last executing test programs:

4.13920555s ago: executing program 2 (id=2692):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x1, 0x6281, &(0x7f0000006600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

2.89502473s ago: executing program 1 (id=2703):
r0 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)

2.674905325s ago: executing program 1 (id=2706):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x804000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x22406e, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

2.355040783s ago: executing program 2 (id=2709):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
readv(r1, 0x0, 0x0)

2.200788367s ago: executing program 0 (id=2710):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)

1.927008753s ago: executing program 0 (id=2712):
r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='[)^%\x00', 0x0, r0)

1.913126044s ago: executing program 4 (id=2713):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0)
write$P9_RVERSION(r0, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x10, 0x8, '9P2000.u'}, 0x15)

1.852999865s ago: executing program 3 (id=2714):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)

1.64699999s ago: executing program 0 (id=2715):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0xffffffff, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x8004745a, 0x0)

1.622709241s ago: executing program 4 (id=2716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4854)

1.552494232s ago: executing program 3 (id=2717):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0x28, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x54}}, 0x0)

1.498999264s ago: executing program 0 (id=2718):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000240)={[0xdddd1000, 0x50000, 0x8000000, 0x3330d000], 0x2, 0x7f81ccbf61c9ac0})

1.363964557s ago: executing program 4 (id=2719):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f5d68383fa65"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000)

1.346814297s ago: executing program 3 (id=2720):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4)
syz_emit_ethernet(0x2b, &(0x7f0000000040)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9, 0x0, @opaque="ff"}}}}}, 0x0)

1.23104731s ago: executing program 0 (id=2721):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000fc0)={0x1, 0x2, 0x1000, 0x2, &(0x7f00000001c0)='#A', 0x0, 0x0, 0x0})

1.174095971s ago: executing program 3 (id=2722):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_mr_cache\x00')
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$eJzs3V9oHHkdAPDvbJOY6+W6FQ7U49Cg4B2eJm2T63kcyB34j3optfFFGyhJu01CN9mQbLSJoBWLFHzxSYRK0T4oiGJ87JuKoMWiD4WiL6VIQS20harPkdnd6YVk02zbdCdJPx+Yzm9+2+zvO/PNbGZ+O/ObAJ5ZvRHxdkTsiojXIqLYqC80pjhbn9L/NzawNJFOSSwvD99LIomIQwNLE9l7JY358403eDUift+ZxNi5te3OLSyeHi2XS7ON5f7q1Ez/3MLipyanRsdL46XpgTff+PTBgdcHDw5s2rreHD029cvK0Fs/u334Nx/++CfuJfF29DReW7kem6U3ehvbpDNeWPlCEvH1zW4sZ90ryklHjoHQsj+/8fIP844BAGi/QuPYv6N2/F+MXVE/eOu+NnK/GLf+st7PHRq5+O92xgkAAAA8vuXljzTmAAAAwM6VOPcHAACAHS67DuDQwNJENrXr2oPbX2hXS6znzjsRsbee/+z+7vorHY17erujMyJ2/yeJlbf1Jqvu+X0c1c9F9MY3/lg9+4NT6RRP6T5stqalf+QdAXnqGsw7AvL00pfzjoA8/fV83hGQp2t38o6APB0dzjsC8nT4YN4RkKcL9/KOgN++Ux8AcG3/X6E25l/Wy7O6/yctP/eEbd8tRPRG969W1un/aa+s/29sTf9f4UH/3651+v/2tNjG5a9d/1Cz+i9+Nc3/8FjW//fJkR+X0vbT+ROvGC25852Ilzqa5T95kP9knfwXW2zjD1cHm/b0/25Pmv+f/yLNdzbJf3st/zTilWie/0zy8PFZ+09Nlkv76v82beOj9//5v2b1039L83/lM9n+n05p+9l3ATx96f6/e538b/T5v7fFNi5N3mra0zvck+b/lW89PP+F213JV2q/jF2NmjOj1ers/oiu5N219QcedQs8W7JtlG3DNP+vfqz53/8P1ubNP//T34n3t9jmu8cKbzWrH/x1mv/vf97+n580/yc32P/X+/v/YqttXL852qx+4rNp/o9ekn8AAAAAAAAAeDKFiOiJpND3oFwo9PXVn+H9YuwulCtz1ddOVeanT0btWdl7o7OQXelVrC8n6fL+xvVA2fKBVcsDjetFzhefqy33naiUT+a98gAAALDD9UTcOPbdyx94ftX5/7+K9fN/AAAAYPtLz/9f/snFC2n5v60O5AMAAABsK+n5//3v3b0Szv8BAABgx+rpdv4PAAAAO132/f+RoaE4MjS0nD33b7oyPnl6YubNA/v6puZP9J2ozM70jVcq47UR+6Y2ft9ypTKz//WYP9NfLc1V++cWFo9PVeanq8drz409Xupsw7oBGzv398sjeccAAAC0T8864/+/sGLs/n0RsScirhY735eN9Q8AAABsfT0RN770o2/+aW5h8fRouVyaVXjUwvK3I7ZAGAprCtlFJlslnm1ZyPkDCgAA2HTvHfTnHQkAAAAAAAAAAAAAAAAAAAA8u9oxnFje6wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD28f8AAAD//0FW/Wk=")
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x2002, 0xa)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x4000000000000008, 0x8, 0x0, 0xfffffffffdffffff})

1.128821622s ago: executing program 4 (id=2723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

818.89176ms ago: executing program 1 (id=2724):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

806.78998ms ago: executing program 4 (id=2725):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xc)

749.398422ms ago: executing program 2 (id=2726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x18}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xfffffffb}]}}]}, 0x38}}, 0x0)

551.016737ms ago: executing program 1 (id=2727):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='\x00'/16, 0x6)

550.858877ms ago: executing program 4 (id=2728):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x215882f, 0x0, 0x3, 0x0, &(0x7f0000000240))
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

527.058557ms ago: executing program 3 (id=2729):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x3b}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)

518.320087ms ago: executing program 2 (id=2730):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8\x00', 0x1c, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x4, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x1, 0x7, 0xff}}}}}}, 0x0)

343.026212ms ago: executing program 1 (id=2731):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00')
read(r0, &(0x7f0000001180)=""/4096, 0x1000)
pread64(r0, &(0x7f0000000080)=""/220, 0xdc, 0x4009)
read$FUSE(r0, &(0x7f0000005000)={0x2020}, 0x2020)

285.708893ms ago: executing program 0 (id=2732):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

253.840003ms ago: executing program 2 (id=2733):
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000800)
unlink(0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000007c0)={0x7, 'vlan0\x00', {0x7}})

106.999578ms ago: executing program 3 (id=2734):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

106.841038ms ago: executing program 1 (id=2735):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 2 (id=2736):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x4004044}, 0x40041)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a008020"], 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

