last executing test programs:

4.673545612s ago: executing program 1 (id=3165):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f6007009021200010000000009040000000202"], 0x0)

2.852414884s ago: executing program 2 (id=3180):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=3', 0x37)

2.252634108s ago: executing program 2 (id=3192):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x2, 0x0)
pread64(r0, &(0x7f0000000200)=""/82, 0x52, 0x1)

2.189996309s ago: executing program 2 (id=3195):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)="6b756d41e6378c41e9556afe3bc831502f33f81f5dcf57df1508d704b3a7b67e", 0x20)

2.128093791s ago: executing program 2 (id=3197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x2)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
rmdir(&(0x7f0000000000)='./file0\x00')

2.004049494s ago: executing program 2 (id=3200):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000280)={[{@nombcache}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@orlov}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0xfe37, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2)

1.915356056s ago: executing program 4 (id=3203):
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

1.871272547s ago: executing program 4 (id=3205):
unshare(0x22020600)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = fcntl$dupfd(r0, 0x0, r0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

1.76749073s ago: executing program 4 (id=3206):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0)
read$dsp(r0, 0x0, 0x0)

1.611446893s ago: executing program 2 (id=3208):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
syz_mount_image$ocfs2(&(0x7f00000048c0), &(0x7f0000004900)='./file0\x00', 0x2904a1, &(0x7f0000000980)={[{@localflocks}, {@barrier={'barrier', 0x3d, 0x8001}}, {@heartbeat_global}, {@localalloc={'localalloc', 0x3d, 0xff}}, {@grpquota}, {@usrquota}], [{@subj_type={'subj_type', 0x3d, 'barrier'}}, {@permit_directio}, {@flag='dirsync'}]}, 0x1, 0x48b2, &(0x7f0000009240)="$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")
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_SETMODE(r0, 0x5602, 0x0)

1.586445143s ago: executing program 1 (id=3210):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==")
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000001080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1000000, &(0x7f00000010c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@fmask={'fmask', 0x3d, 0x7}}, {@allow_utime={'allow_utime', 0x3d, 0x20e}}]}, 0x5, 0x14e1, &(0x7f0000001140)="$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")
r0 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

1.582016814s ago: executing program 4 (id=3211):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f00000000c0)={[{@errors_continue}, {@norecovery}, {}, {@discard}, {}, {}, {@nobarrier}, {@errors_continue}], [], 0x2c}, 0x3, 0xf1d, &(0x7f0000002d80)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

1.086464395s ago: executing program 3 (id=3216):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0xf8, 0x30, 0x100, 0x71bd23, 0x25dfdbff, {}, [{0xe4, 0x1, [@m_csum={0x30, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xb0, 0xd, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15f4}}]}, {0x75, 0x6, "7fa431af87b0675b1366a8896f6dc17e62660b3daa8bf3d34e9aff0d0043db077e67cc7b53dbd62d2408cc55c3cdd9a4594f6375c07d20589fe0efd026c32b21035808a265948741237beb763a0bc57b63f9cc88939df9e1603165828176e9401f86f784c5ee49bfb83c32351892268950"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

958.565769ms ago: executing program 1 (id=3217):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

916.249079ms ago: executing program 4 (id=3218):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000600), &(0x7f0000000480)=@tcp=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20)

862.790431ms ago: executing program 3 (id=3220):
mlockall(0x7)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

741.800123ms ago: executing program 1 (id=3221):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='((ev_)', 0x6)

661.151865ms ago: executing program 4 (id=3223):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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")
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

613.112626ms ago: executing program 1 (id=3224):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
pipe2(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x7fff7fffffffffff}}, 0x56)
splice(r1, 0x0, r0, 0x0, 0x18, 0x9)

494.240729ms ago: executing program 1 (id=3226):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105b7, &(0x7f00000105c0)="$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")
chdir(&(0x7f0000000140)='./file0\x00')

417.133461ms ago: executing program 0 (id=3228):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpid()
fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1})
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0))

375.650112ms ago: executing program 0 (id=3229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/failslab/times\x00', 0x1, 0x0)
write$binfmt_format(r0, &(0x7f0000000340)='-1\x00', 0x3)

339.478332ms ago: executing program 0 (id=3230):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x5, 0x7, 0x8, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x79, r0}, 0x38)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

284.286654ms ago: executing program 0 (id=3231):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.sched_load_balance\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100000000)

238.679325ms ago: executing program 0 (id=3232):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
getpeername(r0, 0x0, 0x0)

198.868556ms ago: executing program 0 (id=3233):
unshare(0x20000400)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe1082084de59e668, 0xc3072, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8)

156.118057ms ago: executing program 3 (id=3234):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r0 = inotify_init1(0x0)
unshare(0x26000400)
inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x12000335)

109.951268ms ago: executing program 3 (id=3235):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9)

45.884279ms ago: executing program 3 (id=3236):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x2000000000000002)

0s ago: executing program 3 (id=3237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='at', 0x2)

kernel console output (not intermixed with test programs):

