device loop3): txCommit: 
[ 1736.020412][ T5515] 
[ 1736.125093][ T5564] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[ 1736.261073][ T4246] ERROR: (device loop3): diFree: numfree > numinos
[ 1736.261073][ T4246] 
[ 1736.321000][ T5564] ntfs3: loop1: failed to convert "0080" to macceltic
[ 1736.354901][ T5564] ntfs3: loop1: failed to convert name for inode 1e.
[ 1736.510647][ T5581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26714'.
[ 1736.971115][ T5620] loop3: detected capacity change from 0 to 164
[ 1737.031532][ T5628] loop1: detected capacity change from 0 to 64
[ 1737.116675][ T5628] hfs: hfs: Invalid key length: 94
[ 1737.249313][ T4243] hfs: node 4:3 still has 1 user(s)!
[ 1737.492256][ T5655] loop1: detected capacity change from 0 to 2048
[ 1737.570403][ T5655] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1737.634105][ T8167] udevd[8167]: incorrect nilfs2 checksum on /dev/loop1
[ 1737.653918][ T5664] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1737.745212][ T5669] netlink: 'syz.0.26733': attribute type 10 has an invalid length.
[ 1737.753595][ T5669] device veth1_macvtap left promiscuous mode
[ 1737.790075][ T5668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26734'.
[ 1737.817019][ T5669] team0: Device veth1_macvtap failed to register rx_handler
[ 1737.968892][ T5676] loop3: detected capacity change from 0 to 1024
[ 1738.115640][ T5676] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0)
[ 1738.226292][ T5630] loop5: detected capacity change from 0 to 32768
[ 1738.286845][ T5640] loop4: detected capacity change from 0 to 40427
[ 1738.359114][ T5640] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[ 1738.399962][ T5640] F2FS-fs (loop4): invalid crc value
[ 1738.413825][ T5630] read_mapping_page failed!
[ 1738.428163][ T5630] ERROR: (device loop5): txCommit: 
[ 1738.428163][ T5630] 
[ 1738.440155][ T5640] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1738.498518][ T5706] loop3: detected capacity change from 0 to 256
[ 1738.556852][ T2355] ERROR: (device loop5): diFree: numfree > numinos
[ 1738.556852][ T2355] 
[ 1738.595469][ T5711] netlink: 48 bytes leftover after parsing attributes in process `syz.1.26744'.
[ 1738.633844][ T5640] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1738.683352][ T5706] FAT-fs (loop3): Directory bread(block 64) failed
[ 1738.748141][ T7598] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1738.748800][ T5706] FAT-fs (loop3): Directory bread(block 65) failed
[ 1738.790829][ T5706] FAT-fs (loop3): Directory bread(block 66) failed
[ 1738.797706][ T5706] FAT-fs (loop3): Directory bread(block 67) failed
[ 1738.841737][ T5706] FAT-fs (loop3): Directory bread(block 68) failed
[ 1738.870727][ T5706] FAT-fs (loop3): Directory bread(block 69) failed
[ 1738.903268][ T5706] FAT-fs (loop3): Directory bread(block 70) failed
[ 1738.925447][ T5706] FAT-fs (loop3): Directory bread(block 71) failed
[ 1738.949203][ T5706] FAT-fs (loop3): Directory bread(block 72) failed
[ 1738.959962][ T5706] FAT-fs (loop3): Directory bread(block 73) failed
[ 1739.042259][ T5720] loop5: detected capacity change from 0 to 4096
[ 1739.171914][ T5720] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[ 1739.182009][ T7598] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1739.190329][ T4285] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1739.208358][ T7598] usb 1-1: config 0 has no interface number 0
[ 1739.214679][ T7598] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1739.237249][ T7598] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1739.269281][ T7598] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1739.300430][ T7598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1739.311347][ T5720] ntfs3: loop5: failed to convert "0080" to macceltic
[ 1739.341147][ T7598] usb 1-1: config 0 descriptor??