n process `syz.3.1014'.
[  158.339525][ T6960] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1015'.
[  158.569586][ T5048] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  158.586104][ T5048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.621428][ T5048] usb 3-1: config 0 descriptor??
[  158.665653][ T5048] cp210x 3-1:0.0: cp210x converter detected
[  158.711729][ T6982] 9pnet: Insufficient options for proto=fd
[  159.093922][ T5048] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  159.138250][ T5048] usb 3-1: cp210x converter now attached to ttyUSB0
[  159.223827][ T4264] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  159.345881][    T7] usb 3-1: USB disconnect, device number 9
[  159.364200][    T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  159.373305][    T7] cp210x 3-1:0.0: device disconnected
[  159.482285][ T7001] netlink: 'syz.3.1033': attribute type 11 has an invalid length.
[  159.697527][ T4264] usb 5-1: unable to get BOS descriptor or descriptor too short
[  159.764289][ T4264] usb 5-1: not running at top speed; connect to a high speed hub
[  159.868085][ T4264] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  159.884146][ T4264] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  159.911124][ T4264] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.023891][ T5048] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  160.058848][ T7028] loop2: detected capacity change from 0 to 256
[  160.094076][ T4264] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  160.118201][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.129407][ T4264] usb 5-1: Product: syz
[  160.133642][ T4264] usb 5-1: Manufacturer: syz
[  160.138605][ T4264] usb 5-1: SerialNumber: syz
[  160.152147][ T7028] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x0ab85e4d, utbl_chksum : 0xe619d30d)
[  160.264114][ T5048] usb 4-1: Using ep0 maxpacket: 32
[  160.384088][ T5048] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.394478][ T5048] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  160.407840][ T5048] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  160.417163][ T5048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.427341][ T5048] usb 4-1: config 0 descriptor??
[  160.465954][ T5048] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  160.623987][ T5048] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  160.671587][ T7013] netlink: 'syz.3.1039': attribute type 287 has an invalid length.
[  160.706248][ T1107] usb 4-1: USB disconnect, device number 8
[  160.934184][ T4264] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  160.971151][ T4264] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  160.980820][ T4264] usb 5-1: USB disconnect, device number 6
[  161.081222][ T4240] hid-generic 0005:16C0:5505.0007: item fetching failed at offset 0/2
[  161.106915][ T4240] hid-generic: probe of 0005:16C0:5505.0007 failed with error -22
[  161.144039][ T5048] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  161.153633][ T5048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.162125][ T5048] usb 3-1: Product: syz
[  161.167878][ T5048] usb 3-1: Manufacturer: syz
[  161.172516][ T5048] usb 3-1: SerialNumber: syz
[  161.183858][ T5048] usb 3-1: config 0 descriptor??
[  161.224700][ T5048] hub 3-1:0.0: bad descriptor, ignoring hub
[  161.238972][ T5048] hub: probe of 3-1:0.0 failed with error -5
[  161.245427][ T4890] udevd[4890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.443961][ T5048] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  161.471877][ T5048] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  161.514637][ T5048] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  161.527998][ T5048] usb 3-1: media controller created
[  161.559857][ T5048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.706393][ T5048] DVB: Unable to find symbol dib7000p_attach()
[  161.723949][ T5048] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  161.897302][ T5048] rc_core: IR keymap rc-dib0700-rc5 not found
[  161.903517][ T5048] Registered IR keymap rc-empty
[  161.918628][ T7092] user requested TSC rate below hardware speed
[  161.928926][ T5048] dvb-usb: could not initialize remote control.
[  161.948999][ T7098] openvswitch: netlink: Actions may not be safe on all matching packets
[  161.963910][ T5048] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  162.006924][ T5048] usb 3-1: USB disconnect, device number 10
[  162.113231][ T5048] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  162.420705][ T7116] loop4: detected capacity change from 0 to 512
[  162.431893][ T7110] sctp: [Deprecated]: syz.0.1083 (pid 7110) Use of int in max_burst socket option.
[  162.431893][ T7110] Use struct sctp_assoc_value instead
[  162.597626][ T7116] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 1: comm syz.4.1087: invalid block
[  162.644298][ T7116] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1087: couldn't read orphan inode 11 (err -117)
[  162.720794][ T7116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.779024][ T7116] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1087: Directory hole found for htree leaf block 0
[  162.816590][ T7113] loop2: detected capacity change from 0 to 32768
[  162.899689][ T7113] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1085 (7113)
[  162.992281][ T7113] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  163.034963][ T7113] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  163.061564][ T7113] BTRFS info (device loop2): use zstd compression, level 3
[  163.079141][ T7113] BTRFS info (device loop2): using free space tree
[  163.104654][ T7113] BTRFS info (device loop2): has skinny extents
[  163.129693][ T7130] user requested TSC rate below hardware speed
[  163.403937][  T150] block nbd0: Possible stuck request ffff888020a78000: control (read@0,4096B). Runtime 30 seconds
[  163.429663][ T7113] BTRFS info (device loop2): enabling ssd optimizations
[  163.779438][ T7177] loop0: detected capacity change from 0 to 256
[  164.314005][ T4240] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  164.553872][ T4240] usb 4-1: Using ep0 maxpacket: 32
[  164.684342][ T4240] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  164.709346][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.722585][ T4240] usb 4-1: config 0 descriptor??
[  164.803678][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'.
[  164.815084][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'.
[  164.883826][    T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  164.990663][ T4240] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  165.025033][ T4240] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  165.074535][ T4240] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  165.092006][ T4240] usb 4-1: media controller created
[  165.151240][ T4240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  165.173912][    T7] usb 5-1: Using ep0 maxpacket: 16
[  165.254187][ T4240] az6027: usb out operation failed. (-71)
[  165.284030][ T4240] az6027: usb out operation failed. (-71)
[  165.289819][ T4240] stb0899_attach: Driver disabled by Kconfig
[  165.302831][ T4240] az6027: no front-end attached
[  165.302831][ T4240] 
[  165.310718][    T7] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  165.324956][    T7] usb 5-1: config 0 has no interface number 0
[  165.331141][    T7] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  165.342491][    T7] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  165.352956][ T4240] az6027: usb out operation failed. (-71)
[  165.380296][ T4240] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  165.395710][ T4240] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16
[  165.425305][ T4240] dvb-usb: schedule remote query interval to 400 msecs.
[  165.432499][ T4240] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  165.443609][ T4240] usb 4-1: USB disconnect, device number 9
[  165.543973][    T7] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  165.554526][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.562711][    T7] usb 5-1: Product: syz
[  165.575366][ T4240] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  165.587801][    T7] usb 5-1: Manufacturer: syz
[  165.592454][    T7] usb 5-1: SerialNumber: syz
[  165.610579][    T7] usb 5-1: config 0 descriptor??
[  165.634158][ T7201] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  165.644639][ T7201] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  165.707261][ T7236] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  165.769668][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'.
[  165.880058][ T7201] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  165.911520][ T7201] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  166.011692][ T7257] tipc: Started in network mode
[  166.027328][ T7257] tipc: Node identity ac14140f, cluster identity 4711
[  166.047418][ T7257] tipc: New replicast peer: 172.20.20.187
[  166.054712][ T7257] tipc: Enabled bearer <udp:syz2>, priority 10
[  166.135933][ T7263] loop2: detected capacity change from 0 to 512
[  166.174114][    T7] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  166.295424][ T7263] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 1: comm syz.2.1142: invalid block
[  166.344492][ T7263] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1142: couldn't read orphan inode 11 (err -117)
[  166.384363][ T7263] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  166.501437][ T7263] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.1142: Directory hole found for htree leaf block 0
[  166.597178][ T7283] netlink: 'syz.1.1162': attribute type 1 has an invalid length.
[  166.614323][    T7] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  166.631906][    T7] asix: probe of 5-1:0.34 failed with error -71
[  166.683841][    T7] usb 5-1: USB disconnect, device number 7
[  166.801889][ T7290] loop0: detected capacity change from 0 to 512
[  166.884372][ T7290] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  166.898126][ T7290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  166.933877][ T7290] System zones: 0-1, 15-15, 18-18, 34-34
[  166.941529][ T7290] EXT4-fs (loop0): orphan cleanup on readonly fs
[  167.006334][ T7287] loop2: detected capacity change from 0 to 8192
[  167.020063][ T7290] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  167.044129][   T13] tipc: Node number set to 2886997007
[  167.073555][ T7290] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  167.090552][ T7287] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  167.106326][ T7290] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  167.121307][ T7290] EXT4-fs (loop0): 1 truncate cleaned up