ock,data_err=ignore,,errors=continue. Quota mode: writeback.
[  222.296069][ T8919] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.523517][ T8939] loop3: detected capacity change from 0 to 512
[  222.554490][ T8943] loop2: detected capacity change from 0 to 64
[  222.703382][ T8939] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1794: corrupted in-inode xattr
[  222.730299][ T7730] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  222.753448][ T8939] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1794: couldn't read orphan inode 15 (err -117)
[  222.826243][ T8952] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  222.864604][ T8939] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  222.992954][ T7730] usb 2-1: Using ep0 maxpacket: 16
[  223.001131][ T8939] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.1794: bad entry in directory: inode out of bounds - offset=0, inode=87, rec_len=12, size=1024 fake=0
[  223.078005][ T8958] loop4: detected capacity change from 0 to 256
[  223.118791][ T7730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.138574][ T7730] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  223.215628][ T8958] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  223.306414][ T8958] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  223.336896][ T7730] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.360721][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1823'.
[  223.363425][ T7730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.388239][ T8958] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  223.396366][ T8970] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1823'.
[  223.428620][ T8958] UDF-fs: Scanning with blocksize 512 failed
[  223.438750][ T7730] usb 2-1: Product: syz
[  223.442977][ T7730] usb 2-1: Manufacturer: syz
[  223.479059][ T8958] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  223.492878][ T7730] usb 2-1: SerialNumber: syz
[  223.532084][ T8958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.024833][ T8997] pim6reg1: tun_chr_ioctl cmd 1074025677
[  224.067614][ T8997] pim6reg1: linktype set to 768
[  224.097167][ T9001] loop0: detected capacity change from 0 to 16
[  224.225744][ T9001] erofs: (device loop0): mounted with root inode @ nid 36.
[  224.553301][ T8983] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1828 (8983)
[  224.570351][ T9013] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  224.625181][ T8983] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  224.637228][ T9013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.649032][ T8983] BTRFS info (device loop4): use zlib compression, level 3
[  224.656291][ T8983] BTRFS info (device loop4): using free space tree
[  224.673227][ T8983] BTRFS info (device loop4): has skinny extents
[  225.006326][ T7730] usb 2-1: USB disconnect, device number 8
[  225.016760][ T8983] BTRFS info (device loop4): enabling ssd optimizations
[  225.034392][ T9031] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.1846: inode has both inline data and extents flags
[  225.090254][ T9031] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1846: couldn't read orphan inode 15 (err -117)
[  225.218523][ T9031] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  225.368871][ T4177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4177)
[  225.478027][ T9058] exfat: Deprecated parameter 'utf8'
[  225.491171][ T9058] exfat: Deprecated parameter 'namecase'
[  225.519204][ T9058] exfat: Deprecated parameter 'namecase'
[  225.604970][ T9058] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  226.049650][ T9064] rtc_cmos 00:00: Alarms can be up to one day in the future
[  226.241764][ T9076] set_capacity_and_notify: 6 callbacks suppressed
[  226.241779][ T9076] loop3: detected capacity change from 0 to 16
[  226.305199][ T7376] rtc_cmos 00:00: Alarms can be up to one day in the future
[  226.323366][ T7376] rtc_cmos 00:00: Alarms can be up to one day in the future
[  226.339815][ T9076] erofs: (device loop3): mounted with root inode @ nid 36.
[  226.378769][ T7376] rtc_cmos 00:00: Alarms can be up to one day in the future
[  226.413638][ T7376] rtc_cmos 00:00: Alarms can be up to one day in the future
[  226.452141][ T7376] rtc rtc0: __rtc_set_alarm: err=-22
[  226.687449][ T9094] kAFS: bad VL server IP address
[  226.721219][ T9096] loop2: detected capacity change from 0 to 2048
[  226.776626][ T9100] tun0: tun_chr_ioctl cmd 1074025675
[  226.787573][ T9100] tun0: persist disabled
[  226.818774][ T9096] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  226.862814][ T9096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.942299][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  226.942314][   T26] audit: type=1800 audit(1787710210.561:59): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1868" name="file1" dev="loop2" ino=1346 res=0 errno=0
[  227.446484][ T4464] sd 0:0:1:0: [sda] tag#9305 access beyond end of device
[  227.453788][ T4464] blk_update_request: I/O error, dev sda, sector 125344325566472 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  227.501778][ T9092] loop1: detected capacity change from 0 to 32768
[  227.570362][ T1091] sd 0:0:1:0: [sda] tag#9306 access beyond end of device
[  227.577534][ T1091] blk_update_request: I/O error, dev sda, sector 125344325566472 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.592523][ T1091] Buffer I/O error on dev sda6, logical block 1, async page read
[  228.090701][ T9133] loop3: detected capacity change from 0 to 256
[  228.141029][ T4230] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  228.155076][ T9133] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  228.328466][ T5314] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  228.408451][ T4230] usb 3-1: Using ep0 maxpacket: 32
[  228.494545][ T9144] loop1: detected capacity change from 0 to 512
[  228.529430][ T9124] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1880'.
[  228.573719][ T9144] EXT4-fs (loop1): Ignoring removed oldalloc option
[  228.588642][ T9144] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  228.609718][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short
[  228.668447][ T4230] usb 3-1: unable to read config index 0 descriptor/start: -71
[  228.676618][ T4230] usb 3-1: can't read configurations, error -71
[  228.689025][ T9144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  228.698044][ T9144] EXT4-fs (loop1): orphan cleanup on readonly fs
[  228.712162][ T9144] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1881: bad orphan inode 267
[  228.723306][ T9144] EXT4-fs (loop1): Remounting filesystem read-only
[  228.733072][ T9144] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none.
[  228.753215][ T5314] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  228.762184][ T9144] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1881: dx entry: limit 0 != root limit 125
[  228.798577][ T5314] usb 5-1: config 1 has no interface number 0
[  228.804820][ T5314] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64
[  228.841932][ T9144] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1881: Corrupt directory, running e2fsck is recommended
[  228.865420][ T5314] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8
[  229.068834][ T5314] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  229.088141][ T5314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.126615][ T5314] usb 5-1: Product: syz
[  229.144786][ T5314] usb 5-1: Manufacturer: syz
[  229.167654][ T5314] usb 5-1: SerialNumber: syz
[  229.315371][ T9165] device veth0_to_bond entered promiscuous mode
[  229.327495][ T9167] loop3: detected capacity change from 0 to 256
[  229.337503][ T9165] device macsec2 entered promiscuous mode
[  229.455333][ T9173] loop0: detected capacity change from 0 to 1024
[  229.661975][ T9173] hfsplus: invalid catalog entry type
[  229.687009][ T9174] hfsplus: invalid catalog entry type
[  229.877732][ T9181] base or size exceeds the MTRR width
[  230.036158][ T9185] loop0: detected capacity change from 0 to 8
[  230.192287][ T9169] loop1: detected capacity change from 0 to 40427
[  230.214491][ T9185] SQUASHFS error: xz decompression failed, data probably corrupt
[  230.252787][ T9185] SQUASHFS error: Failed to read block 0x60: -5
[  230.303241][ T9185] SQUASHFS error: xz decompression failed, data probably corrupt
[  230.322046][ T9169] F2FS-fs (loop1): Found nat_bits in checkpoint
[  230.345563][ T9185] SQUASHFS error: Failed to read block 0x60: -5
[  230.368788][   T26] audit: type=1800 audit(1787710213.991:60): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1907" name="file1" dev="loop0" ino=1 res=0 errno=0
[  230.438586][ T9194] bond0: no command found in arp_ip_targets file - use +<addr> or -<addr>
[  230.513066][ T9169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  230.653717][ T4340] input: syz0 as /devices/virtual/misc/uhid/0002:0001:0002.0001/input/input11
[  230.673799][ T9199] loop3: detected capacity change from 0 to 1024
[  230.724716][ T4340] hid-generic 0002:0001:0002.0001: input,hidraw0: <UNKNOWN> HID v0.01 Mouse [syz0] on syz0
[  230.740045][ T9199] EXT4-fs (loop3): Unrecognized mount option "smackfsdef=hash" or missing value
[  230.788157][ T4187] attempt to access beyond end of device
[  230.788157][ T4187] loop1: rw=2049, want=45104, limit=40427
[  230.819426][ T9197] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  230.848708][ T9178] XFS (loop2): Mounting V5 Filesystem
[  231.039827][ T9178] XFS (loop2): Ending clean mount
[  231.081885][ T4333] usb 5-1: USB disconnect, device number 13
[  231.204498][ T9206] udevd[9206]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error
[  231.266026][ T9212] set_capacity_and_notify: 2 callbacks suppressed
[  231.266043][ T9212] loop4: detected capacity change from 0 to 512
[  231.352849][ T4188] XFS (loop2): Unmounting Filesystem
[  231.432523][ T9212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  231.563321][ T9212] EXT4-fs (loop4): 1 truncate cleaned up
[  231.587522][ T9212] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback.
[  231.720631][ T9224] loop0: detected capacity change from 0 to 128
[  231.851068][ T9226] loop1: detected capacity change from 0 to 128
[  231.893614][   T26] audit: type=1800 audit(1787710215.511:61): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1918" name="file2" dev="loop0" ino=1048653 res=0 errno=0
[  231.951867][ T9226] FAT-fs (loop1): Directory bread(block 32) failed
[  231.998457][ T9226] FAT-fs (loop1): Directory bread(block 33) failed
[  232.026889][ T9226] FAT-fs (loop1): Directory bread(block 34) failed
[  232.036491][ T9226] FAT-fs (loop1): Directory bread(block 35) failed
[  232.046627][ T9226] FAT-fs (loop1): Directory bread(block 36) failed
[  232.067073][ T9226] FAT-fs (loop1): Directory bread(block 37) failed
[  232.075831][ T9226] FAT-fs (loop1): Directory bread(block 38) failed
[  232.085976][ T9226] FAT-fs (loop1): Directory bread(block 39) failed
[  232.155319][ T9226] FAT-fs (loop1): Directory bread(block 40) failed
[  232.185974][ T9226] FAT-fs (loop1): Directory bread(block 41) failed
[  232.217767][ T9230] loop4: detected capacity change from 0 to 4096
[  232.307689][ T9230] EXT4-fs (loop4): Mount option "dioread_lock" incompatible with ext2
[  232.527645][   T26] audit: type=1800 audit(1787710216.141:62): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1913" name="file1" dev="loop1" ino=1048654 res=0 errno=0
[  232.769115][ T9243] loop2: detected capacity change from 0 to 512
[  232.834930][ T9243] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  232.906201][ T9243] EXT4-fs (loop2): invalid journal inode
[  232.917639][ T9222] loop3: detected capacity change from 0 to 40427
[  232.927903][ T9249] loop1: detected capacity change from 0 to 256
[  233.000212][ T9249] exfat: Deprecated parameter 'utf8'
[  233.035159][ T9222] F2FS-fs (loop3): invalid crc value
[  233.066176][ T9249] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[  233.110352][ T9222] F2FS-fs (loop3): Found nat_bits in checkpoint
[  233.310313][ T9262] loop4: detected capacity change from 0 to 16
[  233.329100][ T9222] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  233.388778][ T9262] erofs: (device loop4): mounted with root inode @ nid 36.
[  233.666293][ T9265] loop1: detected capacity change from 0 to 8192
[  233.680260][ T4200] attempt to access beyond end of device
[  233.680260][ T4200] loop3: rw=2049, want=45104, limit=40427
[  233.947554][ T9248] loop0: detected capacity change from 0 to 32768
[  234.204847][ T9248] XFS (loop0): Mounting V5 Filesystem
[  234.354482][ T9248] XFS (loop0): Ending clean mount
[  234.366989][ T9248] XFS (loop0): Quotacheck needed: Please wait.
[  234.438168][ T9248] XFS (loop0): Quotacheck: Done.
[  234.568224][ T4185] XFS (loop0): Unmounting Filesystem
[  234.648532][ T9297] kAFS: bad VL server IP address
[  234.753880][ T9305] device syz_tun entered promiscuous mode
[  234.773956][ T9305] device macvtap1 entered promiscuous mode
[  234.829293][ T9305] device syz_tun left promiscuous mode
[  235.127697][ T9314] tipc: Resetting bearer <eth:syz_tun>
[  235.495840][ T9331] netlink: 'syz.1.1960': attribute type 5 has an invalid length.
[  235.510561][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1960'.
[  235.637165][ T9336] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  235.668627][ T5314] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  235.694833][ T9317] infiniband syz1: set active
[  235.724097][ T9317] infiniband syz1: added syz_tun
[  235.815296][ T9317] RDS/IB: syz1: added
[  235.832883][ T9317] smc: adding ib device syz1 with port count 1
[  235.839869][ T9303] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  235.903995][ T9303] F2FS-fs (loop3): invalid crc value
[  235.919766][ T9317] smc:    ib device syz1 port 1 has pnetid 
[  235.979673][ T9303] F2FS-fs (loop3): Found nat_bits in checkpoint
[  236.079353][ T5314] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  236.097974][ T9344] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  236.120850][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.139644][ T9303] F2FS-fs (loop3): recover fsync data on readonly fs
[  236.164309][ T9303] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  236.198661][ T9303] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  236.223199][ T9303] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  236.345411][ T9303] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0
[  236.585641][ T4340] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  236.955662][ T4340] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  236.987007][ T4340] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  237.007908][ T4340] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  237.027354][ T4340] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  237.039119][ T4340] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  237.168694][ T4340] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  237.177799][ T4340] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  237.198711][ T4340] usb 2-1: Product: syz
[  237.202941][ T4340] usb 2-1: Manufacturer: syz
[  237.251985][ T9355] set_capacity_and_notify: 3 callbacks suppressed
[  237.252001][ T9355] loop4: detected capacity change from 0 to 4096
[  237.328263][ T9355] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  237.387851][ T9364] loop3: detected capacity change from 0 to 128
[  237.471283][ T9364] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  237.482874][ T9364] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.511087][ T9364] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  237.686233][ T4340] input: syz0 as /devices/virtual/misc/uhid/0002:0001:0002.0002/input/input12
[  237.726957][ T9372] loop4: detected capacity change from 0 to 1024
[  237.764981][ T4340] hid-generic 0002:0001:0002.0002: input,hidraw0: <UNKNOWN> HID v0.01 Mouse [syz0] on syz0
[  237.784490][ T9372] EXT4-fs (loop4): Unrecognized mount option "smackfsdef=hash" or missing value
[  237.915855][ T9374] loop0: detected capacity change from 0 to 32768
[  238.002697][ T9374] XFS (loop0): Mounting V5 Filesystem
[  238.040515][ T9374] XFS (loop0): Ending clean mount
[  238.063605][ T9387] udevd[9387]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error
[  238.064004][ T4333] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  238.135192][ T9374] XFS (loop0): Quotacheck needed: Please wait.
[  238.250456][ T9374] XFS (loop0): Quotacheck: Done.