[ 1739.382482][ T5720] ntfs3: loop5: failed to convert name for inode 1e.
[ 1739.474964][ T4285] usb 2-1: Using ep0 maxpacket: 16
[ 1739.483651][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26747'.
[ 1739.508238][ T5743] device macsec1 entered promiscuous mode
[ 1739.514228][ T5743] device team0 entered promiscuous mode
[ 1739.551058][ T5743] device team_slave_0 entered promiscuous mode
[ 1739.558265][ T5743] device team_slave_1 entered promiscuous mode
[ 1739.566243][ T5743] team0: Device macsec1 is already an upper device of the team interface
[ 1739.578191][ T5743] device team0 left promiscuous mode
[ 1739.584261][ T5743] device team_slave_0 left promiscuous mode
[ 1739.590485][ T5743] device team_slave_1 left promiscuous mode
[ 1739.603864][ T4285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1739.624208][ T4285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1739.660930][ T4285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1739.695088][ T4285] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1739.735343][ T4285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1739.776493][ T4285] usb 2-1: config 0 descriptor??
[ 1739.874560][ T7598] prodikeys 0003:041E:2801.0009: collection stack underflow
[ 1739.896124][ T7598] prodikeys 0003:041E:2801.0009: item 0 1 0 12 parsing failed
[ 1739.914072][ T7598] prodikeys 0003:041E:2801.0009: hid parse failed
[ 1739.921056][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26757'.
[ 1739.929977][ T7598] prodikeys: probe of 0003:041E:2801.0009 failed with error -22
[ 1740.032585][ T5783] loop3: detected capacity change from 0 to 128
[ 1740.121403][T19745] usb 1-1: USB disconnect, device number 9
[ 1740.177381][ T5783] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1740.314068][ T5814] netlink: 124 bytes leftover after parsing attributes in process `syz.5.26767'.
[ 1740.325114][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.333568][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.352425][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.370910][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.383846][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.391183][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.400265][ T5819] loop4: detected capacity change from 0 to 256
[ 1740.404114][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.429173][ T5819] exfat: Deprecated parameter 'namecase'
[ 1740.429247][ T5819] exfat: Deprecated parameter 'utf8'
[ 1740.436647][ T5819] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[ 1740.443649][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.443684][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.443708][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.443731][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.443755][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.443779][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.443803][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.443827][ T4285] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[ 1740.448552][ T5819] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[ 1740.458678][ T4285] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input110
[ 1740.606850][ T4285] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 1740.667565][ T4285] usb 2-1: USB disconnect, device number 122
[ 1740.792506][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26771'.
[ 1740.944159][ T5839] fido_id[5839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1740.998417][ T5864] loop4: detected capacity change from 0 to 1024
[ 1741.103807][ T5871] loop3: detected capacity change from 0 to 16
[ 1741.193051][ T5871] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1741.203483][ T3278] hfsplus: b-tree write err: -5, ino 25
[ 1741.210858][ T5871] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1741.220601][ T3278] hfsplus: b-tree write err: -5, ino 4
[ 1741.226358][ T3278] hfsplus: b-tree write err: -5, ino 2
[ 1741.261870][ T5871] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851]
[ 1741.344822][ T5871] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[ 1741.579605][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26786'.
[ 1741.674174][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1741.898130][ T5930] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[ 1741.974729][    T9] hfsplus: b-tree write err: -5, ino 25
[ 1741.974987][    T9] hfsplus: b-tree write err: -5, ino 4
[ 1741.975070][    T9] hfsplus: b-tree write err: -5, ino 2
[ 1742.047482][ T5938] FAT-fs (loop5): Directory bread(block 64) failed
[ 1742.047529][ T5938] FAT-fs (loop5): Directory bread(block 65) failed
[ 1742.047603][ T5938] FAT-fs (loop5): Directory bread(block 66) failed
[ 1742.047638][ T5938] FAT-fs (loop5): Directory bread(block 67) failed
[ 1742.047731][ T5938] FAT-fs (loop5): Directory bread(block 68) failed
[ 1742.047765][ T5938] FAT-fs (loop5): Directory bread(block 69) failed
[ 1742.047832][ T5938] FAT-fs (loop5): Directory bread(block 70) failed
[ 1742.047865][ T5938] FAT-fs (loop5): Directory bread(block 71) failed
[ 1742.048055][ T5938] FAT-fs (loop5): Directory bread(block 72) failed
[ 1742.048092][ T5938] FAT-fs (loop5): Directory bread(block 73) failed
[ 1742.058907][ T5930] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[ 1742.063090][ T5930] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1742.174617][ T5930] EXT4-fs (loop3): group descriptors corrupted!