[  167.129378][   T26] audit: type=1800 audit(1785205890.850:55): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1152" name="file1" dev="loop2" ino=1048643 res=0 errno=0
[  167.143483][ T7290] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  167.295784][ T7297] loop4: detected capacity change from 0 to 256
[  167.315631][ T7290] fscrypt (loop0, inode 16): Error -61 getting encryption context
[  167.426898][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'.
[  167.446207][ T7301] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received
[  167.488353][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'.
[  167.780027][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'.
[  168.094449][ T7326] loop0: detected capacity change from 0 to 4096
[  168.101970][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1175'.
[  168.133015][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'.
[  168.173025][ T7326] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  168.515785][ T7353] loop2: detected capacity change from 0 to 1024
[  168.704156][ T5038] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  168.731576][ T4211] hfsplus: b-tree write err: -5, ino 25
[  168.751669][ T4211] hfsplus: b-tree write err: -5, ino 4
[  168.783972][ T4211] hfsplus: b-tree write err: -5, ino 2
[  168.816808][ T4211] hfsplus: b-tree write err: -5, ino 17
[  168.930885][ T7363] loop2: detected capacity change from 0 to 256
[  168.953821][ T5038] usb 5-1: Using ep0 maxpacket: 8
[  169.075648][ T5038] usb 5-1: config 6 has an invalid interface number: 2 but max is 0
[  169.089630][ T5038] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  169.130083][ T5038] usb 5-1: config 6 has no interface number 0
[  169.146589][ T5038] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  169.275266][ T7368] loop2: detected capacity change from 0 to 256
[  169.325694][ T7368] exfat: Deprecated parameter 'utf8'
[  169.331090][ T7368] exfat: Deprecated parameter 'namecase'
[  169.344038][ T5038] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  169.344083][ T7368] exfat: Deprecated parameter 'namecase'
[  169.363675][ T5038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.392429][ T5038] usb 5-1: Product: syz
[  169.402563][ T5038] usb 5-1: Manufacturer: syz
[  169.414420][ T5038] usb 5-1: SerialNumber: syz
[  169.439200][ T7368] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  169.474841][ T5038] hso 5-1:6.2: Failed to find INT IN ep
[  169.658969][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'.
[  169.709602][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'.
[  169.722466][    T7] usb 5-1: USB disconnect, device number 8
[  169.927088][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'.
[  169.942402][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'.
[  169.952383][ T4211] bond0: (slave bond_slave_0): interface is now down
[  169.964052][ T4211] bond0: (slave bond_slave_1): interface is now down
[  169.989962][ T4211] bond0: now running without any active interface!
[  170.020977][ T7366] loop0: detected capacity change from 0 to 32768
[  170.061470][ T7366] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1186 (7366)
[  170.141259][ T7366] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  170.191672][ T7366] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  170.203493][ T5038] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  170.225242][ T7366] BTRFS info (device loop0): use zstd compression, level 3
[  170.232515][ T7366] BTRFS info (device loop0): using free space tree
[  170.267293][ T7366] BTRFS info (device loop0): has skinny extents
[  170.430075][ T7366] BTRFS info (device loop0): enabling ssd optimizations
[  170.574002][ T5038] usb 3-1: config 0 has no interfaces?
[  170.734166][ T5038] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  170.743270][ T5038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.797130][ T5038] usb 3-1: Product: syz
[  170.801366][ T5038] usb 3-1: Manufacturer: syz
[  170.812045][ T5038] usb 3-1: SerialNumber: syz
[  170.865227][ T5038] usb 3-1: config 0 descriptor??
[  171.097478][ T7411] netlink: 'syz.4.1197': attribute type 1 has an invalid length.
[  171.127234][    T7] usb 3-1: USB disconnect, device number 11
[  171.758491][ T7449] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1213'.
[  172.257900][ T7480] loop0: detected capacity change from 0 to 1024
[  172.431703][ T7492] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1232'.
[  172.666358][    T7] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  172.744017][   T13] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  172.897841][ T7508] loop0: detected capacity change from 0 to 4096
[  173.013933][   T13] usb 3-1: Using ep0 maxpacket: 16
[  173.050337][ T7508] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  173.064075][    T7] usb 4-1: config 0 has no interfaces?
[  173.131276][ T7508] ntfs3: loop0: failed to convert "0000" to iso8859-2
[  173.164445][   T13] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  173.178114][   T13] usb 3-1: config 0 has no interface number 0
[  173.184788][ T7508] ntfs3: loop0: failed to convert name for inode 1e.
[  173.202602][   T13] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  173.223952][   T13] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  173.264079][    T7] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  173.278600][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.298139][    T7] usb 4-1: Product: syz
[  173.307687][    T7] usb 4-1: Manufacturer: syz
[  173.332656][    T7] usb 4-1: SerialNumber: syz
[  173.365862][    T7] usb 4-1: config 0 descriptor??
[  173.401958][ T7517] loop4: detected capacity change from 0 to 512
[  173.415668][   T13] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  173.436753][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.453956][   T13] usb 3-1: Product: syz
[  173.461555][   T13] usb 3-1: Manufacturer: syz
[  173.468516][ T7517] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  173.491976][   T13] usb 3-1: SerialNumber: syz
[  173.503660][   T13] usb 3-1: config 0 descriptor??
[  173.524232][ T7496] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  173.531321][ T7496] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  173.548296][ T7517] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=remount-ro,. Quota mode: writeback.
[  173.571422][ T7517] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.634630][    T7] usb 4-1: USB disconnect, device number 10
[  173.799011][ T7496] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  173.834089][ T7496] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  173.987254][ T7537] loop0: detected capacity change from 0 to 256
[  174.046153][ T7537] exfat: Deprecated parameter 'utf8'
[  174.074157][   T13] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  174.085274][ T7537] exfat: Deprecated parameter 'namecase'
[  174.091024][ T7537] exfat: Deprecated parameter 'namecase'
[  174.167020][ T7537] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  174.524351][   T13] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  174.544106][   T13] asix: probe of 3-1:0.34 failed with error -71
[  174.554453][   T13] usb 3-1: USB disconnect, device number 12
[  174.743968][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'.
[  174.807328][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'.
[  175.115047][ T7572] netlink: 'syz.2.1271': attribute type 6 has an invalid length.
[  175.261618][ T7545] loop4: detected capacity change from 0 to 40427
[  175.388519][ T7545] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  175.397819][ T7562] loop3: detected capacity change from 0 to 32768
[  175.426317][ T7545] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  175.464122][ T7545] F2FS-fs (loop4): invalid crc value
[  175.539728][ T7545] F2FS-fs (loop4): Found nat_bits in checkpoint
[  175.749861][ T7545] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  175.774644][ T7545] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  176.504421][ T4240] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  176.802168][ T7624] loop2: detected capacity change from 0 to 8192
[  176.808796][ T4240] usb 4-1: Using ep0 maxpacket: 16
[  176.842753][ T7624] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.943982][ T4240] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  176.955369][ T4240] usb 4-1: config 0 has no interface number 0
[  176.962102][ T4240] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  176.987964][ T4240] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  177.065709][ T7634] loop2: detected capacity change from 0 to 256
[  177.114528][ T7634] exfat: Deprecated parameter 'utf8'
[  177.119980][ T7634] exfat: Deprecated parameter 'utf8'
[  177.190021][ T7634] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  177.203988][ T4240] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  177.224970][ T4240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.243306][ T4240] usb 4-1: Product: syz
[  177.261581][ T4240] usb 4-1: Manufacturer: syz
[  177.267599][ T4240] usb 4-1: SerialNumber: syz
[  177.291027][ T4240] usb 4-1: config 0 descriptor??
[  177.313958][ T4233] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  177.317238][ T7606] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  177.341162][ T7606] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  177.526953][ T7657] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  177.592538][ T7606] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  177.607140][ T7606] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  177.693992][ T4233] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  177.713818][ T4233] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64
[  177.733776][ T4233] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  177.763790][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0
[  177.770543][ T4233] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  177.793775][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.811767][ T4233] usb 5-1: config 0 descriptor??
[  177.834137][ T7636] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  177.847651][ T4240] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  177.860548][ T7659] loop2: detected capacity change from 0 to 32768
[  177.929241][ T7659] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1310 (7659)
[  177.994734][ T7659] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  178.024650][ T7659] BTRFS info (device loop2): use zlib compression, level 3
[  178.031921][ T7659] BTRFS info (device loop2): using free space tree
[  178.038871][ T7659] BTRFS info (device loop2): has skinny extents
[  178.253659][ T7659] BTRFS info (device loop2): enabling ssd optimizations