[  238.337377][ T4185] XFS (loop0): Unmounting Filesystem
[  238.358519][ T4333] usb 4-1: Using ep0 maxpacket: 32
[  238.377561][ T7730] usb 3-1: USB disconnect, device number 14
[  238.485867][ T4333] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  238.502952][ T4333] usb 4-1: config 0 has no interface number 0
[  238.521077][ T4333] usb 4-1: config 0 interface 184 has no altsetting 0
[  238.633468][ T4237] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  238.678639][ T4333] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  238.697955][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.729573][ T4333] usb 4-1: Product: syz
[  238.733804][ T4333] usb 4-1: Manufacturer: syz
[  238.740279][ T4333] usb 4-1: SerialNumber: syz
[  239.027548][ T9413] loop2: detected capacity change from 0 to 1024
[  239.034444][ T4237] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  239.044911][ T4237] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.055480][ T4237] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  239.065644][ T4237] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  239.130963][ T9403] loop0: detected capacity change from 0 to 32768
[  239.183837][ T9403] XFS (loop0): Mounting V5 Filesystem
[  239.244286][ T4237] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  239.253798][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.266385][ T4237] usb 5-1: Product: syz
[  239.271060][ T4237] usb 5-1: Manufacturer: syz
[  239.275899][ T4237] usb 5-1: SerialNumber: syz
[  239.282353][ T9403] XFS (loop0): Ending clean mount
[  239.349574][ T7730] usb 2-1: USB disconnect, device number 9
[  239.449755][ T4185] XFS (loop0): Unmounting Filesystem
[  239.603351][ T9429] loop2: detected capacity change from 0 to 2048
[  239.687461][ T9429] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  239.789367][ T9436] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.057673][ T9446] device lo entered promiscuous mode
[  240.074561][ T9446] device bond0 entered promiscuous mode
[  240.092179][ T9446] device dummy0 entered promiscuous mode
[  240.105186][ T9446] device eql entered promiscuous mode
[  240.122074][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  240.132089][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  240.145689][ T9446] device ifb0 entered promiscuous mode
[  240.154319][ T9446] device ifb1 entered promiscuous mode
[  240.164228][ T9446] device eth0 entered promiscuous mode
[  240.186242][ T9446] device wlan0 entered promiscuous mode
[  240.194768][ T9446] device wlan1 entered promiscuous mode
[  240.206946][ T9446] device hwsim0 entered promiscuous mode
[  240.217883][ T9446] device wpan0 entered promiscuous mode
[  240.229825][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  240.237453][ T9446] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  240.253055][ T9446] device teql0 entered promiscuous mode
[  240.264033][ T9446] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  240.294684][ T9448] loop0: detected capacity change from 0 to 1024
[  240.402159][ T9435] loop1: detected capacity change from 0 to 32768
[  240.500784][ T9435] add_index: next_index = 0.  Resetting!
[  240.506916][ T9435] find_entry called with index >= next_index
[  240.514084][ T9435] find_entry called with index >= next_index
[  240.515020][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2005'.
[  240.520158][ T9435] find_entry called with index >= next_index
[  240.534059][ T9435] find_entry called with index >= next_index
[  240.637250][ T9435] non-latin1 character 0x3ff found in JFS file name
[  240.647745][ T9435] mount with iocharset=utf8 to access
[  240.688425][ T9454] bonding: no command found in bonding_masters - use +ifname or -ifname
[  240.817185][ T4237] usb 4-1: USB disconnect, device number 12
[  240.846272][ T9459] loop3: detected capacity change from 0 to 512
[  240.945464][ T9459] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.2009: inode has both inline data and extents flags
[  241.000592][ T9459] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.2009: couldn't read orphan inode 15 (err -117)
[  241.058797][ T9459] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  241.377215][ T5270] usb 5-1: USB disconnect, device number 14
[  241.455734][ T9473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.493921][ T9475] i2c i2c-0: delete_device: Can't parse I2C address
[  241.667375][ T9481] rdma_rxe: rxe_register_device failed with error -23
[  241.693821][ T4340] kernel write not supported for file /snd/pcmC0D0p (pid: 4340 comm: kworker/0:14)
[  241.711581][ T9481] rdma_rxe: failed to add syz_tun
[  242.207404][ T9469] XFS (loop1): Mounting V5 Filesystem
[  242.380883][ T9469] XFS (loop1): Ending clean mount
[  242.387066][ T9506] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  242.401336][ T9469] XFS (loop1): Quotacheck needed: Please wait.
[  242.549238][ T9510] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2029'.
[  242.564664][ T9469] XFS (loop1): Quotacheck: Done.
[  242.668914][   T26] audit: type=1800 audit(1787710226.291:63): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2012" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  242.793974][ T4187] XFS (loop1): Unmounting Filesystem
[  242.916145][ T9505] set_capacity_and_notify: 3 callbacks suppressed
[  242.916163][ T9505] loop3: detected capacity change from 0 to 32768
[  243.112950][ T9505] XFS (loop3): Mounting V5 Filesystem
[  243.208677][ T5270] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  243.289725][ T9505] XFS (loop3): Ending clean mount
[  243.308222][ T9527] loop0: detected capacity change from 0 to 8192
[  243.361176][ T9505] XFS (loop3): Quotacheck needed: Please wait.
[  243.405189][ T9527] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  243.439379][ T9527] REISERFS (device loop0): using ordered data mode
[  243.446038][ T9527] reiserfs: using flush barriers
[  243.446730][ T9505] XFS (loop3): Quotacheck: Done.
[  243.458673][ T9527] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  243.475365][ T9527] REISERFS (device loop0): checking transaction log (loop0)
[  243.605570][ T5270] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.616918][ T4237] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  243.647469][ T5270] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  243.681252][ T9527] REISERFS (device loop0): Using tea hash to sort names
[  243.719457][ T9527] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  243.768493][ T9527] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  243.797012][ T4200] XFS (loop3): Unmounting Filesystem
[  243.933611][ T5270] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  243.953655][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  243.982159][ T5270] usb 5-1: Product: syz
[  243.987473][ T9549] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0
[  243.998945][ T5270] usb 5-1: Manufacturer: syz
[  244.031546][ T5270] usb 5-1: SerialNumber: syz
[  244.050334][ T4237] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  244.060524][ T4237] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  244.084369][ T4237] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  244.094489][ T4237] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  244.105858][ T4237] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  244.270817][ T4237] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  244.300563][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  244.320810][ T4237] usb 3-1: Product: syz
[  244.328852][ T4237] usb 3-1: Manufacturer: syz
[  244.784492][ T9570] loop0: detected capacity change from 0 to 256
[  244.794124][ T9552] loop1: detected capacity change from 0 to 32768
[  244.871074][ T9570] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d)
[  244.927461][ T9552] XFS (loop1): Mounting V5 Filesystem
[  245.010304][ T9552] XFS (loop1): Ending clean mount
[  245.087054][ T9585] loop3: detected capacity change from 0 to 256
[  245.105208][ T9552] XFS (loop1): Quotacheck needed: Please wait.
[  245.180975][ T9552] XFS (loop1): Quotacheck: Done.
[  245.202108][ T9588] loop0: detected capacity change from 0 to 2048
[  245.250165][ T4187] XFS (loop1): Unmounting Filesystem
[  245.279799][ T9589] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.364612][ T9591] loop3: detected capacity change from 0 to 512
[  245.464555][ T9591] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  245.728635][ T9599] loop0: detected capacity change from 0 to 4096
[  245.797689][ T9599] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  245.822202][ T9599] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  245.863399][ T9599] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  245.907543][ T5270] usb 5-1: USB disconnect, device number 15
[  245.918722][ T4340] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  245.919599][ T9599] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  245.958709][ T9599] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  246.043187][ T9599] ntfs: volume version 3.1.
[  246.069374][ T9599] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  246.098409][ T9599] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  246.119808][ T9599] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  246.173040][ T9599] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  246.401661][ T4333] usb 3-1: USB disconnect, device number 15
[  246.458605][ T4340] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  246.477962][ T4340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.497410][ T4340] usb 2-1: Product: syz
[  246.512692][ T4340] usb 2-1: Manufacturer: syz
[  246.517352][ T4340] usb 2-1: SerialNumber: syz
[  247.283576][ T9647] loop3: detected capacity change from 0 to 4096
[  247.395615][ T9647] EXT4-fs (loop3): cluster size (1024) smaller than block size (4096)
[  247.594593][ T9648] loop0: detected capacity change from 0 to 32768
[  247.620896][ T9648] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2083 (9648)
[  247.650052][ T9648] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  247.665726][ T9648] BTRFS info (device loop0): using free space tree
[  247.673552][ T9648] BTRFS info (device loop0): has skinny extents
[  247.734461][ T9648] BTRFS info (device loop0): enabling ssd optimizations
[  247.741868][ T4340] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  247.877401][ T5270] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  248.108574][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  248.130227][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.168667][ T4340] usb 3-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00
[  248.182635][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.328761][ T5270] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  248.344393][ T5270] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.355741][ T9688] vcan0: tx address claim with dlc 0
[  248.467725][ T9692] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2096'.
[  248.478843][ T5270] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  248.497482][ T5270] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  248.516513][ T9682] loop0: detected capacity change from 0 to 32768
[  248.523256][ T5270] usb 4-1: Product: syz
[  248.527464][ T5270] usb 4-1: Manufacturer: syz
[  248.667026][ T4340] usb 2-1: USB disconnect, device number 10
[  248.877804][ T9695] loop4: detected capacity change from 0 to 32768
[  248.939156][ T9695] XFS (loop4): Mounting V5 Filesystem
[  248.984728][ T9695] XFS (loop4): Ending clean mount
[  249.013977][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  249.014019][   T26] audit: type=1800 audit(1787710232.631:64): pid=9695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2097" name="file3" dev="loop4" ino=6151 res=0 errno=0
[  249.086412][ T4186] XFS (loop4): Unmounting Filesystem
[  249.504249][ T9711] loop4: detected capacity change from 0 to 1024
[  249.540990][ T9711] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  249.781057][ T9715] loop1: detected capacity change from 0 to 8192
[  250.128358][ T9715] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  250.138418][ T9715] REISERFS (device loop1): using ordered data mode
[  250.144970][ T9715] reiserfs: using flush barriers
[  250.218804][ T9715] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  250.305257][ T9715] REISERFS (device loop1): checking transaction log (loop1)
[  250.360087][ T9715] REISERFS (device loop1): Using r5 hash to sort names
[  250.463794][ T7730] usb 3-1: USB disconnect, device number 16
[  250.617351][ T4340] usb 4-1: USB disconnect, device number 13
[  250.694346][   T26] audit: type=1400 audit(1787710234.311:65): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26262F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=9738 comm="syz.3.2115"
[  251.121621][ T9754] loop4: detected capacity change from 0 to 256
[  251.184315][ T9754] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  251.254066][ T9726] loop0: detected capacity change from 0 to 40427
[  251.343994][ T9726] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64)
[  251.361361][ T9726] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  251.389876][ T9726] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff
[  251.422124][ T9726] F2FS-fs (loop0): invalid crc value
[  251.465936][ T9726] F2FS-fs (loop0): Found nat_bits in checkpoint
[  251.503749][ T1107] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  251.522043][ T9777] loop5: detected capacity change from 0 to 6
[  251.583462][ T9780] loop2: detected capacity change from 0 to 512
[  251.599889][ T9777] Dev loop5: unable to read RDB block 6
[  251.620514][ T9777]  loop5: AHDI p1 p2
[  251.627411][ T9777] loop5: partition table partially beyond EOD, truncated
[  251.640047][ T9780] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  251.660164][ T9726] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  251.667291][ T9726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  251.695063][ T9777] loop5: p1 start 1702059890 is beyond EOD, truncated
[  251.716603][ T9780] EXT4-fs (loop2): orphan cleanup on readonly fs
[  251.737083][ T9780] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.2132: Block bitmap for bg 0 marked uninitialized
[  251.782833][ T9780] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  251.824121][ T9780] EXT4-fs (loop2): 1 orphan inode deleted
[  251.842322][ T9780] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  251.918631][ T1107] usb 2-1: config 0 interface 0 altsetting 22 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  251.971383][ T1107] usb 2-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  251.981426][ T9780] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  252.030572][ T1107] usb 2-1: config 0 interface 0 has no altsetting 0
[  252.057306][ T1107] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[  252.096816][ T9780] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none.
[  252.098878][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.126813][ T9780] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.2132: Block bitmap for bg 0 marked uninitialized
[  252.151576][ T4185] attempt to access beyond end of device
[  252.151576][ T4185] loop0: rw=2049, want=45112, limit=40427
[  252.244681][ T9780] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.2132: Block bitmap for bg 0 marked uninitialized
[  252.326594][ T9780] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.2132: Block bitmap for bg 0 marked uninitialized
[  252.431567][ T9793] loop4: detected capacity change from 0 to 136
[  252.439724][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'.
[  252.476303][ T9795] netlink: 'syz.3.2137': attribute type 25 has an invalid length.
[  252.513309][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'.
[  252.642039][ T9800] pimreg1: tun_chr_ioctl cmd 35108
[  252.923582][ T9802] loop3: detected capacity change from 0 to 4096
[  253.048565][ T9802] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  253.098579][ T9802] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  253.121725][ T9802] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  253.143541][ T9802] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  253.181753][ T9802] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  253.225341][ T9802] ntfs: volume version 3.1.