[ 1742.190381][ T4285] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1742.348304][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1742.407059][ T5956] program syz.5.26798 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1742.474157][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1742.479122][ T4285] usb 1-1: Using ep0 maxpacket: 16
[ 1742.569622][ T5961] binder_alloc: binder_alloc_mmap_handler: 5960 200000ffe000-200001000000 already mapped failed -16
[ 1742.619668][ T4285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1742.619708][ T4285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1742.619731][ T4285] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1742.619771][ T4285] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1742.619796][ T4285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1742.621607][ T4285] usb 1-1: config 0 descriptor??
[ 1742.801423][ T5971] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1742.803916][ T5971] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 1742.894196][ T2514] hfsplus: b-tree write err: -5, ino 25
[ 1742.905334][ T5971] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851]
[ 1742.938466][ T2514] hfsplus: b-tree write err: -5, ino 4
[ 1742.960420][ T2514] hfsplus: b-tree write err: -5, ino 2
[ 1742.971005][ T5971] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[ 1743.038255][ T5980] netlink: 124 bytes leftover after parsing attributes in process `syz.3.26805'.
[ 1743.145093][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.195358][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.238028][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.245375][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.284607][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.308420][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.341797][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.369923][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.402921][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.428820][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.455935][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.494652][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.523807][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.556232][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.577807][ T4285] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[ 1743.619889][ T4285] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000B/input/input111
[ 1743.685190][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1743.702379][ T4285] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[ 1743.720569][ T6024] set_capacity_and_notify: 5 callbacks suppressed
[ 1743.720589][ T6024] loop1: detected capacity change from 0 to 1024
[ 1743.762183][ T4285] usb 1-1: USB disconnect, device number 10
[ 1743.877494][ T6024] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.26813: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1743.879584][ T3801] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1743.967082][ T6056] loop4: detected capacity change from 0 to 2048
[ 1744.020741][ T6024] Quota error (device loop1): qtree_write_dquot: dquota write failed
[ 1744.072337][ T6063] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1744.093501][ T6024] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.26813: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1744.175145][ T6054] fido_id[6054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1744.190935][ T6024] Quota error (device loop1): v2_write_file_info: Can't write info structure
[ 1744.201804][ T3801] usb 4-1: Using ep0 maxpacket: 32
[ 1744.212532][ T6024] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.26813: Failed to acquire dquot type 0
[ 1744.236756][ T6024] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[ 1744.339462][ T3801] usb 4-1: config 10 has an invalid interface number: 251 but max is 0
[ 1744.352682][ T3801] usb 4-1: config 10 has no interface number 0
[ 1744.396469][ T3801] usb 4-1: config 10 interface 251 has no altsetting 0
[ 1744.424164][ T6024] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.26813: mark_inode_dirty error
[ 1744.505296][ T6024] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[ 1744.568631][ T6024] EXT4-fs (loop1): 1 orphan inode deleted
[ 1744.575063][ T6024] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1744.628669][ T3801] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff
[ 1744.637972][ T3801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1744.689958][ T3801] usb 4-1: Product: syz
[ 1744.695186][ T3801] usb 4-1: Manufacturer: syz
[ 1744.699819][ T3801] usb 4-1: SerialNumber: syz
[ 1744.740478][ T3278] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1744.768663][ T6024] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.26813: Invalid inode table block 1 in block_group 0
[ 1744.809838][ T3278] Quota error (device loop1): remove_tree: Can't read quota data block 1
[ 1744.833886][ T3278] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:9: Failed to release dquot type 0
[ 1744.888093][ T6024] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[ 1745.074221][ T4243] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1745.089614][ T3801] gspca_main: sunplus-2.14.0 probing 052b:1803
[ 1745.121063][ T3801] gspca_sunplus: reg_r err -71
[ 1745.126194][ T3801] sunplus: probe of 4-1:10.251 failed with error -71
[ 1745.152261][ T4243] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[ 1745.187268][ T3801] usb 4-1: USB disconnect, device number 114
[ 1745.200353][ T4243] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[ 1745.239350][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26834'.