[  178.288734][ T4233] elecom 0003:056E:00FB.0008: unknown main item tag 0x2
[  178.294658][ T4240] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  178.313854][ T4233] elecom 0003:056E:00FB.0008: item fetching failed at offset 6/40
[  178.314432][ T4240] asix: probe of 4-1:0.34 failed with error -71
[  178.322897][ T4233] elecom: probe of 0003:056E:00FB.0008 failed with error -22
[  178.350551][ T4240] usb 4-1: USB disconnect, device number 11
[  178.367818][ T7682] loop0: detected capacity change from 0 to 1024
[  178.551295][    T7] usb 5-1: USB disconnect, device number 9
[  178.752544][ T4890] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (4890)
[  179.025279][ T7705] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  179.742589][ T7744] netlink: 'syz.1.1339': attribute type 1 has an invalid length.
[  179.751331][ T7741] loop2: detected capacity change from 0 to 1024
[  179.787737][ T7737] loop4: detected capacity change from 0 to 8192
[  179.865325][ T7737] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  180.327503][ T7766] loop2: detected capacity change from 0 to 1024
[  180.511490][ T7772] program syz.4.1352 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  181.041306][ T7776] loop2: detected capacity change from 0 to 32768
[  181.252565][ T7794] loop2: detected capacity change from 0 to 1024
[  181.331941][ T7794] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  181.376441][ T7794] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  181.403879][ T7794] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.1363: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  181.452554][ T7794] EXT4-fs (loop2): no journal found
[  181.462518][ T7794] EXT4-fs (loop2): can't get journal size
[  181.484697][ T7794] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[  181.537543][ T7792] loop4: detected capacity change from 0 to 32768
[  181.566192][ T7801] debugfs: Directory 'netdev:wlan0' with parent 'phy7' already present!
[  181.691905][ T7807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1369'.
[  181.703619][ T7792] XFS (loop4): Mounting V5 Filesystem
[  181.716480][ T7807] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1369'.
[  181.764567][ T7792] XFS (loop4): Ending clean mount
[  181.818925][ T7792] XFS (loop4): Quotacheck needed: Please wait.
[  181.909991][ T7792] XFS (loop4): Quotacheck: Done.
[  182.029923][ T4807] XFS (loop4): Unmounting Filesystem
[  182.298075][ T7830] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1377'.
[  182.787478][ T7842] netlink: 'syz.2.1382': attribute type 1 has an invalid length.
[  182.803869][   T13] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  183.149963][ T7860] sch_fq: defrate 0 ignored.
[  183.201822][ T7837] loop4: detected capacity change from 0 to 32768
[  183.221543][ T7862] loop0: detected capacity change from 0 to 256
[  183.295147][   T13] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  183.313946][ T7862] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d)
[  183.460740][ T7868] netlink: 6856 bytes leftover after parsing attributes in process `syz.2.1394'.
[  183.504155][   T13] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  183.524501][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.542419][   T13] usb 4-1: Product: syz
[  183.547369][   T13] usb 4-1: Manufacturer: syz
[  183.552069][   T13] usb 4-1: SerialNumber: syz
[  183.626185][   T13] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  183.734045][ T7872] input: syz1 as /devices/virtual/input/input17
[  184.043662][ T7882] netlink: 'syz.2.1400': attribute type 1 has an invalid length.
[  184.053882][ T7881] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1401'.
[  184.062871][ T7881] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1401'.
[  184.062956][ T7882] netlink: 'syz.2.1400': attribute type 3 has an invalid length.
[  184.100370][ T7882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1400'.
[  184.312985][   T13] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  184.372362][   T13] usb 4-1: USB disconnect, device number 12
[  184.584284][ T7906] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  184.748217][ T7911] loop4: detected capacity change from 0 to 1024
[  184.821856][ T7911] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  184.900495][ T7911] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  184.921504][ T7911] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.1425: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  184.948003][ T7911] EXT4-fs (loop4): no journal found
[  184.957958][ T7911] EXT4-fs (loop4): can't get journal size
[  184.981487][ T7911] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[  185.177233][ T7927] loop0: detected capacity change from 0 to 8
[  185.232883][ T7924] loop2: detected capacity change from 0 to 4096
[  185.375990][ T7933] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.512368][ T7937] loop0: detected capacity change from 0 to 64
[  185.689546][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'.
[  185.752591][ T7945] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1431'.
[  185.782174][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'.
[  186.191032][ T7962] loop0: detected capacity change from 0 to 4096
[  186.305258][ T7974] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.469041][ T7980] netlink: 'syz.3.1447': attribute type 1 has an invalid length.
[  186.518489][ T7980] netlink: 'syz.3.1447': attribute type 3 has an invalid length.
[  186.564110][   T26] audit: type=1326 audit(1785206166.276:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.0.1449" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8bb08de99 code=0x0
[  186.787259][ T7999] loop2: detected capacity change from 0 to 64
[  186.808685][ T8001] loop4: detected capacity change from 0 to 8
[  187.028542][ T8009] loop3: detected capacity change from 0 to 128
[  187.117262][ T8009] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  187.128361][ T8009] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.234360][ T8018] netlink: 'syz.4.1464': attribute type 1 has an invalid length.
[  187.256221][ T8019] netlink: 'syz.2.1465': attribute type 1 has an invalid length.
[  187.297450][ T8018] netlink: 'syz.4.1464': attribute type 3 has an invalid length.
[  187.313113][ T8018] __nla_validate_parse: 1 callbacks suppressed
[  187.313130][ T8018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1464'.
[  187.404428][ T8021] netlink: 'syz.2.1467': attribute type 2 has an invalid length.
[  187.446901][ T8021] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1467'.
[  187.462386][ T8025] loop4: detected capacity change from 0 to 164
[  187.557894][ T8025] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  187.693221][ T8036] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1473'.
[  187.848627][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1476'.
[  188.064329][ T8058] loop4: detected capacity change from 0 to 2048
[  188.071773][ T8060] netlink: 'syz.1.1479': attribute type 1 has an invalid length.
[  188.089980][ T8060] netlink: 'syz.1.1479': attribute type 3 has an invalid length.
[  188.108014][ T8031] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication
[  188.118716][ T8060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1479'.
[  188.144993][ T8031] netdevsim netdevsim0 netdevsim0: Failed to get key data for SA table
[  188.182783][ T8058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.511784][ T8079] loop4: detected capacity change from 0 to 1024
[  188.780288][ T8088] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d)
[  189.024838][ T8096] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1498'.
[  189.136339][ T8098] netlink: 'syz.1.1499': attribute type 2 has an invalid length.
[  189.155717][ T8098] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1499'.
[  190.472889][ T8132] set_capacity_and_notify: 2 callbacks suppressed
[  190.472907][ T8132] loop4: detected capacity change from 0 to 64
[  190.799014][ T8140] loop4: detected capacity change from 0 to 256
[  190.877336][ T8140] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d)
[  190.950669][ T8143] loop3: detected capacity change from 0 to 2048
[  191.022973][ T8143] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  191.048645][ T8143] UDF-fs: Scanning with blocksize 512 failed
[  191.071751][ T8143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.083831][ T5038] Bluetooth: hci2: command 0x0406 tx timeout
[  191.089926][ T5038] Bluetooth: hci1: command 0x0406 tx timeout
[  192.047052][ T8157] rose0: tun_chr_ioctl cmd 1074025672
[  192.065853][ T8157] rose0: ignored: set checksum enabled
[  192.241257][ T8159] comedi comedi0: Minor 3 specified more than once!
[  192.709357][ T8180] loop0: detected capacity change from 0 to 1024
[  192.857510][ T8180] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  193.033278][ T8188] loop4: detected capacity change from 0 to 2048
[  193.210510][ T8188] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  193.351983][ T8188] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  193.442521][ T8188] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  193.483905][  T150] block nbd0: Possible stuck request ffff888020a78000: control (read@0,4096B). Runtime 60 seconds
[  193.498034][ T8188] EXT4-fs (loop4): This should not happen!! Data will be lost
[  193.498034][ T8188] 
[  193.508414][ T8188] EXT4-fs (loop4): Total free blocks count 0
[  193.515851][ T8188] EXT4-fs (loop4): Free/Dirty block details
[  193.522080][ T8188] EXT4-fs (loop4): free_blocks=2415919504
[  193.528273][ T8188] EXT4-fs (loop4): dirty_blocks=16
[  193.555265][ T8188] EXT4-fs (loop4): Block reservation details
[  193.583511][ T8188] EXT4-fs (loop4): i_reserved_data_blocks=1
[  193.602308][ T8215] loop0: detected capacity change from 0 to 8192
[  193.620147][ T8215] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  193.631827][ T8215] REISERFS (device loop0): using ordered data mode
[  193.639979][ T8215] reiserfs: using flush barriers
[  193.649942][ T8214] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  193.666678][ T8215] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  193.745709][ T8214] EXT4-fs (loop4): This should not happen!! Data will be lost
[  193.745709][ T8214] 
[  193.765100][ T8215] REISERFS (device loop0): checking transaction log (loop0)
[  193.797845][ T8215] REISERFS (device loop0): Using r5 hash to sort names
[  193.824152][ T8215] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  193.932956][ T8082] Set syz1 is full, maxelem 65536 reached
[  194.143593][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.149964][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.346107][ T8238] loop4: detected capacity change from 0 to 4096