[  253.236813][ T9802] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  253.276124][ T9802] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  253.307112][ T9802] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  253.491748][ T9806] XFS (loop4): Mounting V5 Filesystem
[  253.622665][ T9806] XFS (loop4): Ending clean mount
[  253.629260][  T154] JFS: metapage_get_blocks failed
[  253.667596][  T276] blkno = 5002c, nblocks = 4
[  253.673323][  T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  253.673323][  T276] 
[  253.684905][ T9808] JFS: metapage_get_blocks failed
[  253.691872][ T1214] JFS: metapage_get_blocks failed
[  253.701327][ T4186] XFS (loop4): Unmounting Filesystem
[  253.750795][  T276] ERROR: (device loop2): remounting filesystem as read-only
[  254.028623][ T4188] JFS: metapage_get_blocks failed
[  254.154052][ T5315] usb 2-1: USB disconnect, device number 11
[  254.173378][ T9828] set_capacity_and_notify: 2 callbacks suppressed
[  254.173410][ T9828] loop3: detected capacity change from 0 to 40427
[  254.251883][ T9828] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288)
[  254.299031][ T9828] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288)
[  254.326938][ T9828] F2FS-fs (loop3): invalid crc value
[  254.353745][ T9828] F2FS-fs (loop3): invalid crc value
[  254.398363][ T9828] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  254.493775][ T9846] device veth0 entered promiscuous mode
[  254.509141][ T9843] device veth0 left promiscuous mode
[  254.575467][ T9848] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  254.916040][ T9859] loop4: detected capacity change from 0 to 4096
[  254.998258][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  254.998272][   T26] audit: type=1400 audit(1787710238.611:66): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9865 comm="syz.2.2166"
[  255.118871][ T9859] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  255.134700][ T9842] loop1: detected capacity change from 0 to 32768
[  255.258761][ T9842] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.2155 (9842)
[  255.325238][ T9842] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  255.357529][ T9842] BTRFS info (device loop1): using free space tree
[  255.399023][ T9842] BTRFS info (device loop1): has skinny extents
[  255.532525][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.654664][ T9894] loop0: detected capacity change from 0 to 256
[  255.752565][ T9894] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  255.838537][ T5315] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  255.906357][ T9872] loop2: detected capacity change from 0 to 32768
[  255.954974][ T9842] BTRFS info (device loop1): enabling ssd optimizations
[  256.244247][ T5315] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  256.264174][ T5315] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  256.309592][ T5315] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  256.452182][ T5315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  256.468438][ T5315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  256.476483][ T5315] usb 5-1: SerialNumber: syz
[  256.891890][ T9931] loop3: detected capacity change from 0 to 1024
[  256.947729][ T9933] loop0: detected capacity change from 0 to 64
[  257.590321][ T9946] netlink: 'syz.3.2193': attribute type 11 has an invalid length.
[  257.649907][ T9946] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.2193'.
[  257.711690][ T9949] loop2: detected capacity change from 0 to 256
[  257.772441][ T9953] loop3: detected capacity change from 0 to 128
[  257.888036][ T9953] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  257.966959][   T26] audit: type=1800 audit(1787710241.581:67): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2196" name="file1" dev="loop3" ino=94 res=0 errno=0
[  258.052280][   T26] audit: type=1800 audit(1787710241.601:68): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2196" name="file1" dev="loop3" ino=94 res=0 errno=0
[  258.454716][ T9951] loop0: detected capacity change from 0 to 32768
[  258.533050][ T5318] usb 5-1: USB disconnect, device number 16
[  259.305393][ T9998] loop0: detected capacity change from 0 to 2048
[  259.488722][ T9998] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  259.527671][T10002] loop1: detected capacity change from 0 to 4096
[  259.555724][T10002] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  259.624983][ T9998] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  259.649414][ T9975] loop3: detected capacity change from 0 to 65536
[  259.676119][ T9975] XFS: ikeep mount option is deprecated.
[  259.749483][ T9998] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  259.807142][ T9975] XFS (loop3): Mounting V5 Filesystem
[  259.847110][ T9998] EXT4-fs (loop0): This should not happen!! Data will be lost
[  259.847110][ T9998] 
[  259.905607][ T9975] XFS (loop3): Ending clean mount
[  259.929834][ T9998] EXT4-fs (loop0): Total free blocks count 0
[  259.935962][ T9998] EXT4-fs (loop0): Free/Dirty block details
[  259.950998][ T9998] EXT4-fs (loop0): free_blocks=2415919504
[  259.957025][ T9998] EXT4-fs (loop0): dirty_blocks=32
[  259.963129][ T9998] EXT4-fs (loop0): Block reservation details
[  259.970006][ T9998] EXT4-fs (loop0): i_reserved_data_blocks=2
[  259.977833][T10014] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 3 with error 28
[  259.990570][T10014] EXT4-fs (loop0): This should not happen!! Data will be lost
[  259.990570][T10014] 
[  260.025130][ T5314] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 
[  260.047437][ T5314] XFS (loop3): Unmount and run xfs_repair
[  260.055814][ T5314] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  260.064176][ T5314] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  260.094389][ T5314] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[  260.122728][ T5314] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  260.182405][ T5314] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  260.207284][ T5314] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  260.227912][ T5314] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[  260.233534][T10020] loop2: detected capacity change from 0 to 2048
[  260.247995][ T5314] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  260.258064][ T5314] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  260.311385][ T9975] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74
[  260.324339][T10020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.333888][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'.
[  260.410568][ T9996] loop4: detected capacity change from 0 to 32768
[  260.546045][ T9996] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  260.638048][ T4200] XFS (loop3): Unmounting Filesystem
[  260.799040][T10041] bond0: no command found in slaves file - use +ifname or -ifname
[  260.886428][ T9996] syz.4.2212 (9996) used greatest stack depth: 17936 bytes left
[  260.896503][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2233'.
[  260.931980][T10043] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready
[  261.340823][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  261.504811][T10049] loop1: detected capacity change from 0 to 4096
[  261.663009][T10049] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  261.729984][T10058] loop2: detected capacity change from 0 to 512
[  261.817877][T10058] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  261.979210][T10076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2247'.
[  262.005386][   T26] audit: type=1400 audit(1787710245.621:69): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=10077 comm="syz.1.2244"
[  262.897819][T10100] loop1: detected capacity change from 0 to 512
[  263.130751][T10104] loop0: detected capacity change from 0 to 1024
[  263.146577][T10087] loop3: detected capacity change from 0 to 40427
[  263.225344][T10087] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  263.235199][T10087] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  263.243564][T10104] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  263.262581][T10095] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.2255 (10095)
[  263.289439][T10087] F2FS-fs (loop3): invalid crc value
[  263.331576][T10087] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  263.493970][T10095] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  263.515246][T10095] BTRFS info (device loop2): using free space tree
[  263.529916][T10095] BTRFS info (device loop2): has skinny extents
[  263.629293][T10087] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  263.665720][T10087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  263.789943][   T26] audit: type=1800 audit(1787710247.411:70): pid=10087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2253" name="file0" dev="loop3" ino=10 res=0 errno=0
[  263.818904][T10095] BTRFS info (device loop2): enabling ssd optimizations
[  263.858933][T10143] device lo left promiscuous mode
[  263.879220][T10143] device bond0 left promiscuous mode
[  263.896879][T10143] device dummy0 left promiscuous mode
[  263.908743][T10143] device eql left promiscuous mode
[  263.938992][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  263.971403][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  264.010255][T10143] device ifb0 left promiscuous mode
[  264.030950][T10143] device ifb1 left promiscuous mode
[  264.034757][ T4200] attempt to access beyond end of device
[  264.034757][ T4200] loop3: rw=2049, want=45104, limit=40427
[  264.052435][T10143] device eth0 left promiscuous mode
[  264.084138][T10143] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check.
[  264.420453][T10138] set_capacity_and_notify: 1 callbacks suppressed
[  264.420469][T10138] loop4: detected capacity change from 0 to 32768
[  264.487808][ T4177] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop2 scanned by udevd (4177)
[  264.693453][T10138] XFS (loop4): Mounting V5 Filesystem
[  264.748738][ T1107] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  264.860065][T10138] XFS (loop4): Ending clean mount
[  264.943706][T10138] XFS (loop4): Quotacheck needed: Please wait.
[  264.991491][T10180] program syz.3.2280 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.048659][ T1107] usb 2-1: Using ep0 maxpacket: 8
[  265.159454][T10138] XFS (loop4): Quotacheck: Done.
[  265.199782][ T1107] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  265.224079][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.267543][ T4186] XFS (loop4): Unmounting Filesystem
[  265.345914][T10188] loop2: detected capacity change from 0 to 256
[  265.679469][T10203] loop0: detected capacity change from 0 to 512
[  265.735732][T10203] EXT4-fs (loop0): Ignoring removed bh option
[  265.790266][T10203] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  265.831518][T10203] EXT4-fs (loop0): 1 truncate cleaned up
[  265.831545][T10203] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none.
[  265.878632][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2295'.
[  265.893920][   T26] audit: type=1800 audit(1787710249.511:71): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2291" name="file0" dev="loop0" ino=13 res=0 errno=0
[  266.075159][T10219] loop2: detected capacity change from 0 to 1024
[  266.705480][T10252] loop0: detected capacity change from 0 to 256
[  266.834412][T10252] FAT-fs (loop0): Directory bread(block 64) failed
[  266.848618][T10252] FAT-fs (loop0): Directory bread(block 65) failed
[  266.866375][T10252] FAT-fs (loop0): Directory bread(block 66) failed
[  266.909208][T10252] FAT-fs (loop0): Directory bread(block 67) failed
[  266.928683][T10252] FAT-fs (loop0): Directory bread(block 68) failed
[  266.942155][T10252] FAT-fs (loop0): Directory bread(block 69) failed
[  266.982285][T10252] FAT-fs (loop0): Directory bread(block 70) failed
[  267.012078][T10252] FAT-fs (loop0): Directory bread(block 71) failed
[  267.018935][T10252] FAT-fs (loop0): Directory bread(block 72) failed
[  267.066349][T10252] FAT-fs (loop0): Directory bread(block 73) failed
[  267.499564][ T5318] usb 2-1: USB disconnect, device number 12
[  267.640478][T10286] loop1: detected capacity change from 0 to 4096
[  267.849209][T10288] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.033631][T10284] loop3: detected capacity change from 0 to 32768
[  268.101051][T10284] XFS (loop3): Mounting V5 Filesystem
[  268.138827][T10282] loop4: detected capacity change from 0 to 32768
[  268.274405][T10284] XFS (loop3): Ending clean mount
[  268.373319][T10309] loop0: detected capacity change from 0 to 512
[  268.413111][ T4200] XFS (loop3): Unmounting Filesystem
[  268.476391][T10309] EXT4-fs (loop0): Test dummy encryption mode enabled
[  268.531688][T10309] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  268.589295][T10309] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  268.596978][T10309] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=errors=continue,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  269.018570][ T1683] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  269.378733][ T1683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  269.399147][ T1683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  269.454044][ T1683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  269.476380][ T1683] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  269.528413][ T1683] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  269.540660][T10345] loop4: detected capacity change from 0 to 2048
[  269.558247][ T1683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.626016][T10345] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  269.690521][T10345] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  270.004743][T10342] loop0: detected capacity change from 0 to 32768
[  270.136953][T10342] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  270.235129][T10354] loop4: detected capacity change from 0 to 4096
[  270.261537][T10354] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  270.412247][T10363] loop3: detected capacity change from 0 to 512
[  270.452456][T10364] input: syz1 as /devices/virtual/input/input14
[  270.474621][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[  270.582945][T10363] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  270.606363][T10363] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  270.837849][T10377] loop4: detected capacity change from 0 to 512
[  271.042732][T10377] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  271.192388][T10377] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.324816][   T26] audit: type=1800 audit(1787710254.941:72): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2364" name="file1" dev="loop4" ino=15 res=0 errno=0
[  271.414122][   T26] audit: type=1800 audit(1787710254.971:73): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2364" name="file2" dev="loop4" ino=16 res=0 errno=0
[  271.743369][ T4343] usb 3-1: USB disconnect, device number 17
[  271.944128][T10401] loop2: detected capacity change from 0 to 4096
[  272.068414][T10385] loop0: detected capacity change from 0 to 32768
[  272.199221][T10413] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  272.245746][T10385] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  272.286212][T10382] loop3: detected capacity change from 0 to 32768
[  272.345270][T10385] (syz.0.2367,10385,0):ocfs2_double_lock:1188 ERROR: status = -2
[  272.405704][T10385] (syz.0.2367,10385,0):ocfs2_rename:1297 ERROR: status = -2
[  272.428098][T10385] (syz.0.2367,10385,0):ocfs2_rename:1687 ERROR: status = -2
[  272.492777][T10417] loop1: detected capacity change from 0 to 512
[  272.569126][ T4343] Bluetooth: hci4: command 0x0405 tx timeout
[  272.583584][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[  272.606484][T10382] XFS (loop3): Mounting V5 Filesystem
[  272.730900][T10417] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  272.798506][T10417] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.876484][T10382] XFS (loop3): Ending clean mount
[  272.902219][   T26] audit: type=1800 audit(1787710256.521:74): pid=10417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2382" name="file1" dev="loop1" ino=15 res=0 errno=0
[  272.929756][T10382] XFS (loop3): Quotacheck needed: Please wait.
[  273.014835][   T26] audit: type=1800 audit(1787710256.571:75): pid=10417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2382" name="file2" dev="loop1" ino=16 res=0 errno=0
[  273.098040][T10382] XFS (loop3): Quotacheck: Done.
[  273.115148][T10440] loop2: detected capacity change from 0 to 512