[ 1745.318046][ T6131] device macsec1 entered promiscuous mode
[ 1745.345171][ T6131] team0: Device macsec1 is already an upper device of the team interface
[ 1746.211770][ T6208] affs: Unrecognized mount option "" or missing value
[ 1746.230180][ T6208] affs: Error parsing options
[ 1746.402628][ T3801] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1746.618800][ T6231] loop4: detected capacity change from 0 to 8
[ 1746.680541][ T3801] usb 1-1: Using ep0 maxpacket: 8
[ 1746.718708][ T6231] SQUASHFS error: Failed to read block 0xe000000000001ea: -5
[ 1746.718760][ T6231] unable to read xattr id index table
[ 1747.012059][ T3801] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1747.043632][ T3801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1747.064060][ T3801] usb 1-1: Product: syz
[ 1747.079258][ T3801] usb 1-1: Manufacturer: syz
[ 1747.094931][ T3801] usb 1-1: SerialNumber: syz
[ 1747.122825][ T3801] usb 1-1: config 0 descriptor??
[ 1747.185469][ T3801] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1747.327591][ T6291] loop5: detected capacity change from 0 to 512
[ 1747.431650][ T6291] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.26874: missing EA_INODE flag
[ 1747.471915][ T6291] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.26874: error while reading EA inode 12 err=-117
[ 1747.508379][ T6291] EXT4-fs (loop5): 1 orphan inode deleted
[ 1747.551259][ T6291] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1747.623825][ T6293] loop4: detected capacity change from 0 to 8192
[ 1747.836730][ T6262] loop1: detected capacity change from 0 to 40427
[ 1747.869915][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[ 1747.933255][ T3801] gspca_sq930x: reg_w 0305 fd00 failed -71
[ 1747.957995][ T6262] F2FS-fs (loop1): invalid crc value
[ 1748.004430][ T6262] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[ 1748.219911][ T3801] gspca_sq930x: Sensor ov9630 not yet treated
[ 1748.224532][ T6262] F2FS-fs (loop1): Start checkpoint disabled!
[ 1748.230566][ T3801] sq930x: probe of 1-1:0.0 failed with error -22
[ 1748.301597][ T6262] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7
[ 1748.309226][ T3801] usb 1-1: USB disconnect, device number 11
[ 1748.393258][ T6342] loop3: detected capacity change from 0 to 2048
[ 1748.454757][ T6342] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[ 1748.566779][ T6342] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none.
[ 1748.634264][ T6342] 
[ 1748.636744][ T6342] ======================================================
[ 1748.643876][ T6342] WARNING: possible circular locking dependency detected
[ 1748.651279][ T6342] syzkaller #0 Not tainted
[ 1748.655715][ T6342] ------------------------------------------------------
[ 1748.662742][ T6342] syz.3.26886/6342 is trying to acquire lock:
[ 1748.669087][ T6342] ffff888055165a80 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0
[ 1748.678934][ T6342] 
[ 1748.678934][ T6342] but task is already holding lock:
[ 1748.686470][ T6342] ffff888024b40c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0
[ 1748.696757][ T6342] 
[ 1748.696757][ T6342] which lock already depends on the new lock.