[  194.426344][ T8238] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  194.513284][ T8247] loop2: detected capacity change from 0 to 2048
[  194.637390][ T8247] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  194.756324][ T8247] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  194.774493][ T8247] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  194.788200][ T8247] EXT4-fs (loop2): This should not happen!! Data will be lost
[  194.788200][ T8247] 
[  194.798048][ T8247] EXT4-fs (loop2): Total free blocks count 0
[  194.804243][ T8247] EXT4-fs (loop2): Free/Dirty block details
[  194.810872][ T8247] EXT4-fs (loop2): free_blocks=2415919504
[  194.820616][ T8247] EXT4-fs (loop2): dirty_blocks=16
[  194.826022][ T8247] EXT4-fs (loop2): Block reservation details
[  194.832157][ T8247] EXT4-fs (loop2): i_reserved_data_blocks=1
[  194.839067][ T8270] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  194.853996][    T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  194.865444][ T8270] EXT4-fs (loop2): This should not happen!! Data will be lost
[  194.865444][ T8270] 
[  194.962385][ T8274] netlink: 'syz.1.1580': attribute type 9 has an invalid length.
[  195.141337][    T7] usb 4-1: Using ep0 maxpacket: 8
[  195.275805][    T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  195.308899][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  195.349331][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  195.360415][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  195.371168][    T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.399303][    T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  195.439002][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.497929][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'.
[  195.526079][ T8297] loop2: detected capacity change from 0 to 4096
[  195.573100][ T8303] loop0: detected capacity change from 0 to 256
[  195.620133][ T8297] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  195.696340][ T8303] FAT-fs (loop0): Directory bread(block 64) failed
[  195.730872][ T8303] FAT-fs (loop0): Directory bread(block 65) failed
[  195.748625][ T8303] FAT-fs (loop0): Directory bread(block 66) failed
[  195.769486][    T7] usb 4-1: GET_CAPABILITIES returned 0
[  195.775325][    T7] usbtmc 4-1:16.0: can't read capabilities
[  195.805043][ T8303] FAT-fs (loop0): Directory bread(block 67) failed
[  195.812352][ T8303] FAT-fs (loop0): Directory bread(block 68) failed
[  195.874098][ T8303] FAT-fs (loop0): Directory bread(block 69) failed
[  195.880777][ T8303] FAT-fs (loop0): Directory bread(block 70) failed
[  195.897415][ T8303] FAT-fs (loop0): Directory bread(block 71) failed
[  195.918279][ T8303] FAT-fs (loop0): Directory bread(block 72) failed
[  195.930584][ T8303] FAT-fs (loop0): Directory bread(block 73) failed
[  195.982400][ T8256] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -90
[  196.019092][    T7] usb 4-1: USB disconnect, device number 13
[  196.061378][ T8312] loop4: detected capacity change from 0 to 4096
[  196.130085][ T8318] loop0: detected capacity change from 0 to 512
[  196.142106][ T8312] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  196.183889][ T8312] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  196.200901][ T8318] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  196.219942][ T8318] EXT4-fs (loop0): invalid journal inode
[  196.235026][ T8312] EXT4-fs (loop4): Test dummy encryption mode enabled
[  196.281207][ T8312] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003]
[  196.307405][ T8312] System zones: 0-5
[  196.360495][ T8312] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,mblk_io_submit,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback.
[  196.479514][ T8316] loop2: detected capacity change from 0 to 40427
[  196.487462][ T8318] overlayfs: failed to clone upperpath
[  196.568031][ T8316] F2FS-fs (loop2): invalid crc value
[  196.616599][ T8316] F2FS-fs (loop2): Found nat_bits in checkpoint
[  196.762844][ T8316] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  196.819652][ T8316] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  196.856410][ T8335] loop9: detected capacity change from 0 to 2640
[  196.898215][    C0] print_req_error: 31 callbacks suppressed
[  196.898232][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  196.915158][    C0] buffer_io_error: 30 callbacks suppressed
[  196.915173][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.975599][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  196.986701][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  197.048874][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.059942][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  197.070845][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.081948][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  197.101030][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.112014][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  197.126444][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.137422][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  197.155807][ T4188] attempt to access beyond end of device
[  197.155807][ T4188] loop2: rw=2049, want=45104, limit=40427
[  197.171284][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.182289][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  197.214156][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.225142][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  197.233071][ T7248] ldm_validate_partition_table(): Disk read failed.
[  197.267070][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.278072][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  197.332900][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.344067][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  197.373217][ T7248] Dev loop9: unable to read RDB block 0
[  197.381513][ T7248]  loop9: unable to read partition table
[  197.396590][ T8335] ldm_validate_partition_table(): Disk read failed.
[  197.441760][ T8335] Dev loop9: unable to read RDB block 0
[  197.486601][ T8335]  loop9: unable to read partition table
[  197.514153][ T8335] loop_reread_partitions: partition scan of loop9 (3�����) failed (rc=-5)
[  197.771090][ T8367] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1621'.
[  197.975418][ T8381] netlink: 'syz.4.1628': attribute type 9 has an invalid length.
[  198.239361][   T13] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  198.408443][ T8394] loop3: detected capacity change from 0 to 128
[  198.437419][ T8394] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  198.491280][ T8398] loop4: detected capacity change from 0 to 164
[  198.644164][   T13] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  198.662005][   T13] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.806296][   T13] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  198.838451][   T13] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  199.179616][   T13] usb 3-1: Product: syz
[  199.184361][   T13] usb 3-1: Manufacturer: syz
[  199.253204][   T13] hub 3-1:4.0: USB hub found
[  199.516315][ T8424] tap0: tun_chr_ioctl cmd 1074025677
[  199.528641][ T8424] tap0: linktype set to 769
[  199.583956][   T13] hub 3-1:4.0: config failed, hub has too many ports! (err -19)
[  199.698928][ T8431] loop3: detected capacity change from 0 to 512
[  199.773148][ T8431] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  199.805747][ T8431] EXT4-fs (loop3): invalid journal inode
[  199.934980][   T13] usb 3-1: USB disconnect, device number 13
[  200.060912][ T8435] loop3: detected capacity change from 0 to 8192
[  200.117209][ T8435] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  200.132749][ T8435] REISERFS (device loop3): using ordered data mode
[  200.145863][ T8435] reiserfs: using flush barriers
[  200.153255][ T8435] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  200.196429][ T8435] REISERFS (device loop3): checking transaction log (loop3)
[  200.221987][ T8435] REISERFS (device loop3): Using r5 hash to sort names
[  200.232969][ T8435] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  200.662681][ T8454] set_capacity_and_notify: 1 callbacks suppressed
[  200.662700][ T8454] loop4: detected capacity change from 0 to 512
[  200.703259][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'.
[  200.780706][ T8454] EXT4-fs (loop4): too many log groups per flexible block group
[  200.799866][ T8454] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  200.819913][ T8454] EXT4-fs (loop4): mount failed
[  201.073384][ T8466] loop0: detected capacity change from 0 to 4096
[  201.178884][ T8468] loop2: detected capacity change from 0 to 8192
[  201.242508][ T8466] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  201.324434][ T8468] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  201.334208][ T4234] Bluetooth: hci3: command 0x0406 tx timeout
[  201.362125][ T8468] REISERFS (device loop2): using ordered data mode
[  201.373991][ T8468] reiserfs: using flush barriers
[  201.396516][ T8468] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  201.464603][ T8468] REISERFS (device loop2): checking transaction log (loop2)
[  201.503945][ T4234] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  201.546697][ T8468] REISERFS (device loop2): Using r5 hash to sort names
[  201.582308][ T8468] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  201.939325][ T4234] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  201.960778][ T4234] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.098354][ T8509] binder: 8508:8509 ioctl c00c620f 0 returned -14
[  202.124428][ T4234] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  202.146797][ T4234] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  202.161471][ T4234] usb 5-1: Product: syz
[  202.171328][ T4234] usb 5-1: Manufacturer: syz
[  202.217990][ T8516] loop3: detected capacity change from 0 to 1024
[  202.260653][ T4234] hub 5-1:4.0: USB hub found
[  202.291671][ T8516] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  202.454779][ T8526] loop0: detected capacity change from 0 to 128
[  202.514983][ T8526] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  202.566063][ T4234] hub 5-1:4.0: config failed, hub has too many ports! (err -19)
[  202.914097][ T4234] usb 5-1: USB disconnect, device number 10
[  203.063472][ T8554] loop0: detected capacity change from 0 to 256
[  203.070344][ T8552] input: syz1 as /devices/virtual/input/input18
[  203.104784][ T8554] exfat: Deprecated parameter 'utf8'
[  203.120466][ T8554] exfat: Deprecated parameter 'namecase'
[  203.136725][ T8554] exfat: Deprecated parameter 'namecase'
[  203.189430][ T8562] loop3: detected capacity change from 0 to 1024