[  273.229805][T10440] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  273.238139][T10440] System zones: 0-2, 18-18, 34-35
[  273.288236][T10440] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  273.300711][T10440] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.360677][T10449] bond0: option ad_select: unable to set because the bond device is up
[  273.432367][ T4200] XFS (loop3): Unmounting Filesystem
[  274.140786][T10475] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2403'.
[  274.282469][   T26] audit: type=1326 audit(1787710257.901:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.1.2407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39f99690d9 code=0x0
[  274.411807][T10484] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,dioread_nolock,resgid=0x0000000000000000,nombcache,quota,nouid32,,errors=continue. Quota mode: writeback.
[  274.443368][T10484] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.494474][T10487] UDF-fs: error (device loop1): udf_read_tagged: block 97: CRC length 511 exceeds block size
[  274.523462][T10487] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2)
[  274.553888][T10501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2411'.
[  275.106450][T10504] set_capacity_and_notify: 3 callbacks suppressed
[  275.106463][T10504] loop3: detected capacity change from 0 to 32768
[  275.168442][ T1107] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  275.237724][T10504] XFS (loop3): Mounting V5 Filesystem
[  275.267333][T10526] netlink: 'syz.0.2420': attribute type 8 has an invalid length.
[  275.303786][T10504] XFS (loop3): Ending clean mount
[  275.507215][ T4200] XFS (loop3): Unmounting Filesystem
[  275.562025][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.574130][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  275.657113][T10537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2425'.
[  275.678639][ T1107] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  275.696335][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  275.728362][ T1107] usb 5-1: SerialNumber: syz
[  275.797853][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'.
[  275.832718][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'.
[  275.854721][T10541] netlink: 'syz.2.2427': attribute type 11 has an invalid length.
[  275.873293][T10541] netlink: 'syz.2.2427': attribute type 13 has an invalid length.
[  276.187628][T10553] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  276.742562][T10584] program syz.0.2446 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  276.743602][T10583] loop1: detected capacity change from 0 to 512
[  276.811464][T10580] netdevsim netdevsim14 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.856633][T10583] EXT4-fs (loop1): Ignoring removed nobh option
[  276.966177][T10583] EXT4-fs warning (device loop1): ext4_xattr_inode_get:492: inode #11: comm syz.1.2445: ea_inode file size=0 entry size=6
[  277.009821][T10590] rdma_rxe: ignoring netdev event = 26 for syz_tun
[  277.055259][T10590] rdma_rxe: ignoring netdev event = 21 for syz_tun
[  277.063867][T10583] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.2445: iget: bad extra_isize 90 (inode size 256)
[  277.089747][T10583] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2445: error while reading EA inode 11 err=-117
[  277.130107][T10583] EXT4-fs (loop1): 1 orphan inode deleted
[  277.135907][T10583] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,mb_optimize_scan=0x0000000000000000,debug_want_extra_isize=0x000000000000005a,grpquota,delalloc,nolazytime,nobh,,errors=continue. Quota mode: writeback.
[  277.914518][ T5314] usb 5-1: USB disconnect, device number 17
[  277.924926][T10607] netlink: 'syz.1.2455': attribute type 39 has an invalid length.
[  278.541603][T10619] loop3: detected capacity change from 0 to 1024
[  278.607654][T10600] loop0: detected capacity change from 0 to 32768
[  278.619635][   T26] audit: type=1400 audit(1787710262.241:77): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=10620 comm="syz.2.2462" name="p" offset=92
[  278.620249][ T5314] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  278.780382][T10625] loop2: detected capacity change from 0 to 512
[  278.909604][T10625] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  278.945184][T10600] XFS (loop0): Mounting V5 Filesystem
[  279.028186][ T5314] usb 5-1: Using ep0 maxpacket: 32
[  279.199406][T10625] Invalid ELF header len 10
[  279.217318][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.244454][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.289495][ T5314] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  279.307872][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.811116][T10646] loop2: detected capacity change from 0 to 256
[  280.199733][T10644] loop1: detected capacity change from 0 to 32768
[  280.274505][T10646] exfat: Deprecated parameter 'utf8'
[  280.288470][T10646] exfat: Deprecated parameter 'namecase'
[  280.327790][T10654] loop3: detected capacity change from 0 to 256
[  280.650710][T10646] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  281.137396][ T1683] usb 5-1: USB disconnect, device number 18
[  281.233589][T10656] loop2: detected capacity change from 0 to 4096
[  281.343753][T10654] FAT-fs (loop3): Directory bread(block 64) failed
[  281.376010][T10654] FAT-fs (loop3): Directory bread(block 65) failed
[  281.382724][T10654] FAT-fs (loop3): Directory bread(block 66) failed
[  281.426854][T10654] FAT-fs (loop3): Directory bread(block 67) failed
[  281.436858][T10661] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  281.445830][T10654] FAT-fs (loop3): Directory bread(block 68) failed
[  281.474365][T10654] FAT-fs (loop3): Directory bread(block 69) failed
[  281.568425][T10654] FAT-fs (loop3): Directory bread(block 70) failed
[  281.575037][T10654] FAT-fs (loop3): Directory bread(block 71) failed
[  281.626566][T10654] FAT-fs (loop3): Directory bread(block 72) failed
[  281.666588][T10654] FAT-fs (loop3): Directory bread(block 73) failed
[  281.873747][T10600] XFS (loop0): Ending clean mount
[  282.016896][T10600] XFS (loop0): Quotacheck needed: Please wait.
[  282.178318][T10673] loop4: detected capacity change from 0 to 4096
[  282.362342][T10683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2487'.
[  282.386842][T10600] XFS (loop0): Quotacheck: Done.
[  282.571702][ T4185] XFS (loop0): Unmounting Filesystem
[  282.644054][T10673] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  282.833064][   T26] audit: type=1800 audit(2000000003.850:78): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2482" name="file1" dev="loop4" ino=15 res=0 errno=0
[  283.026659][T10672] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.2482: corrupted inode contents
[  283.152581][T10672] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.2482: mark_inode_dirty error
[  283.330954][T10700] loop2: detected capacity change from 0 to 4096
[  283.344394][T10702] loop1: detected capacity change from 0 to 256
[  283.384801][T10672] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.2482: corrupted inode contents
[  283.463210][T10700] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  283.492284][T10672] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.2482: mark_inode_dirty error
[  283.578332][T10672] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.2482: corrupted inode contents
[  283.646923][T10672] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.2482: mark_inode_dirty error
[  283.696829][T10672] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.2482: corrupted inode contents
[  283.797518][T10672] EXT4-fs error (device loop4): ext4_truncate:4286: inode #15: comm syz.4.2482: mark_inode_dirty error
[  283.895739][T10672] EXT4-fs error (device loop4): ext4_evict_inode:295: comm syz.4.2482: couldn't truncate inode 15 (err -117)
[  283.973125][T10702] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  283.993053][T10696] loop3: detected capacity change from 0 to 32768
[  284.061515][T10702] exFAT-fs (loop1): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 517, unilen : 257 > 255
[  284.935142][T10722] loop4: detected capacity change from 0 to 4096
[  285.516622][T10744] loop2: detected capacity change from 0 to 4096
[  285.648523][T10744] NILFS (loop2): invalid segment: Checksum error in segment payload
[  285.668921][T10744] NILFS (loop2): trying rollback from an earlier position
[  285.726466][T10753] loop1: detected capacity change from 0 to 512
[  285.877803][T10722] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  286.003999][T10744] NILFS (loop2): recovery complete
[  286.056380][T10759] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  286.646953][T10772] loop3: detected capacity change from 0 to 4096
[  287.537548][T10753] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[  287.585824][T10753] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.658092][ T7730] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  287.675487][T10782] loop4: detected capacity change from 0 to 131072
[  287.795689][T10782] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  287.809156][T10782] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  287.895954][T10782] F2FS-fs (loop4): invalid crc value
[  288.033666][ T7730] usb 3-1: Using ep0 maxpacket: 8
[  288.064165][T10782] F2FS-fs (loop4): Found nat_bits in checkpoint
[  288.210274][T10782] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  288.217392][T10782] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  288.314343][ T7730] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  288.591086][ T7730] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  288.621325][ T7730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.648646][ T7730] usb 3-1: Product: syz
[  288.652970][ T7730] usb 3-1: Manufacturer: syz
[  288.657592][ T7730] usb 3-1: SerialNumber: syz
[  288.732763][T10784] loop0: detected capacity change from 0 to 32768
[  289.410561][T10772] ntfs3: loop3: failed to convert "0000" to iso8859-1
[  289.419333][T10784] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  289.487007][T10772] ntfs3: loop3: failed to convert name for inode 1e.
[  289.576396][T10784] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 4294901792
[  289.594591][ T4343] usb 3-1: USB disconnect, device number 18
[  289.662425][T10784] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  289.697037][T10784] OCFS2: File system is now read-only.
[  289.749205][T10784] (syz.0.2530,10784,0):ocfs2_search_chain:1783 ERROR: status = -30
[  289.758209][T10784] (syz.0.2530,10784,0):ocfs2_search_chain:1893 ERROR: status = -30
[  289.905602][T10784] (syz.0.2530,10784,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  289.971122][T10784] (syz.0.2530,10784,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  290.037721][T10811] openvswitch: netlink: Actions may not be safe on all matching packets
[  290.072930][T10784] (syz.0.2530,10784,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  290.156751][T10784] (syz.0.2530,10784,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  290.204130][T10784] (syz.0.2530,10784,0):ocfs2_block_group_alloc_contig:455 ERROR: status = -30
[  290.245770][T10816] loop4: detected capacity change from 0 to 512
[  290.269451][T10784] (syz.0.2530,10784,0):ocfs2_block_group_alloc:727 ERROR: status = -30
[  290.277790][T10784] (syz.0.2530,10784,0):ocfs2_block_group_alloc:780 ERROR: status = -30
[  290.344727][T10784] (syz.0.2530,10784,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30
[  290.373272][T10784] (syz.0.2530,10784,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30
[  290.399294][T10784] (syz.0.2530,10784,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30
[  290.414772][T10784] (syz.0.2530,10784,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30
[  290.438671][T10784] (syz.0.2530,10784,0):ocfs2_expand_inline_dir:2840 ERROR: status = -30
[  290.466249][T10784] (syz.0.2530,10784,0):ocfs2_extend_dir:3204 ERROR: status = -30
[  290.493465][T10784] (syz.0.2530,10784,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30
[  290.525533][T10816] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  290.534737][T10784] (syz.0.2530,10784,0):ocfs2_mknod:298 ERROR: status = -30
[  290.554667][T10784] (syz.0.2530,10784,0):ocfs2_mknod:502 ERROR: status = -30
[  290.610526][T10784] (syz.0.2530,10784,0):ocfs2_mkdir:659 ERROR: status = -30
[  290.863311][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[  291.379496][T10832] program syz.4.2550 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  291.446576][T10818] loop2: detected capacity change from 0 to 32768
[  291.547039][T10835] bcache: register_bcache() error : failed to open device
[  292.027334][   T26] audit: type=1400 audit(2000000013.040:79): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=10844 comm="syz.0.2546" name="p" offset=92
[  292.342034][T10829] loop3: detected capacity change from 0 to 32768
[  292.495999][T10857] netlink: 6856 bytes leftover after parsing attributes in process `syz.4.2561'.
[  293.267953][T10829] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  293.354558][ T4343] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  293.493360][   T26] audit: type=1800 audit(2000000014.510:80): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2549" name="file1" dev="loop3" ino=17059 res=0 errno=0
[  293.600217][T10851] loop0: detected capacity change from 0 to 32768
[  293.638954][T10883] kvm [10882]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x4
[  293.757365][ T4343] usb 5-1: Using ep0 maxpacket: 32
[  293.965773][ T4343] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  293.975841][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.214597][ T4200] ocfs2: Unmounting device (7,3) on (node local)
[  294.259062][   T26] audit: type=1800 audit(2000000015.280:81): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2558" name="file1" dev="loop0" ino=4 res=0 errno=0
[  294.292618][T10851] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong
[  294.292618][T10851] 
[  294.331592][T10851] ERROR: (device loop0): remounting filesystem as read-only
[  294.369855][T10851] ialloc: diAlloc returned -5!
[  294.376989][T10891] ERROR: (device loop0): diWrite: ixpxd invalid
[  294.376989][T10891] 
[  294.440727][T10891] ERROR: (device loop0): txCommit: 
[  294.440727][T10891] 
[  295.339179][T10914] loop3: detected capacity change from 0 to 512
[  295.534935][T10914] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  295.563434][T10914] System zones: 1-12
[  295.601514][T10914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.2573: missing EA_INODE flag
[  295.662775][T10914] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2573: error while reading EA inode 12 err=-117
[  295.740628][T10914] EXT4-fs (loop3): 1 orphan inode deleted
[  295.770432][T10914] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  295.799598][   T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  296.033278][T10924] binder: 10923:10924 ioctl 400c620e 200000000040 returned -22
[  296.076666][ T5318] usb 5-1: USB disconnect, device number 19
[  296.255531][T10926] loop4: detected capacity change from 0 to 4096
[  296.382402][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  296.398349][   T23] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.471611][   T23] usb 2-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00
[  296.534755][T10926] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  296.568333][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.661831][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'.
[  297.534496][T10965] [U] ^H^C
[  297.762882][T10974] bridge0: port 2(bridge_slave_1) entered listening state
[  297.851402][T10974] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.071326][T10982] loop3: detected capacity change from 0 to 1024
[  298.268578][ T7730] usb 2-1: USB disconnect, device number 13
[  298.386411][T10982] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.2613: lblock 2 mapped to illegal pblock 2 (length 1)
[  298.446715][T10982] EXT4-fs (loop3): Remounting filesystem read-only
[  298.461052][T10982] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  298.518434][T10982] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.2613: lblock 0 mapped to illegal pblock 48 (length 1)
[  298.616725][T10982] EXT4-fs (loop3): Remounting filesystem read-only
[  298.635792][T10997] loop2: detected capacity change from 0 to 1024