[ 1748.696757][ T6342] 
[ 1748.707346][ T6342] 
[ 1748.707346][ T6342] the existing dependency chain (in reverse order) is:
[ 1748.716842][ T6342] 
[ 1748.716842][ T6342] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}:
[ 1748.725503][ T6342]        percpu_down_read+0x46/0x1b0
[ 1748.730841][ T6342]        ext4_writepages+0x20f/0x2df0
[ 1748.736483][ T6342]        do_writepages+0x476/0x6e0
[ 1748.741604][ T6342]        __writeback_single_inode+0x153/0xda0
[ 1748.747797][ T6342]        writeback_single_inode+0x3cb/0x8e0
[ 1748.753796][ T6342]        write_inode_now+0x23b/0x2c0
[ 1748.759108][ T6342]        iput+0x5ab/0x8a0
[ 1748.763632][ T6342]        ext4_xattr_set_entry+0x34f4/0x3ea0
[ 1748.769619][ T6342]        ext4_xattr_block_set+0x4fd/0x2d20
[ 1748.775643][ T6342]        ext4_expand_extra_isize_ea+0xf3f/0x19b0
[ 1748.782088][ T6342]        __ext4_expand_extra_isize+0x301/0x3e0
[ 1748.788257][ T6342]        __ext4_mark_inode_dirty+0x469/0x700
[ 1748.794327][ T6342]        ext4_evict_inode+0xa8d/0x1090
[ 1748.800056][ T6342]        evict+0x4c9/0x8d0
[ 1748.804654][ T6342]        ext4_orphan_cleanup+0xad2/0x1320
[ 1748.810569][ T6342]        ext4_fill_super+0x8d6e/0x94f0
[ 1748.816120][ T6342]        mount_bdev+0x287/0x3c0
[ 1748.820971][ T6342]        legacy_get_tree+0xe6/0x180
[ 1748.826343][ T6342]        vfs_get_tree+0x88/0x270
[ 1748.831293][ T6342]        do_new_mount+0x24a/0xa40
[ 1748.836411][ T6342]        __se_sys_mount+0x2e3/0x3d0
[ 1748.841612][ T6342]        do_syscall_64+0x4c/0xa0
[ 1748.846561][ T6342]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1748.853154][ T6342] 
[ 1748.853154][ T6342] -> #0 (&ei->xattr_sem){++++}-{3:3}:
[ 1748.861092][ T6342]        __lock_acquire+0x2c42/0x7d10
[ 1748.866646][ T6342]        lock_acquire+0x19e/0x400
[ 1748.871761][ T6342]        down_write+0x38/0x60
[ 1748.876634][ T6342]        ext4_destroy_inline_data+0x24/0xe0
[ 1748.882734][ T6342]        ext4_writepages+0x670/0x2df0
[ 1748.888115][ T6342]        do_writepages+0x476/0x6e0
[ 1748.893279][ T6342]        filemap_fdatawrite_wbc+0x1eb/0x240
[ 1748.899309][ T6342]        file_write_and_wait_range+0x14d/0x220
[ 1748.905588][ T6342]        ext4_sync_file+0x1ff/0xae0
[ 1748.911025][ T6342]        ext4_buffered_write_iter+0x338/0x3b0
[ 1748.917720][ T6342]        ext4_file_write_iter+0x74d/0x1700
[ 1748.923547][ T6342]        do_iter_readv_writev+0x47e/0x5f0
[ 1748.929360][ T6342]        do_iter_write+0x205/0x7b0
[ 1748.934742][ T6342]        do_pwritev+0x240/0x3a0
[ 1748.939681][ T6342]        do_syscall_64+0x4c/0xa0
[ 1748.944806][ T6342]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1748.951550][ T6342] 
[ 1748.951550][ T6342] other info that might help us debug this:
[ 1748.951550][ T6342] 
[ 1748.962056][ T6342]  Possible unsafe locking scenario:
[ 1748.962056][ T6342] 
[ 1748.969508][ T6342]        CPU0                    CPU1
[ 1748.975044][ T6342]        ----                    ----
[ 1748.980408][ T6342]   lock(&sbi->s_writepages_rwsem);
[ 1748.985775][ T6342]                                lock(&ei->xattr_sem);
[ 1748.992713][ T6342]                                lock(&sbi->s_writepages_rwsem);
[ 1749.000430][ T6342]   lock(&ei->xattr_sem);
[ 1749.004937][ T6342] 
[ 1749.004937][ T6342]  *** DEADLOCK ***
[ 1749.004937][ T6342] 
[ 1749.013085][ T6342] 2 locks held by syz.3.26886/6342:
[ 1749.018623][ T6342]  #0: ffff88807709a460 (sb_writers#5){.+.+}-{0:0}, at: do_pwritev+0x229/0x3a0
[ 1749.028067][ T6342]  #1: ffff888024b40c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0
[ 1749.038861][ T6342] 
[ 1749.038861][ T6342] stack backtrace:
[ 1749.044927][ T6342] CPU: 0 PID: 6342 Comm: syz.3.26886 Not tainted syzkaller #0
[ 1749.052497][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1749.062751][ T6342] Call Trace:
[ 1749.066347][ T6342]  <TASK>
[ 1749.069378][ T6342]  dump_stack_lvl+0x188/0x250
[ 1749.074338][ T6342]  ? load_image+0x400/0x400
[ 1749.078883][ T6342]  ? show_regs_print_info+0x20/0x20
[ 1749.084213][ T6342]  ? print_circular_bug+0x12b/0x1a0
[ 1749.089434][ T6342]  check_noncircular+0x296/0x330
[ 1749.094567][ T6342]  ? deref_stack_reg+0xd0/0x120
[ 1749.099614][ T6342]  ? add_chain_block+0x940/0x940
[ 1749.104646][ T6342]  ? lockdep_lock+0xf1/0x1f0
[ 1749.109333][ T6342]  ? mark_lock+0x94/0x320
[ 1749.113797][ T6342]  __lock_acquire+0x2c42/0x7d10
[ 1749.118783][ T6342]  ? verify_lock_unused+0x140/0x140
[ 1749.124482][ T6342]  ? mark_lock+0x94/0x320
[ 1749.129095][ T6342]  ? verify_lock_unused+0x140/0x140
[ 1749.134387][ T6342]  ? __lock_acquire+0x12e8/0x7d10
[ 1749.139912][ T6342]  ? verify_lock_unused+0x140/0x140
[ 1749.145119][ T6342]  lock_acquire+0x19e/0x400
[ 1749.149902][ T6342]  ? ext4_destroy_inline_data+0x24/0xe0
[ 1749.155462][ T6342]  ? read_lock_is_recursive+0x10/0x10
[ 1749.160841][ T6342]  ? rcu_read_lock_any_held+0xb0/0x130
[ 1749.166305][ T6342]  ? ext4_journal_check_start+0x180/0x250
[ 1749.172119][ T6342]  down_write+0x38/0x60
[ 1749.176281][ T6342]  ? ext4_destroy_inline_data+0x24/0xe0
[ 1749.182172][ T6342]  ext4_destroy_inline_data+0x24/0xe0
[ 1749.187552][ T6342]  ext4_writepages+0x670/0x2df0
[ 1749.192420][ T6342]  ? verify_lock_unused+0x140/0x140
[ 1749.197619][ T6342]  ? mark_lock+0x94/0x320
[ 1749.202138][ T6342]  ? __might_sleep+0xf0/0xf0
[ 1749.206823][ T6342]  ? ext4_readpage+0x2e0/0x2e0
[ 1749.211603][ T6342]  ? __lock_acquire+0x7d10/0x7d10
[ 1749.216633][ T6342]  ? do_raw_spin_lock+0x128/0x2f0
[ 1749.221839][ T6342]  ? do_raw_spin_unlock+0x11d/0x230
[ 1749.227231][ T6342]  ? ext4_readpage+0x2e0/0x2e0
[ 1749.232202][ T6342]  do_writepages+0x476/0x6e0