[  203.201741][ T8554] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  203.265183][ T8562] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  203.579060][ T8564] block device autoloading is deprecated and will be removed.
[  203.672067][ T8584] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1729'.
[  204.203274][ T8609] loop0: detected capacity change from 0 to 4096
[  204.264356][ T8619] device veth1_macvtap left promiscuous mode
[  204.280681][ T8619] device macsec0 entered promiscuous mode
[  204.333357][ T8625] device veth1_macvtap entered promiscuous mode
[  204.353664][ T8625] device macsec0 left promiscuous mode
[  204.401413][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  204.449646][ T8609] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  204.554968][   T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  204.792982][ T8641] program syz.0.1744 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.843973][   T13] usb 4-1: Using ep0 maxpacket: 16
[  204.969116][   T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  204.992830][   T13] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  205.017698][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.050602][   T13] usb 4-1: config 0 descriptor??
[  205.083244][ T8629] loop4: detected capacity change from 0 to 40427
[  205.116707][ T8629] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  205.139146][ T8629] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  205.147157][ T8653] 9pnet: Insufficient options for proto=fd
[  205.182269][ T8629] F2FS-fs (loop4): invalid crc value
[  205.222076][ T8629] F2FS-fs (loop4): Found nat_bits in checkpoint
[  205.356740][ T8629] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  205.380004][ T8629] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  205.544655][   T13] hid (null): report_id 0 is invalid
[  205.556509][   T13] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0xd
[  205.568701][   T13] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0
[  205.577649][   T13] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0
[  205.585623][   T13] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0
[  205.593446][   T13] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0
[  205.601850][   T13] nzxt-kraken2 0003:1E71:170E.0009: unknown main item tag 0x0
[  205.615478][   T13] nzxt-kraken2 0003:1E71:170E.0009: report_id 0 is invalid
[  205.627590][   T13] nzxt-kraken2 0003:1E71:170E.0009: item 0 0 1 8 parsing failed
[  205.640021][   T13] nzxt-kraken2 0003:1E71:170E.0009: hid parse failed with -22
[  205.655339][   T13] nzxt-kraken2: probe of 0003:1E71:170E.0009 failed with error -22
[  205.738516][ T8647] loop0: detected capacity change from 0 to 40427
[  205.773634][ T8647] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  205.812579][ T5038] usb 4-1: USB disconnect, device number 14
[  205.814864][ T8647] F2FS-fs (loop0): invalid crc value
[  205.853996][ T8647] F2FS-fs (loop0): Found nat_bits in checkpoint
[  205.951600][ T8647] F2FS-fs (loop0): recover fsync data on readonly fs
[  205.979303][ T8647] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  205.999543][ T8647] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  206.032030][ T8647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  206.180876][ T8660] loop2: detected capacity change from 0 to 40427
[  206.221445][ T8660] F2FS-fs (loop2): invalid crc value
[  206.302152][ T8660] F2FS-fs (loop2): Found nat_bits in checkpoint
[  206.519866][ T8660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  206.738416][ T8682] loop4: detected capacity change from 0 to 4096
[  206.766461][ T8687] loop0: detected capacity change from 0 to 1024
[  206.803097][ T4188] attempt to access beyond end of device
[  206.803097][ T4188] loop2: rw=2049, want=45104, limit=40427
[  206.903321][ T8682] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  207.417685][ T5047] hid-generic 0000:FFFFFFFE:0800.000A: unknown main item tag 0x0
[  207.479880][ T5047] hid-generic 0000:FFFFFFFE:0800.000A: unknown main item tag 0x0
[  207.562980][ T5047] hid-generic 0000:FFFFFFFE:0800.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  207.605400][ T8721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'.
[  207.756823][ T8722] fido_id[8722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  207.849069][ T8724] loop3: detected capacity change from 0 to 4096
[  208.069148][ T8724] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  208.354089][ T8751] loop2: detected capacity change from 0 to 64
[  208.567492][ T8751] hfs: request for non-existent node 131072 in B*Tree
[  208.594607][ T8751] hfs: request for non-existent node 131072 in B*Tree
[  209.176107][ T8754] loop3: detected capacity change from 0 to 32768
[  209.344121][ T8754] XFS (loop3): Mounting V5 Filesystem
[  209.426525][ T8754] XFS (loop3): Ending clean mount
[  209.457804][ T8754] XFS (loop3): Quotacheck needed: Please wait.
[  209.633887][ T8754] XFS (loop3): Quotacheck: Done.
[  209.767805][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.790284][ T4187] XFS (loop3): Unmounting Filesystem
[  209.851371][ T8768] loop0: detected capacity change from 0 to 40427
[  209.941148][ T8768] F2FS-fs (loop0): invalid crc value
[  210.028455][ T8768] F2FS-fs (loop0): Found nat_bits in checkpoint
[  210.149024][ T8768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  210.322787][ T4185] attempt to access beyond end of device
[  210.322787][ T4185] loop0: rw=2049, want=45104, limit=40427
[  210.337265][ T7426] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  210.594449][ T7426] usb 5-1: Using ep0 maxpacket: 16
[  210.713933][ T7426] usb 5-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  210.734190][ T7426] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.771618][ T7426] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024
[  210.803446][ T7426] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  210.832637][ T7426] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  211.024055][ T7426] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  211.053813][ T7426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.061879][ T7426] usb 5-1: Product: syz
[  211.103838][ T7426] usb 5-1: Manufacturer: syz
[  211.122216][ T7426] usb 5-1: SerialNumber: syz
[  211.184186][ T8791] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  211.245348][ T8814] loop0: detected capacity change from 0 to 2048
[  211.303098][ T8817] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.554049][ T7426] usb 5-1: MIDIStreaming interface descriptor not found
[  211.611260][ T7426] usb 5-1: USB disconnect, device number 11
[  211.712202][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.774653][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.916985][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.429237][ T8775] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.438510][ T8775] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.447453][ T8775] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.456529][ T8775] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.620863][ T5038] lo speed is unknown, defaulting to 1000
[  212.703911][ T8775] syz.2.1801 (8775) used greatest stack depth: 19472 bytes left
[  213.046131][ T8854] loop4: detected capacity change from 0 to 256
[  213.101686][ T8860] loop2: detected capacity change from 0 to 8
[  213.185605][ T8860] SQUASHFS error: Failed to read block 0x26067d: -5
[  213.192963][ T8860] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  213.233551][ T8860] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  213.476816][ T4201] block nbd1: Receive control failed (result -32)
[  213.656996][ T8889] loop2: detected capacity change from 0 to 256
[  213.934005][ T4201] block nbd2: Receive control failed (result -32)
[  214.120256][ T8921] loop2: detected capacity change from 0 to 512
[  214.199732][ T8921] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,quota,nodiscard,stripe=0x0000000000000009,barrier,,errors=continue. Quota mode: writeback.
[  214.237149][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1862'.
[  214.246242][ T8921] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  214.263454][ T8921] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 3: comm syz.2.1858: lblock 8 mapped to illegal pblock 3 (length 26)
[  214.325714][ T8934] loop3: detected capacity change from 0 to 512
[  214.390064][ T8934] EXT4-fs (loop3): orphan cleanup on readonly fs
[  214.396796][ T8934] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  214.407773][ T8934] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  214.432046][ T8934] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1864: attempt to clear invalid blocks 2 len 1
[  214.483461][ T8934] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1864: invalid indirect mapped block 1819239214 (level 0)
[  214.508739][ T8934] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1864: invalid indirect mapped block 1819239214 (level 1)
[  214.595003][ T8934] EXT4-fs (loop3): 1 truncate cleaned up
[  214.603025][ T8934] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback.
[  214.643607][ T8934] EXT4-fs (loop3): shut down requested (2)
[  214.853898][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'.
[  215.159114][ T8975] sch_tbf: burst 3936 is lower than device lo mtu (65550) !
[  215.245950][ T8981] 9pnet: Insufficient options for proto=fd
[  215.273806][ T5047] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  215.703993][ T5047] usb 5-1: unable to get BOS descriptor or descriptor too short
[  215.728696][ T8997] loop2: detected capacity change from 0 to 512
[  215.784008][ T5047] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.802457][ T8983] loop0: detected capacity change from 0 to 32768
[  215.809307][ T8997] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  215.819521][ T5047] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  215.891879][ T8997] EXT4-fs (loop2): 1 truncate cleaned up
[  215.900316][ T8997] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,nombcache,max_batch_time=0x0000000000000006,nouid32,noinit_itable,auto_da_alloc,,errors=continue. Quota mode: none.
[  216.021597][ T5047] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  216.044056][ T5047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.077856][ T5047] usb 5-1: Product: syz
[  216.097948][ T5047] usb 5-1: Manufacturer: syz
[  216.111783][ T5047] usb 5-1: SerialNumber: syz
[  216.168311][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'.
[  216.196505][ T5047] usb 5-1: selecting invalid altsetting 1
[  216.202858][ T5047] usb 5-1: unit 6 not found!
[  216.285355][ T9005] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.404478][ T5047] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3