[  298.678918][T10982] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  298.709050][T10999] loop1: detected capacity change from 0 to 1024
[  298.737169][T10982] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.2613: Failed to acquire dquot type 0
[  298.784456][T10982] EXT4-fs (loop3): Remounting filesystem read-only
[  298.813363][T10982] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  298.884109][T10982] EXT4-fs (loop3): Remounting filesystem read-only
[  298.894261][T10982] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.2613: mark_inode_dirty error
[  298.963139][T10982] EXT4-fs (loop3): Remounting filesystem read-only
[  298.971359][T10982] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  299.000029][T10997] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  299.018437][T10982] EXT4-fs (loop3): 1 orphan inode deleted
[  299.050796][T10982] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,nojournal_checksum,errors=remount-ro,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,. Quota mode: none.
[  299.095406][ T1155] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  299.176535][ T1155] EXT4-fs (loop3): Remounting filesystem read-only
[  299.198335][ T1155] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  299.257924][ T1155] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0
[  299.325020][ T1155] EXT4-fs (loop3): Remounting filesystem read-only
[  299.572374][ T4200] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  299.620067][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  299.633268][ T4200] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  299.663954][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  299.670681][ T4200] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  299.715551][ T4200] EXT4-fs (loop3): Remounting filesystem read-only
[  299.758426][T11007] loop2: detected capacity change from 0 to 512
[  300.085864][T11007] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.2622: missing EA_INODE flag
[  300.150856][T11007] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2622: error while reading EA inode 12 err=-117
[  300.193477][T11007] EXT4-fs (loop2): 1 orphan inode deleted
[  300.220240][T11007] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  300.220484][T10999] hfsplus: invalid length 1280 has been corrected to 255
[  300.785072][T11033] device bridge_slave_1 left promiscuous mode
[  300.817051][T11033] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.959346][T11033] device bridge_slave_0 left promiscuous mode
[  300.996659][T11033] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.449814][T11054] loop4: detected capacity change from 0 to 4096
[  302.181133][T11066] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  302.765361][T11062] loop2: detected capacity change from 0 to 32768
[  302.853771][T11065] Falling back ldisc for ttyS3.
[  303.004648][T11073] loop4: detected capacity change from 0 to 256
[  303.136726][T11089] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  303.234661][T11093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2652'.
[  304.416924][T11130] netlink: 'syz.2.2665': attribute type 32 has an invalid length.
[  304.668760][T11073] FAT-fs (loop4): Directory bread(block 64) failed
[  304.692789][T11073] FAT-fs (loop4): Directory bread(block 65) failed
[  304.721632][T11073] FAT-fs (loop4): Directory bread(block 66) failed
[  304.728227][T11073] FAT-fs (loop4): Directory bread(block 67) failed
[  304.774788][T11141] loop1: detected capacity change from 0 to 256
[  304.849832][T11073] FAT-fs (loop4): Directory bread(block 68) failed
[  304.878146][T11073] FAT-fs (loop4): Directory bread(block 69) failed
[  304.926910][T11073] FAT-fs (loop4): Directory bread(block 70) failed
[  304.947379][T11073] FAT-fs (loop4): Directory bread(block 71) failed
[  304.985856][T11073] FAT-fs (loop4): Directory bread(block 72) failed
[  305.028358][T11073] FAT-fs (loop4): Directory bread(block 73) failed
[  305.391017][T11158] loop2: detected capacity change from 0 to 4096
[  305.516455][T11164] loop4: detected capacity change from 0 to 128
[  305.575298][T11141] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  305.586752][T11141] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  305.629657][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2681'.
[  305.709183][T11141] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  306.112960][T11181] loop3: detected capacity change from 0 to 1024
[  306.130451][T11178] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  306.151138][T11178] platform pcspkr: uevent: failed to send synthetic uevent
[  306.229128][T11181] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.2687: lblock 2 mapped to illegal pblock 2 (length 1)
[  306.248819][T11181] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  306.256956][T11181] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.2687: lblock 0 mapped to illegal pblock 48 (length 1)
[  306.375414][T11181] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  306.391716][T11181] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.2687: Failed to acquire dquot type 0
[  306.414614][T11194] jffs2: notice: (11194) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  306.441019][T11181] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  306.463004][T11181] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.2687: mark_inode_dirty error
[  306.497597][T11181] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  306.548486][T11181] EXT4-fs (loop3): 1 orphan inode deleted
[  306.567748][T11181] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  306.590171][    C0] vkms_vblank_simulate: vblank timer overrun
[  306.616240][    T9] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  306.672166][    T9] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  306.710007][    T9] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0
[  306.842729][ T9209] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  306.870274][T11202] loop0: detected capacity change from 0 to 4096
[  306.928583][ T9209] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  306.960961][T11202] ntfs: volume version 3.1.
[  306.980704][ T9209] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0
[  307.050703][ T4200] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  307.114079][ T4200] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  307.155035][ T4200] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  307.192215][T11218] loop2: detected capacity change from 0 to 256
[  307.307165][T11222] loop3: detected capacity change from 0 to 128
[  307.377765][T11224] loop4: detected capacity change from 0 to 64
[  307.481835][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2708'.
[  307.891067][ T4343] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  307.914346][ T4343] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  308.085603][T11254] udevd[11254]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error
[  308.250158][T11264] rose0: tun_chr_ioctl cmd 1074025672
[  308.255589][T11264] rose0: ignored: set checksum enabled
[  308.577221][T11272] loop1: detected capacity change from 0 to 4096
[  308.685713][T11272] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[  308.709157][T11272] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,data_err=ignore,nodioread_nolock,quota,nombcache,journal_ioprio=0x0000000000000001,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  308.799368][T11285] loop2: detected capacity change from 0 to 1024
[  308.850825][T11285] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  309.087911][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2740'.
[  309.130567][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2740'.
[  309.699396][T11328] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  309.988502][ T5315] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  310.095722][T11314] set_capacity_and_notify: 1 callbacks suppressed
[  310.095738][T11314] loop4: detected capacity change from 0 to 32768
[  310.252218][T11314] XFS (loop4): Mounting V5 Filesystem
[  310.346266][T11314] XFS (loop4): Ending clean mount
[  310.368784][ T5315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  310.406108][ T5315] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  310.479507][ T5315] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  310.645401][T11368] loop1: detected capacity change from 0 to 8
[  310.656646][ T4186] XFS (loop4): Unmounting Filesystem
[  310.759105][ T5315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  310.769267][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.777304][ T5315] usb 3-1: Product: syz
[  310.810374][T11368] SQUASHFS error: zlib decompression failed, data probably corrupt
[  310.826824][ T5315] usb 3-1: Manufacturer: syz
[  310.841896][ T5315] usb 3-1: SerialNumber: syz
[  310.875535][T11368] SQUASHFS error: Failed to read block 0x9b: -5
[  310.896414][T11368] SQUASHFS error: Unable to read metadata cache entry [99]
[  310.970336][T11368] SQUASHFS error: Unable to read inode 0x127
[  311.091223][T11368] loop1: detected capacity change from 0 to 256
[  311.149115][T11382] 9p: Unknown uid 18446744073709551615
[  311.454429][T11389] loop3: detected capacity change from 0 to 2048
[  311.539998][T11389] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  311.618087][T11389] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  311.664766][T11389] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  311.690479][T11389] UDF-fs: Scanning with blocksize 512 failed
[  311.754669][T11389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.828742][   T26] audit: type=1800 audit(2000000032.850:82): pid=11389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2769" name="file2" dev="loop3" ino=839 res=0 errno=0
[  312.237212][T11420] loop4: detected capacity change from 0 to 4096
[  312.379591][T11426] loop1: detected capacity change from 0 to 1764
[  312.701279][ T5314] usb 3-1: USB disconnect, device number 19
[  312.866990][T11440] loop0: detected capacity change from 0 to 64
[  312.950408][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2790'.
[  313.202442][T11428] loop3: detected capacity change from 0 to 32768
[  313.321040][T11428] JBD2: Ignoring recovery information on journal
[  313.504541][T11428] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  313.591619][T11446] loop2: detected capacity change from 0 to 32768
[  313.640233][T11428] (syz.3.2784,11428,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=255, inode=0, rec_len=0, name_len=0
[  313.705114][T11446] JBD2: Ignoring recovery information on journal
[  313.745658][T11446] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  313.821295][T11446] JBD2: bad block at offset 32
[  313.863743][ T4200] ocfs2: Unmounting device (7,3) on (node local)
[  313.875243][T11467] loop1: detected capacity change from 0 to 256
[  313.924967][T11446] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  313.947139][T11467] FAT-fs (loop1): Unrecognized mount option "i0²sj#PêäJTÊ /—™s4êI‚¨’" or missing value
[  314.029194][T11467] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2802'.
[  314.128537][T11450] XFS (loop0): Mounting V5 Filesystem
[  314.267517][T11450] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  314.369757][T11450] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30
[  314.385832][T11488]  loop3: p1 p2 p4[EZD]
[  314.423815][T11488] loop3: p4 start 201326592 is beyond EOD, truncated
[  314.425151][ T4188] ocfs2: Unmounting device (7,2) on (node local)
[  314.456456][T11450] XFS (loop0): Ending clean mount
[  314.770018][T11450] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode
[  314.832537][T11450] XFS (loop0): Unmount and run xfs_repair
[  314.838934][T11450] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  314.896876][T11450] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  314.911825][T11450] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  314.965388][T11506] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  314.976440][T11450] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  314.998781][T11506] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  315.018398][T11450] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  315.027316][T11450] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  315.038202][T11450] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  315.055082][T11506] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  315.120870][T11450] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  315.128245][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  315.152039][T11511] set_capacity_and_notify: 4 callbacks suppressed
[  315.152056][T11511] loop2: detected capacity change from 0 to 1024
[  315.165245][ T4464] udevd[4464]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  315.170069][T11450] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  315.196345][T11515] loop1: detected capacity change from 0 to 128
[  315.250652][ T4185] XFS (loop0): Unmounting Filesystem
[  315.307299][T11515] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  315.378009][T11515] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  315.434539][T11515] FAT-fs (loop1): Filesystem has been set read-only
[  315.581345][ T4187] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  316.330721][T11560] loop2: detected capacity change from 0 to 4096
[  316.500778][T11560] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  316.755851][T11584] loop0: detected capacity change from 0 to 4096
[  316.826557][T11555] loop1: detected capacity change from 0 to 32768
[  316.898343][T11590] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  316.940350][T11555] XFS (loop1): Invalid device [./bus], error=-16
[  316.972713][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  316.983162][    C0] Illegal XDP return value 16128, expect packet loss!
[  317.125503][T11597] loop4: detected capacity change from 0 to 128
[  317.200637][T11597] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  317.219404][T11597] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.317144][T11603] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2855'.
[  317.351237][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'.
[  317.398404][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2855'.
[  317.495993][T11605] loop1: detected capacity change from 0 to 1024
[  317.588779][T11607] tap1: tun_chr_ioctl cmd 2147767521
[  317.712617][T11605] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,errors=remount-ro,. Quota mode: none.
[  317.769081][T11605] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.791687][T11613] loop0: detected capacity change from 0 to 22
[  317.839083][T11613] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  317.872552][T11613] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  317.892253][T11605] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.2858: lblock 0 mapped to illegal pblock 0 (length 6)
[  317.957999][T11605] EXT4-fs (loop1): Remounting filesystem read-only
[  318.247265][T11624] ieee802154 phy0 wpan0: encryption failed: -22
[  318.255472][T11626] ieee802154 phy0 wpan0: encryption failed: -22
[  318.527548][T11628] loop0: detected capacity change from 0 to 4096
[  318.606655][T11628] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  318.876432][T11640] loop2: detected capacity change from 0 to 256
[  318.898496][ T4343] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  318.992054][T11640] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  319.076303][   T26] audit: type=1800 audit(2000000040.090:83): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2867" name="file1" dev="loop3" ino=4 res=0 errno=0
[  319.150229][ T4343] usb 5-1: Using ep0 maxpacket: 32
[  319.284133][ T4343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.319467][ T4343] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.344917][ T4343] usb 5-1: config 0 interface 0 has no altsetting 0
[  319.363301][ T4343] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  319.378723][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.410026][T11632] F2FS-fs (loop1): invalid crc value
[  319.511200][T11632] F2FS-fs (loop1): Found nat_bits in checkpoint
[  319.580107][T11661] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.587262][T11661] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.635699][T11664] rnbd_client L125: Can't parse path ip:1: -22