[ 1749.236906][ T6342]  ? filemap_fdatawrite_wbc+0x1e0/0x240
[ 1749.242733][ T6342]  ? __writepage+0x130/0x130
[ 1749.247558][ T6342]  ? __lock_acquire+0x7d10/0x7d10
[ 1749.252606][ T6342]  ? __rwlock_init+0x140/0x140
[ 1749.257545][ T6342]  ? generic_write_end+0x24d/0x3d0
[ 1749.262884][ T6342]  ? do_raw_spin_unlock+0x11d/0x230
[ 1749.268192][ T6342]  filemap_fdatawrite_wbc+0x1eb/0x240
[ 1749.273981][ T6342]  file_write_and_wait_range+0x14d/0x220
[ 1749.279714][ T6342]  ? __filemap_set_wb_err+0x1b0/0x1b0
[ 1749.285159][ T6342]  ext4_sync_file+0x1ff/0xae0
[ 1749.290068][ T6342]  ext4_buffered_write_iter+0x338/0x3b0
[ 1749.295650][ T6342]  ext4_file_write_iter+0x74d/0x1700
[ 1749.300956][ T6342]  ? __lock_acquire+0x7d10/0x7d10
[ 1749.306198][ T6342]  ? ext4_file_read_iter+0x700/0x700
[ 1749.311668][ T6342]  ? aa_file_perm+0x38b/0xe80
[ 1749.316442][ T6342]  do_iter_readv_writev+0x47e/0x5f0
[ 1749.321732][ T6342]  ? aa_path_link+0x880/0x880
[ 1749.326502][ T6342]  ? generic_file_rw_checks+0x280/0x280
[ 1749.332084][ T6342]  ? common_file_perm+0x171/0x1c0
[ 1749.337317][ T6342]  ? fsnotify_perm+0x5d/0x560
[ 1749.342002][ T6342]  ? security_file_permission+0x75/0xa0
[ 1749.347568][ T6342]  do_iter_write+0x205/0x7b0
[ 1749.352288][ T6342]  do_pwritev+0x240/0x3a0
[ 1749.356742][ T6342]  ? do_preadv+0x390/0x390
[ 1749.361187][ T6342]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1749.367418][ T6342]  ? lock_chain_count+0x20/0x20
[ 1749.372541][ T6342]  ? vtime_user_exit+0x2c8/0x3e0
[ 1749.377599][ T6342]  ? lockdep_hardirqs_on+0x94/0x140
[ 1749.383146][ T6342]  ? __x64_sys_pwritev2+0xba/0x100
[ 1749.388292][ T6342]  do_syscall_64+0x4c/0xa0
[ 1749.392820][ T6342]  ? clear_bhb_loop+0x30/0x80
[ 1749.397518][ T6342]  ? clear_bhb_loop+0x30/0x80
[ 1749.402497][ T6342]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1749.408667][ T6342] RIP: 0033:0x7fa80ed5edd9
[ 1749.413363][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1749.433159][ T6342] RSP: 002b:00007fa80cfb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 1749.441590][ T6342] RAX: ffffffffffffffda RBX: 00007fa80efd7fa0 RCX: 00007fa80ed5edd9
[ 1749.449742][ T6342] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[ 1749.457739][ T6342] RBP: 00007fa80edf4d69 R08: 0000000000000000 R09: 0000000000000000
[ 1749.465718][ T6342] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000
[ 1749.473779][ T6342] R13: 00007fa80efd8038 R14: 00007fa80efd7fa0 R15: 00007ffd7a0fa828
[ 1749.482298][ T6342]  </TASK>
[ 1749.521773][ T6342] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.26886: bg 0: block 234: padding at end of block bitmap is not set
[ 1749.537675][ T6342] EXT4-fs (loop3): Remounting filesystem read-only
[ 1749.574099][ T6316] loop5: detected capacity change from 0 to 32768