[  216.440304][ T5047] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2)
[  216.534054][ T5047] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  216.621659][ T4890] udevd[4890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  216.754644][    T7] usb 5-1: USB disconnect, device number 12
[  217.056046][ T9008] loop2: detected capacity change from 0 to 32768
[  217.123881][ T9008] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1898 (9008)
[  217.184341][ T9008] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  217.213607][ T9008] BTRFS info (device loop2): using free space tree
[  217.233914][ T9008] BTRFS info (device loop2): has skinny extents
[  217.416780][ T9008] BTRFS info (device loop2): enabling ssd optimizations
[  217.985030][ T9054] mkiss: ax0: crc mode is auto.
[  218.114780][ T9058] loop0: detected capacity change from 0 to 256
[  218.174802][ T9058] exfat: Deprecated parameter 'utf8'
[  218.180288][ T9058] exfat: Deprecated parameter 'utf8'
[  218.196124][ T9058] exfat: Deprecated parameter 'namecase'
[  218.323117][ T9058] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  218.532998][ T9061] loop4: detected capacity change from 0 to 32768
[  218.577583][ T9061] XFS: ikeep mount option is deprecated.
[  218.694479][ T9061] XFS (loop4): Mounting V5 Filesystem
[  218.772875][ T9061] XFS (loop4): Ending clean mount
[  218.788117][ T9061] XFS (loop4): Quotacheck needed: Please wait.
[  218.947919][ T9076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1916'.
[  218.963854][ T9076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1916'.
[  218.983186][ T9061] XFS (loop4): Quotacheck: Done.
[  219.021286][ T9076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1916'.
[  219.116690][ T4807] XFS (loop4): Unmounting Filesystem
[  219.494237][ T9093] loop3: detected capacity change from 0 to 2048
[  219.690240][ T9093] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  219.937939][ T9101] loop2: detected capacity change from 0 to 64
[  220.149395][ T9085] loop0: detected capacity change from 0 to 32768
[  220.165010][ T9105] loop3: detected capacity change from 0 to 512
[  220.223047][ T9100] Trying to free block not in datazone
[  220.275872][ T9105] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,quota,nodiscard,stripe=0x0000000000000009,barrier,,errors=continue. Quota mode: writeback.
[  220.325424][ T9105] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  220.392921][ T9105] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.1926: lblock 8 mapped to illegal pblock 3 (length 26)
[  220.596329][ T9111] loop2: detected capacity change from 0 to 2048
[  220.730828][ T9111] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noinit_itable,dioread_nolock,init_itable,,errors=continue. Quota mode: none.
[  220.784044][ T9111] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.841316][ T9111] fs-verity (loop2, inode 18): Unknown hash algorithm number: 0
[  221.140256][ T9103] loop4: detected capacity change from 0 to 32768
[  221.188709][ T9103] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1920 (9103)
[  221.284496][ T9103] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  221.345696][ T9103] BTRFS info (device loop4): using free space tree
[  221.405094][ T9103] BTRFS info (device loop4): has skinny extents
[  221.520158][ T9143] loop3: detected capacity change from 0 to 128
[  221.549809][ T9143] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  221.606117][ T9143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.765747][ T8987] Set syz1 is full, maxelem 65536 reached
[  221.800669][ T9103] BTRFS info (device loop4): enabling ssd optimizations
[  222.555953][ T9193] syz.0.1961 (9193) used greatest stack depth: 19248 bytes left
[  222.603400][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1963'.
[  222.631064][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1963'.
[  222.661702][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1963'.
[  222.681388][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1963'.
[  222.751401][ T9203] loop3: detected capacity change from 0 to 128
[  222.840557][ T9203] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  222.974887][ T9209] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  223.023511][ T4174] lo speed is unknown, defaulting to 1000
[  223.094800][ T9215] loop3: detected capacity change from 0 to 512
[  223.205833][ T9215] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  223.220612][ T9215] ext4 filesystem being mounted at /416/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.507401][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1977'.
[  223.539958][ T9229] loop3: detected capacity change from 0 to 4096
[  223.541180][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1977'.
[  223.564157][  T150] block nbd0: Possible stuck request ffff888020a78000: control (read@0,4096B). Runtime 90 seconds
[  223.592521][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1977'.
[  223.602915][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1977'.
[  223.646136][ T9243] loop4: detected capacity change from 0 to 64
[  223.664498][ T9229] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  223.854195][ T9251] overlayfs: failed to resolve './file0': -2
[  223.941164][ T9254] loop2: detected capacity change from 0 to 512
[  224.054267][ T9254] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  224.071788][ T9254] ext4 filesystem being mounted at /374/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.212519][ T9269] Set syz1 is full, maxelem 0 reached
[  224.487316][ T9282] loop2: detected capacity change from 0 to 512
[  224.537909][ T9282] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  224.617623][ T9282] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1998: invalid indirect mapped block 256 (level 2)
[  224.652232][ T9282] EXT4-fs (loop2): 2 truncates cleaned up
[  224.663631][ T9282] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback.
[  224.700592][ T9290] loop4: detected capacity change from 0 to 4096
[  224.827040][ T9285] loop3: detected capacity change from 0 to 8192
[  224.908458][ T9285] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  225.257612][ T9313] syz.4.2010 (9313): /proc/9312/oom_adj is deprecated, please use /proc/9312/oom_score_adj instead.
[  225.484805][ T9322] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2015'.
[  225.525810][ T9322] netem: invalid attributes len -24
[  225.531231][ T9322] netem: change failed
[  225.747786][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2023'.
[  225.777879][ T9337] device erspan0 entered promiscuous mode
[  225.799174][ T9337] device gretap0 entered promiscuous mode
[  225.829724][ T9337] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  225.837620][ T9337] Cannot create hsr debugfs directory
[  225.865721][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  225.887099][ T9309] loop2: detected capacity change from 0 to 40427
[  225.943529][ T9309] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  225.993344][ T9309] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  226.053630][ T9309] F2FS-fs (loop2): invalid crc value
[  226.124283][ T9309] F2FS-fs (loop2): Found nat_bits in checkpoint
[  226.318528][ T9364] loop3: detected capacity change from 0 to 128
[  226.345484][ T9309] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  226.352676][ T9309] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  226.410488][ T9364] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  226.479349][ T9364] hpfs: filesystem error: improperly stopped
[  226.504220][ T9352] attempt to access beyond end of device
[  226.504220][ T9352] loop2: rw=2049, want=45104, limit=40427
[  226.543773][ T9364] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  226.551596][ T9364] hpfs: You really don't want any checks? You are crazy...
[  226.574065][ T9364] hpfs: hpfs_map_sector(): read error
[  226.579821][ T9364] hpfs: code page support is disabled
[  226.594482][ T9364] hpfs: hpfs_map_4sectors(): unaligned read
[  226.608615][ T9368] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  226.623797][ T9368] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  226.639119][ T9364] hpfs: hpfs_map_4sectors(): unaligned read
[  226.649098][ T9372] F2FS-fs (loop2): access invalid blkaddr:4043309056
[  226.664604][ T9364] hpfs: filesystem error: unable to find root dir
[  226.681381][ T9372] CPU: 0 PID: 9372 Comm: syz.2.2011 Not tainted syzkaller #0
[  226.688907][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  226.699113][ T9372] Call Trace:
[  226.702418][ T9372]  <TASK>
[  226.705382][ T9372]  dump_stack_lvl+0x188/0x250
[  226.710118][ T9372]  ? show_regs_print_info+0x20/0x20
[  226.715547][ T9372]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  226.721406][ T9372]  ? unlock_page+0x17c/0x1f0
[  226.726041][ T9372]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  226.731467][ T9372]  f2fs_map_blocks+0xc34/0x3630
[  226.736394][ T9372]  ? f2fs_force_buffered_io+0x680/0x680
[  226.741990][ T9372]  ? xa_load+0x276/0x2a0
[  226.746281][ T9372]  f2fs_mpage_readpages+0xcaf/0x22a0
[  226.751635][ T9372]  ? dquot_release_reservation_block+0xa0/0xa0
[  226.757835][ T9372]  ? f2fs_is_compress_backend_ready+0x99/0x120
[  226.764014][ T9372]  ? f2fs_readahead+0x163/0x2f0
[  226.768918][ T9372]  ? f2fs_set_data_page_dirty+0xae0/0xae0
[  226.774769][ T9372]  read_pages+0x172/0x920
[  226.779144][ T9372]  ? page_cache_ra_unbounded+0x8f0/0x8f0
[  226.784822][ T9372]  ? add_to_page_cache_lru+0x2ad/0x4a0
[  226.790426][ T9372]  page_cache_ra_unbounded+0x7f4/0x8f0
[  226.795951][ T9372]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  226.802582][ T9372]  ? blk_cgroup_congested+0x30b/0x390
[  226.808004][ T9372]  f2fs_readdir+0x496/0xd90
[  226.812544][ T9372]  ? schedule+0x132/0x1e0
[  226.816933][ T9372]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  226.822174][ T9372]  ? end_current_label_crit_section+0x14b/0x170
[  226.828460][ T9372]  ? iterate_dir+0x10d/0x550
[  226.833106][ T9372]  ? down_read_killable+0x1ce/0x340
[  226.838342][ T9372]  ? fsnotify_perm+0x254/0x560
[  226.843150][ T9372]  iterate_dir+0x213/0x550
[  226.847606][ T9372]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  226.852847][ T9372]  __se_sys_getdents64+0xf2/0x270
[  226.858000][ T9372]  ? __x64_sys_getdents64+0x80/0x80
[  226.863241][ T9372]  ? filldir+0x700/0x700
[  226.867532][ T9372]  ? lockdep_hardirqs_on+0x94/0x140
[  226.872774][ T9372]  do_syscall_64+0x4c/0xa0
[  226.877223][ T9372]  ? clear_bhb_loop+0x30/0x80
[  226.881934][ T9372]  ? clear_bhb_loop+0x30/0x80
[  226.886650][ T9372]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  226.892590][ T9372] RIP: 0033:0x7fdfd3910e99