[  319.657548][T11632] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  319.723798][T11632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  319.887293][T11632] attempt to access beyond end of device
[  319.887293][T11632] loop1: rw=2049, want=40976, limit=40427
[  320.403783][T11669] set_capacity_and_notify: 2 callbacks suppressed
[  320.403800][T11669] loop3: detected capacity change from 0 to 40427
[  320.442746][T11669] F2FS-fs (loop3): invalid crc value
[  320.454365][T11689] loop0: detected capacity change from 0 to 1024
[  320.464642][T11669] F2FS-fs (loop3): Found nat_bits in checkpoint
[  320.589354][T11691] loop1: detected capacity change from 0 to 1024
[  320.625689][T11669] F2FS-fs (loop3): Start checkpoint disabled!
[  320.689126][T11669] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  320.772407][T11698] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2897'.
[  320.820854][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'.
[  320.989176][ T4275] attempt to access beyond end of device
[  320.989176][ T4275] loop3: rw=2049, want=40976, limit=40427
[  321.127392][T11712] loop1: detected capacity change from 0 to 256
[  321.305383][T11717] loop2: detected capacity change from 0 to 64
[  321.377131][T11720] netem: change failed
[  321.438663][T11717] hfs: walked past end of dir
[  321.612998][T11729] loop2: detected capacity change from 0 to 2048
[  321.644987][ T5315] usb 5-1: USB disconnect, device number 20
[  321.749502][T11729] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  321.818238][T11742] loop3: detected capacity change from 0 to 256
[  321.863892][   T26] audit: type=1800 audit(2000000042.880:84): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2920" name="recover_callbacks" dev="configfs" ino=58320 res=0 errno=0
[  321.892718][T11742] FAT-fs (loop3): Directory bread(block 1285) failed
[  321.929028][T11742] FAT-fs (loop3): Directory bread(block 1286) failed
[  321.935802][T11742] FAT-fs (loop3): Directory bread(block 1287) failed
[  321.968508][T11742] FAT-fs (loop3): Directory bread(block 1288) failed
[  321.990482][T11742] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  322.575061][T11750] loop2: detected capacity change from 0 to 32768
[  322.598016][T11777] binder: 11775:11777 ioctl c00c620f 0 returned -14
[  322.641097][   T26] audit: type=1800 audit(2000000043.660:85): pid=11750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2922" name="file1" dev="loop2" ino=4 res=0 errno=0
[  322.688545][ T4343] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  322.891979][T11790] loop3: detected capacity change from 0 to 512
[  322.940729][ T4343] usb 2-1: Using ep0 maxpacket: 16
[  322.958261][T11790] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback.
[  322.973737][T11790] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.987289][T11793] loop4: detected capacity change from 0 to 1024
[  323.029644][T11790] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[  323.058578][ T4343] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  323.066804][ T4343] usb 2-1: config 0 has no interface number 0
[  323.135079][ T4343] usb 2-1: config 0 interface 246 has no altsetting 0
[  323.151574][T11793] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[  323.168481][T11793] System zones: 0-1, 3-12
[  323.219535][T11793] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback.
[  323.295848][T11799] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  323.368602][ T4343] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27
[  323.377703][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.416815][ T4343] usb 2-1: Product: syz
[  323.421365][ T4343] usb 2-1: Manufacturer: syz
[  323.428595][ T4343] usb 2-1: SerialNumber: syz
[  323.607530][T11814] tipc: New replicast peer: 255.255.255.255
[  323.618061][T11814] tipc: Enabled bearer <udp:syz2>, priority 10
[  323.674948][T11818] netlink: 'syz.4.2951': attribute type 5 has an invalid length.
[  323.701008][T11818] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  323.710787][T11818] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  323.719596][T11818] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  323.728388][T11818] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.741214][T11818] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.750724][T11818] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.759659][T11818] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.768593][T11818] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  323.904299][T11821] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2953: invalid block
[  323.924641][T11821] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2953: invalid indirect mapped block 4294967295 (level 1)
[  323.939774][T11821] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2953: invalid indirect mapped block 4294967295 (level 1)
[  323.954887][T11821] EXT4-fs (loop3): 2 truncates cleaned up
[  323.960755][T11821] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  324.178453][ T5314] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  324.443749][ T5314] usb 5-1: Using ep0 maxpacket: 8
[  324.588578][ T5314] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  324.598936][ T5314] usb 5-1: config 0 has no interface number 0
[  324.616824][ T5314] usb 5-1: config 0 interface 1 has no altsetting 0
[  324.633128][ T1265] hfsplus: b-tree write err: -5, ino 25
[  324.640078][ T1265] hfsplus: b-tree write err: -5, ino 4
[  324.647563][ T1265] hfsplus: b-tree write err: -5, ino 2
[  324.818810][ T5314] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  324.832699][ T5314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.843374][ T5314] usb 5-1: Product: syz
[  324.847659][ T5314] usb 5-1: Manufacturer: syz
[  324.855981][ T5314] usb 5-1: SerialNumber: syz
[  325.044016][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'.
[  325.151024][ T4202] block nbd0: Receive control failed (result -32)
[  325.308955][T11879] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2978'.
[  325.325444][T11879] netem: invalid attributes len -24
[  325.363372][ T7730] usb 2-1: USB disconnect, device number 14
[  325.370234][T11879] netem: change failed
[  325.533539][T11895] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2987'.
[  325.563166][T11895] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2987'.
[  325.721951][T11902] set_capacity_and_notify: 3 callbacks suppressed
[  325.721968][T11902] loop2: detected capacity change from 0 to 512
[  325.826532][T11910] hugetlbfs: Bad value 'g' for mount option 'size'
[  325.826532][T11910] 
[  325.866627][T11902] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  325.957582][T11918] loop3: detected capacity change from 0 to 256
[  325.977364][T11902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  325.986466][T11902] System zones: 1-12
[  325.996412][T11902] EXT4-fs (loop2): 1 truncate cleaned up
[  326.002449][T11902] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,nodiscard,,errors=continue. Quota mode: none.
[  326.341282][T11928] loop1: detected capacity change from 0 to 1024
[  326.681671][T11911] loop0: detected capacity change from 0 to 32768
[  326.727113][T11937] loop2: detected capacity change from 0 to 4096
[  326.730553][T11911] xfs: Unknown parameter 'smackfstransmute'
[  326.877444][T11937] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  326.914123][   T23] usb 5-1: USB disconnect, device number 21
[  327.010144][T11943] <½
[  327.179397][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'.
[  327.362678][T11918] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 194)
[  327.406922][T11954] loop4: detected capacity change from 0 to 736
[  327.436641][T11952] loop0: detected capacity change from 0 to 4096
[  327.599619][   T26] audit: type=1800 audit(2000000048.620:86): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3008" name="file1" dev="loop0" ino=0 res=0 errno=0
[  327.819796][ T7730] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  327.956887][T11968] loop4: detected capacity change from 0 to 512
[  328.150031][T11968] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  328.184986][T11977] vxcan0: tx address claim with dest, not broadcast
[  328.198702][ T7730] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.218703][ T7730] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.228811][ T7730] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  328.239900][T11968] ext4 filesystem being mounted at /618/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.242847][ T7730] usb 3-1: config 0 interface 0 has no altsetting 0
[  328.259609][ T7730] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  328.268724][ T7730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.288376][ T4343] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  328.376977][T11979] loop0: detected capacity change from 0 to 256
[  328.436114][T11979] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  328.450447][T11979] FAT-fs (loop0): Filesystem has been set read-only
[  328.480280][T11979] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  328.495998][T11979] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  328.528390][ T4343] usb 4-1: Using ep0 maxpacket: 32
[  328.535829][   T26] audit: type=1800 audit(2000000049.550:87): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3020" name=CD dev="loop0" ino=1048740 res=0 errno=0
[  328.576084][T11982] tun0: tun_chr_ioctl cmd 1074025681
[  328.658620][ T4343] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  328.704649][ T4343] usb 4-1: config 0 has no interface number 0
[  328.864058][T11988] netlink: 'syz.0.3024': attribute type 2 has an invalid length.
[  328.879058][ T4343] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  328.888128][ T4343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.912854][ T4343] usb 4-1: Product: syz
[  328.921486][ T4343] usb 4-1: Manufacturer: syz
[  328.936439][ T4343] usb 4-1: SerialNumber: syz
[  328.998480][   T23] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  329.094808][T11993] syzkaller0: tun_chr_ioctl cmd 2147767507
[  329.169334][T11935] ODEBUG: Out of memory. ODEBUG disabled
[  329.269775][T11997] loop0: detected capacity change from 0 to 2048
[  329.309361][T11997] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  329.336115][T11997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.385494][T11997] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[  329.457194][   T23] usb 5-1: unable to get BOS descriptor or descriptor too short
[  329.558642][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  329.604813][T11999] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  329.638899][T11999] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  329.672507][T11999] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  329.696281][T11999] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  329.711121][T11999] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  329.724020][T11999] ntfs: volume version 3.1.
[  329.731082][T11999] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  329.745190][T11999] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  329.760399][T11999] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  329.858658][   T23] usb 5-1: string descriptor 0 read error: -22
[  329.868477][   T23] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  329.887880][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.018727][T11935] Set syz0 is full, maxelem 65536 reached
[  330.165581][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'.
[  330.194429][T12011] device hsr0 entered promiscuous mode
[  330.267110][T12016] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3038'.
[  330.282222][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3038'.
[  330.294634][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3038'.
[  330.308365][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3038'.
[  330.491259][ T1683] usb 3-1: USB disconnect, device number 20
[  330.597082][T12035] usbcore.quirks: string doesn't fit in 127 chars.
[  330.829201][T12046] set_capacity_and_notify: 2 callbacks suppressed
[  330.829216][T12046] loop0: detected capacity change from 0 to 1024
[  330.927808][T12046] attempt to access beyond end of device
[  330.927808][T12046] loop0: rw=0, want=5780, limit=1024
[  330.939850][T12046] Buffer I/O error on dev loop0, logical block 2889, async page read
[  330.953251][T12046] attempt to access beyond end of device
[  330.953251][T12046] loop0: rw=0, want=5780, limit=1024
[  330.968212][T12046] Buffer I/O error on dev loop0, logical block 2889, async page read
[  330.981117][T12046] attempt to access beyond end of device
[  330.981117][T12046] loop0: rw=0, want=5780, limit=1024
[  331.010808][ T4343] usb 4-1: USB disconnect, device number 14
[  331.139645][T12052] binder: 12051:12052 ioctl c0306201 0 returned -14
[  331.246746][T12059] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3056'.
[  331.369463][T12067] loop2: detected capacity change from 0 to 764
[  331.416988][T12067] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  331.612224][T12080] loop3: detected capacity change from 0 to 512
[  331.725306][T12080] EXT4-fs (loop3): 1 truncate cleaned up
[  331.736682][T12080] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  331.746298][ T5315] usb 5-1: USB disconnect, device number 22
[  331.749740][ T4343] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  331.882605][T12095] loop4: detected capacity change from 0 to 2048
[  332.087909][T12095] overlayfs: unrecognized mount option "/õ÷ÚgãÕ±+/ÍÞœ›ŸZX˜šlŒÏ´¯ÍNNÝóv[«Áê4n¾vkòúõ…Æ™çÎnÚ|{à½þ'Ž\" or missing value
[  332.308488][ T4343] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  332.317749][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.333920][ T4343] usb 2-1: Product: syz
[  332.338232][ T4343] usb 2-1: Manufacturer: syz
[  332.342995][ T4343] usb 2-1: SerialNumber: syz
[  332.505168][T12111] IPv6: addrconf: prefix option has invalid lifetime
[  332.843006][T12122] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3086'.
[  332.950956][T12124] loop3: detected capacity change from 0 to 512
[  332.994694][T12124] EXT4-fs (loop3): Test dummy encryption mode enabled
[  333.010406][T12124] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  333.040983][T12105] loop4: detected capacity change from 0 to 40427
[  333.063694][T12124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  333.085374][T12124] EXT4-fs (loop3): orphan cleanup on readonly fs
[  333.102693][T12124] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.3087: bad orphan inode 3
[  333.148226][T12105] F2FS-fs (loop4): invalid crc value
[  333.174291][T12124] EXT4-fs (loop3): Remounting filesystem read-only
[  333.214844][T12124] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none.
[  333.265676][T12124] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3087: dx entry: limit 0 != root limit 125
[  333.277822][T12124] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3087: Corrupt directory, running e2fsck is recommended
[  333.283511][T12105] F2FS-fs (loop4): Found nat_bits in checkpoint
[  333.452380][T12105] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  333.466258][T12105] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  333.495084][T12138] size and base must be multiples of 4 kiB
[  333.540643][T12138] CPU: 0 PID: 12138 Comm: syz.3.3092 Not tainted syzkaller #0
[  333.548237][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  333.558328][T12138] Call Trace:
[  333.561640][T12138]  <TASK>
[  333.564596][T12138]  dump_stack_lvl+0x188/0x250
[  333.569322][T12138]  ? show_regs_print_info+0x20/0x20
[  333.574601][T12138]  ? load_image+0x410/0x410
[  333.579126][T12138]  ? __might_fault+0xb3/0x110
[  333.583821][T12138]  mtrr_del+0x81/0xb0
[  333.587823][T12138]  mtrr_ioctl+0x998/0x1140
[  333.592254][T12138]  ? mtrr_close+0x1f0/0x1f0
[  333.596780][T12138]  ? mtrr_close+0x1f0/0x1f0
[  333.601296][T12138]  proc_reg_unlocked_ioctl+0x1cb/0x2b0
[  333.606771][T12138]  ? proc_reg_poll+0x280/0x280
[  333.611547][T12138]  __se_sys_ioctl+0xfa/0x170
[  333.616151][T12138]  do_syscall_64+0x4c/0xa0
[  333.620575][T12138]  ? clear_bhb_loop+0x30/0x80
[  333.625254][T12138]  ? clear_bhb_loop+0x30/0x80
[  333.629948][T12138]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  333.635870][T12138] RIP: 0033:0x7fcaf54ec0d9
[  333.640333][T12138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.659960][T12138] RSP: 002b:00007fcaf3744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  333.668391][T12138] RAX: ffffffffffffffda RBX: 00007fcaf5773fa0 RCX: 00007fcaf54ec0d9
[  333.676401][T12138] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003
[  333.684384][T12138] RBP: 00007fcaf5583024 R08: 0000000000000000 R09: 0000000000000000
[  333.692360][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  333.700339][T12138] R13: 00007fcaf5774038 R14: 00007fcaf5773fa0 R15: 00007fff899e4f68
[  333.708332][T12138]  </TASK>
[  333.745237][T12105] attempt to access beyond end of device
[  333.745237][T12105] loop4: rw=2049, want=40976, limit=40427
[  333.913236][T12145] sctp: [Deprecated]: syz.2.3096 (pid 12145) Use of struct sctp_assoc_value in delayed_ack socket option.
[  333.913236][T12145] Use struct sctp_sack_info instead
[  334.259072][ T5314] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  334.378448][ T4343] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  334.396370][ T1683] usb 2-1: USB disconnect, device number 15
[  334.544468][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'.
[  334.555724][T12153] netlink: 'syz.1.3099': attribute type 6 has an invalid length.
[  334.618433][ T4343] usb 5-1: Using ep0 maxpacket: 32
[  334.649157][ T5314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  334.676284][ T5314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  334.738472][ T4343] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  334.751282][ T4343] usb 5-1: config 0 has no interface number 0
[  334.761188][T12160] loop0: detected capacity change from 0 to 2048
[  334.833038][T12165] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  334.899186][ T5314] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  334.918705][ T4343] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  334.918777][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.943023][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.957004][ T5314] usb 3-1: Product: syz
[  334.966721][ T4343] usb 5-1: Product: syz
[  334.976761][ T4343] usb 5-1: Manufacturer: syz
[  334.987196][ T4343] usb 5-1: SerialNumber: syz
[  334.990835][ T5314] usb 3-1: Manufacturer: syz
[  334.996439][ T5314] usb 3-1: SerialNumber: syz
[  335.429079][T12191] loop3: detected capacity change from 0 to 256
[  335.510181][T12191] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  335.585834][T12196] loop1: detected capacity change from 0 to 2048
[  335.644043][T12196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  335.704856][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  335.704871][   T26] audit: type=1800 audit(2000000056.720:90): pid=12196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3119" name="file1" dev="loop1" ino=1367 res=0 errno=0
[  336.675082][T12244] loop0: detected capacity change from 0 to 2048
[  336.755676][T12244] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  336.767166][T12244] ext4 filesystem being mounted at /696/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.982076][ T5315] usb 3-1: USB disconnect, device number 21
[  337.055262][T12259] loop2: detected capacity change from 0 to 256
[  337.093350][T12263] bonding: no command found in bonding_masters - use +ifname or -ifname
[  337.102956][T12262] loop0: detected capacity change from 0 to 512
[  337.124330][ T5314] usb 5-1: USB disconnect, device number 23
[  337.176118][T12265] ip_tables: iptables: counters copy to user failed while replacing table
[  337.221284][T12267] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3151'.
[  337.287986][T12262] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  337.362671][T12262] ext4 filesystem being mounted at /698/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.415810][T12279] bond0: option slaves: interface +v does not exist!
[  337.780548][T12293] loop4: detected capacity change from 0 to 256
[  338.067263][T12303] loop4: detected capacity change from 0 to 512
[  338.168966][T12303] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  338.199472][T12303] EXT4-fs (loop4): inline encryption not supported
[  338.206056][T12303] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  338.262671][T12259] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 194)
[  338.302679][T12303] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  338.333308][T12303] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3164: bg 0: block 248: padding at end of block bitmap is not set
[  338.355100][T12303] Quota error (device loop4): write_blk: dquota write failed
[  338.362988][T12303] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  338.379096][T12303] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.3164: Failed to acquire dquot type 1
[  338.397375][T12303] EXT4-fs (loop4): 1 truncate cleaned up
[  338.398762][ T5314] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  338.411155][ T1107] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  338.418757][T12303] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback.
[  338.439935][T12297] loop0: detected capacity change from 0 to 32768
[  338.492366][T12309] bridge0: port 2(bridge_slave_1) entered listening state
[  338.510936][T12309] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.708529][ T5314] usb 2-1: Using ep0 maxpacket: 16
[  338.748934][ T5314] usb 2-1: too many configurations: 112, using maximum allowed: 8
[  338.818680][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  338.838440][ T1107] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  338.842781][T12320] loop4: detected capacity change from 0 to 512
[  338.859474][ T1107] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  338.876708][ T1107] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  338.886850][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.956317][T12320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  338.985473][T12320] System zones: 1-12
[  338.992344][T12320] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.3173: missing EA_INODE flag
[  339.011228][T12320] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3173: error while reading EA inode 12 err=-117
[  339.030280][T12320] EXT4-fs (loop4): 1 orphan inode deleted
[  339.036069][T12320] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  339.086829][T12320] fscrypt (loop4, inode 15): Mutually exclusive encryption flags (0x1c)
[  339.309686][T12334] loop4: detected capacity change from 0 to 4096
[  339.336680][T12332] loop2: detected capacity change from 0 to 32768
[  339.383841][T12332] XFS (loop2): Mounting V5 Filesystem
[  339.428085][T12332] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  339.438989][T12343] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  339.511727][T12332] XFS (loop2): Starting recovery (logdev: internal)
[  339.518486][   T26] audit: type=1800 audit(2000000060.520:91): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3178" name="file2" dev="loop4" ino=16 res=0 errno=0
[  339.555532][T12332] XFS (loop2): Ending recovery (logdev: internal)
[  339.654006][ T5314] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  339.663671][ T5314] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  339.674574][ T5314] usb 2-1: Product: syz
[  339.679115][ T5314] usb 2-1: Manufacturer: syz
[  339.694873][T12332] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8
[  339.707849][T12332] XFS (loop2): Unmount and run xfs_repair
[  339.743029][ T4188] XFS (loop2): Unmounting Filesystem
[  339.907756][T12347] MPTCP: kernel_bind error, err=-99
[  340.549113][T12381] tun0: tun_chr_ioctl cmd 1074025680
[  340.617777][T12389] loop2: detected capacity change from 0 to 512
[  340.742806][T12389] EXT4-fs (loop2): Ignoring removed orlov option
[  340.764191][T12389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  340.819080][T12389] EXT4-fs (loop2): 1 truncate cleaned up
[  340.851565][T12389] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[  340.965984][ T4336] usb 2-1: USB disconnect, device number 16
[  341.131548][T12410] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  341.173161][T12410] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.3210: bad orphan inode 131083
[  341.173336][ T4343] usb 4-1: USB disconnect, device number 15
[  341.200760][T12410] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  341.370256][T12412] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  341.389573][T12423] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  341.442860][T12412] NILFS (loop4): mounting fs with errors
[  341.532979][T12412] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  341.990696][T12442] set_capacity_and_notify: 2 callbacks suppressed
[  341.990711][T12442] loop4: detected capacity change from 0 to 1024
[  342.112210][T12418] loop2: detected capacity change from 0 to 32768
[  342.626322][T12471] 
[  342.628812][T12471] ======================================================
[  342.635844][T12471] WARNING: possible circular locking dependency detected
[  342.642885][T12471] syzkaller #0 Not tainted
[  342.647309][T12471] ------------------------------------------------------
[  342.654346][T12471] syz.3.3237/12471 is trying to acquire lock:
[  342.660429][T12471] ffffffff8cf51008 (serio_mutex){+.+.}-{3:3}, at: drvctl_store+0x2a/0xae0
[  342.668984][T12471] 
[  342.668984][T12471] but task is already holding lock:
[  342.676358][T12471] ffff8880259e0660 (kn->active#671){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500
[  342.686046][T12471] 
[  342.686046][T12471] which lock already depends on the new lock.
[  342.686046][T12471] 
[  342.696606][T12471] 
[  342.696606][T12471] the existing dependency chain (in reverse order) is:
[  342.705629][T12471] 
[  342.705629][T12471] -> #1 (kn->active#671){++++}-{0:0}:
[  342.713218][T12471]        __kernfs_remove+0x5da/0xcb0
[  342.718610][T12471]        kernfs_remove_by_name_ns+0x91/0x100
[  342.724708][T12471]        sysfs_remove_group+0xfd/0x290
[  342.730179][T12471]        sysfs_remove_groups+0x50/0xa0
[  342.735676][T12471]        device_remove_attrs+0xc2/0x140
[  342.741236][T12471]        device_del+0x637/0xa80
[  342.746120][T12471]        serio_destroy_port+0x34a/0x470
[  342.751702][T12471]        serio_unregister_port+0x12c/0x150
[  342.757533][T12471]        userio_char_release+0x7f/0xb0
[  342.763007][T12471]        __fput+0x212/0x8c0
[  342.767612][T12471]        task_work_run+0x125/0x1a0
[  342.772746][T12471]        exit_to_user_mode_loop+0x10f/0x130
[  342.778738][T12471]        exit_to_user_mode_prepare+0xee/0x180
[  342.784820][T12471]        syscall_exit_to_user_mode+0x16/0x40
[  342.790821][T12471]        do_syscall_64+0x58/0xa0
[  342.795769][T12471]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.802206][T12471] 
[  342.802206][T12471] -> #0 (serio_mutex){+.+.}-{3:3}:
[  342.809524][T12471]        __lock_acquire+0x2c66/0x7b50
[  342.814946][T12471]        lock_acquire+0x19e/0x400
[  342.819981][T12471]        __mutex_lock_common+0x1e5/0x2400
[  342.825712][T12471]        mutex_lock_interruptible_nested+0x17/0x20
[  342.832237][T12471]        drvctl_store+0x2a/0xae0
[  342.837274][T12471]        kernfs_fop_write_iter+0x3a8/0x500
[  342.843100][T12471]        vfs_write+0x748/0xd70
[  342.847901][T12471]        ksys_write+0x153/0x260
[  342.852860][T12471]        do_syscall_64+0x4c/0xa0
[  342.857829][T12471]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.864264][T12471] 
[  342.864264][T12471] other info that might help us debug this:
[  342.864264][T12471] 
[  342.874511][T12471]  Possible unsafe locking scenario:
[  342.874511][T12471] 
[  342.881979][T12471]        CPU0                    CPU1
[  342.887351][T12471]        ----                    ----
[  342.892742][T12471]   lock(kn->active#671);
[  342.897119][T12471]                                lock(serio_mutex);
[  342.903723][T12471]                                lock(kn->active#671);
[  342.910601][T12471]   lock(serio_mutex);
[  342.914689][T12471] 
[  342.914689][T12471]  *** DEADLOCK ***
[  342.914689][T12471] 
[  342.922857][T12471] 4 locks held by syz.3.3237/12471:
[  342.928063][T12471]  #0: ffff88805d4119f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  342.937380][T12471]  #1: ffff88814c798460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70
[  342.946315][T12471]  #2: ffff88805e86cc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500
[  342.956106][T12471]  #3: ffff8880259e0660 (kn->active#671){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500
[  342.966252][T12471] 
[  342.966252][T12471] stack backtrace:
[  342.972152][T12471] CPU: 1 PID: 12471 Comm: syz.3.3237 Not tainted syzkaller #0
[  342.979753][T12471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  342.989845][T12471] Call Trace:
[  342.993161][T12471]  <TASK>
[  342.996127][T12471]  dump_stack_lvl+0x188/0x250
[  343.000844][T12471]  ? load_image+0x410/0x410
[  343.005492][T12471]  ? show_regs_print_info+0x20/0x20
[  343.010741][T12471]  ? print_circular_bug+0x12b/0x1a0
[  343.015974][T12471]  check_noncircular+0x296/0x330
[  343.020947][T12471]  ? add_chain_block+0x9b0/0x9b0
[  343.025908][T12471]  ? lockdep_lock+0xf1/0x1f0
[  343.030530][T12471]  ? mark_lock+0x94/0x320
[  343.035005][T12471]  ? _find_first_zero_bit+0xd1/0xf0
[  343.040275][T12471]  __lock_acquire+0x2c66/0x7b50
[  343.045172][T12471]  ? verify_lock_unused+0x140/0x140
[  343.050402][T12471]  ? mark_lock+0x94/0x320
[  343.054760][T12471]  ? mark_lock+0x94/0x320
[  343.059114][T12471]  lock_acquire+0x19e/0x400
[  343.063678][T12471]  ? drvctl_store+0x2a/0xae0
[  343.068295][T12471]  ? __might_sleep+0xf0/0xf0
[  343.072906][T12471]  ? read_lock_is_recursive+0x10/0x10
[  343.078303][T12471]  ? verify_lock_unused+0x140/0x140
[  343.083536][T12471]  __mutex_lock_common+0x1e5/0x2400
[  343.088301][    C0] sched: RT throttling activated
[  343.093697][T12471]  ? drvctl_store+0x2a/0xae0
[  343.098313][T12471]  ? kernfs_fop_write_iter+0x14f/0x500
[  343.103806][T12471]  ? drvctl_store+0x2a/0xae0
[  343.108445][T12471]  ? mutex_lock_io_nested+0x60/0x60
[  343.113671][T12471]  ? read_lock_is_recursive+0x10/0x10
[  343.119107][T12471]  ? sysfs_kf_read+0x350/0x350
[  343.123902][T12471]  mutex_lock_interruptible_nested+0x17/0x20
[  343.129915][T12471]  drvctl_store+0x2a/0xae0
[  343.134360][T12471]  ? sysfs_kf_write+0x183/0x2a0
[  343.139243][T12471]  ? sysfs_kf_read+0x350/0x350
[  343.144036][T12471]  kernfs_fop_write_iter+0x3a8/0x500
[  343.149629][T12471]  vfs_write+0x748/0xd70
[  343.153893][T12471]  ? file_end_write+0x250/0x250
[  343.155894][T12448] loop1: detected capacity change from 0 to 131072
[  343.158778][T12471]  ? mutex_lock_nested+0x17/0x20
[  343.158805][T12471]  ? __fdget_pos+0x2bf/0x370
[  343.174837][T12471]  ? ksys_write+0x70/0x260
[  343.179274][T12471]  ksys_write+0x153/0x260
[  343.183623][T12471]  ? __ia32_sys_read+0x80/0x80
[  343.188406][T12471]  ? lockdep_hardirqs_on+0x94/0x140
[  343.193630][T12471]  do_syscall_64+0x4c/0xa0
[  343.198071][T12471]  ? clear_bhb_loop+0x30/0x80
[  343.202766][T12471]  ? clear_bhb_loop+0x30/0x80
[  343.207461][T12471]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  343.213373][T12471] RIP: 0033:0x7fcaf54ec0d9
[  343.217814][T12471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  343.237439][T12471] RSP: 002b:00007fcaf3744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  343.245865][T12471] RAX: ffffffffffffffda RBX: 00007fcaf5773fa0 RCX: 00007fcaf54ec0d9
[  343.253854][T12471] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003
[  343.261837][T12471] RBP: 00007fcaf5583024 R08: 0000000000000000 R09: 0000000000000000
[  343.269903][T12471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.277880][T12471] R13: 00007fcaf5774038 R14: 00007fcaf5773fa0 R15: 00007fff899e4f68
[  343.285862][T12471]  </TASK>
[  343.344998][T12448] F2FS-fs (loop1): Found nat_bits in checkpoint
[  343.404681][T12442] hfsplus: request for non-existent node 33554434 in B*Tree
[  343.419459][T12448] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  343.438415][T12442] hfsplus: request for non-existent node 33554434 in B*Tree
[  343.456552][T12442] hfsplus: request for non-existent node 33554434 in B*Tree
[  343.475130][T12442] hfsplus: request for non-existent node 33554434 in B*Tree
[  343.515405][T12438] hfsplus: request for non-existent node 33554434 in B*Tree
[  343.527982][T12438] hfsplus: request for non-existent node 33554434 in B*Tree
[  343.599891][ T4275] hfsplus: request for non-existent node 33554434 in B*Tree
[  343.607238][ T4275] hfsplus: request for non-existent node 33554434 in B*Tree