[  226.897041][ T9372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.916776][ T9372] RSP: 002b:00007fdfd1b48028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  226.925356][ T9372] RAX: ffffffffffffffda RBX: 00007fdfd3b99090 RCX: 00007fdfd3910e99
[  226.933453][ T9372] RDX: 000000000000005e RSI: 0000200000000280 RDI: 0000000000000005
[  226.941500][ T9372] RBP: 00007fdfd39a6eaf R08: 0000000000000000 R09: 0000000000000000
[  226.949508][ T9372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.957622][ T9372] R13: 00007fdfd3b99128 R14: 00007fdfd3b99090 R15: 00007fff67a995f8
[  226.965647][ T9372]  </TASK>
[  226.968770][    C0] vkms_vblank_simulate: vblank timer overrun
[  226.974349][ T9368] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  227.004245][ T9368] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  227.044217][ T9372] attempt to access beyond end of device
[  227.044217][ T9372] loop2: rw=524288, want=45072, limit=40427
[  227.054519][ T9368] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  227.064729][ T9372] attempt to access beyond end of device
[  227.064729][ T9372] loop2: rw=0, want=45072, limit=40427
[  227.096821][ T9368] ntfs: volume version 3.1.
[  227.140884][ T9368] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  227.200259][ T9368] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  227.233924][ T9368] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  227.255561][ T9368] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  227.283126][ T9368] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  227.440193][ T5047] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  227.623263][ T9399] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  227.711651][ T9402] i2c i2c-0: new_device: Missing parameters
[  227.808045][ T9409] 9pnet: Insufficient options for proto=fd
[  227.814448][ T5047] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  227.826003][ T9407] netlink: 'syz.2.2050': attribute type 2 has an invalid length.
[  227.834537][ T5047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.903088][ T5047] usb 4-1: config 0 descriptor??
[  227.956031][ T5047] gspca_main: cpia1-2.14.0 probing 0813:0001
[  228.384453][ T5038] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  228.394121][ T5047] gspca_cpia1: usb_control_msg 03, error -32
[  228.433917][ T5047] gspca_cpia1: usb_control_msg 03, error -71
[  228.463971][ T5047] gspca_cpia1: usb_control_msg 01, error -71
[  228.470036][ T5047] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  228.492876][ T5047] usb 4-1: USB disconnect, device number 15
[  228.623803][ T5038] usb 3-1: Using ep0 maxpacket: 32
[  228.743973][ T5038] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  228.834646][ T5038] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  228.848768][ T5038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  228.857275][ T5038] usb 3-1: SerialNumber: syz
[  228.979626][ T9450] set_capacity_and_notify: 2 callbacks suppressed
[  228.979642][ T9450] loop3: detected capacity change from 0 to 128
[  229.604727][ T9477] loop4: detected capacity change from 0 to 512
[  229.620576][ T5038] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[  229.648780][ T9477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  229.712090][ T9477] EXT4-fs (loop4): 1 truncate cleaned up
[  229.730841][ T9477] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[  229.813659][ T5038] usb 3-1: USB disconnect, device number 14
[  229.820888][ T5038] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[  230.204663][ T5910] Bluetooth: hci2: command 0x040e tx timeout
[  230.262306][ T9472] loop3: detected capacity change from 0 to 32768
[  230.414759][ T9472] XFS (loop3): Mounting V5 Filesystem
[  230.626881][ T9525] loop2: detected capacity change from 0 to 128
[  230.642704][ T9472] XFS (loop3): Starting recovery (logdev: internal)
[  230.656665][ T9525] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  230.671256][ T9525] hpfs: filesystem error: improperly stopped
[  230.678014][ T9525] hpfs: You really don't want any checks? You are crazy...
[  230.689625][ T9525] hpfs: hpfs_map_sector(): read error
[  230.700084][ T9525] hpfs: code page support is disabled
[  230.711018][ T9525] hpfs: hpfs_map_4sectors(): unaligned read
[  230.717715][ T9525] hpfs: hpfs_map_4sectors(): unaligned read
[  230.725863][ T9525] hpfs: filesystem error: unable to find root dir
[  230.732831][ T9472] XFS (loop3): Ending recovery (logdev: internal)
[  230.931802][ T9533] loop4: detected capacity change from 0 to 64
[  231.092122][ T4187] XFS (loop3): Unmounting Filesystem
[  231.682759][ T9561] loop4: detected capacity change from 0 to 512
[  231.871700][ T9561] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  231.903852][ T9561] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.180515][ T9536] loop2: detected capacity change from 0 to 32768
[  232.213185][ T9592] loop0: detected capacity change from 0 to 256
[  232.264185][ T9536] XFS: attr2 mount option is deprecated.
[  232.313002][ T9592] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.394862][ T9592] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  232.449165][ T9592] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d)
[  232.488041][ T9536] XFS (loop2): Mounting V5 Filesystem
[  232.520435][ T9601] loop4: detected capacity change from 0 to 512
[  232.595376][ T9536] XFS (loop2): Ending clean mount
[  232.631553][ T9536] XFS (loop2): Quotacheck needed: Please wait.
[  232.867247][ T9536] XFS (loop2): Quotacheck: Done.
[  233.050238][ T4188] XFS (loop2): Unmounting Filesystem
[  233.096986][ T9609] loop0: detected capacity change from 0 to 4096
[  233.156967][ T9617] __nla_validate_parse: 3 callbacks suppressed
[  233.156983][ T9617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2117'.
[  233.226677][ T9609] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  233.286895][ T9609] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  233.580187][ T4185] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  233.628672][ T4185] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  233.712227][ T9640] program syz.4.2129 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  234.145733][ T9663] set_capacity_and_notify: 2 callbacks suppressed
[  234.145750][ T9663] loop3: detected capacity change from 0 to 2048
[  234.209519][ T5910] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  234.338930][ T9663] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #2: comm syz.3.2138: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  234.357966][    C1] vkms_vblank_simulate: vblank timer overrun
[  234.392772][ T9663] EXT4-fs (loop3): get root inode failed
[  234.399311][ T9663] EXT4-fs (loop3): mount failed
[  234.505055][ T5910] usb 3-1: Using ep0 maxpacket: 8
[  234.548866][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): nr16: link becomes ready
[  234.653998][ T5910] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  234.684443][ T5910] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  234.717717][ T5910] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  234.750132][ T5910] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  234.779566][ T5910] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  234.839572][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.083448][ T9709] netlink: 'syz.4.2158': attribute type 1 has an invalid length.
[  235.121013][ T9709] netlink: 'syz.4.2158': attribute type 2 has an invalid length.
[  235.129485][ T5910] usb 3-1: GET_CAPABILITIES returned 0
[  235.136897][ T5910] usbtmc 3-1:16.0: can't read capabilities
[  235.366380][ T5910] usb 3-1: USB disconnect, device number 15
[  235.672480][ T9739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2170'.
[  235.764918][ T9728] loop3: detected capacity change from 0 to 32768
[  235.795342][ T9728] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2166 (9728)
[  235.831314][ T9728] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  235.850623][ T9728] BTRFS info (device loop3): setting nodatasum
[  235.864002][ T9728] BTRFS info (device loop3): force zlib compression, level 3
[  235.875731][ T9743] loop4: detected capacity change from 0 to 4096
[  235.881285][ T9728] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  235.932878][ T9728] BTRFS info (device loop3): use lzo compression, level 0
[  235.971110][ T9728] BTRFS info (device loop3): turning on flush-on-commit
[  235.975028][ T9743] EXT4-fs (loop4): Test dummy encryption mode enabled
[  235.988526][ T9743] EXT4-fs (loop4): Ignoring removed oldalloc option
[  236.017018][ T9728] BTRFS info (device loop3): enabling auto defrag
[  236.032829][ T9743] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003]
[  236.053660][ T9747] loop2: detected capacity change from 0 to 1024
[  236.056367][ T9743] System zones: 
[  236.073023][ T9728] BTRFS info (device loop3): max_inline at 4096
[  236.103775][ T9743] 0-5
[  236.110761][ T9747] EXT4-fs (loop2): Ignoring removed bh option
[  236.115660][ T9743] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  236.136339][ T9747] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  236.149817][ T9728] BTRFS info (device loop3): using free space tree
[  236.203800][ T9728] BTRFS info (device loop3): has skinny extents
[  236.281777][ T9747] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,norecovery,bsddf,dioread_nolock,. Quota mode: none.
[  236.507754][ T9728] BTRFS info (device loop3): enabling ssd optimizations
[  237.223827][ T5052] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  237.292663][ T9807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2190'.
[  237.463925][ T5052] usb 3-1: Using ep0 maxpacket: 16
[  237.583983][ T5052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.595835][ T5052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.608694][ T5052] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  237.621923][ T5052] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  237.631307][ T5052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.649109][ T5052] usb 3-1: config 0 descriptor??
[  237.891781][ T9813] netlink: 'syz.1.2193': attribute type 62 has an invalid length.
[  237.901046][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2193'.
[  238.101367][ T9826] loop4: detected capacity change from 0 to 512
[  238.114723][ T9826] EXT4-fs (loop4): Unrecognized mount option "obj_user=ext4" or missing value
[  238.141679][ T5052] microsoft 0003:045E:07DA.000B: No inputs registered, leaving
[  238.165568][ T5052] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  238.177228][ T5052] microsoft 0003:045E:07DA.000B: no inputs found
[  238.183607][ T5052] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway
[  238.338716][ T5052] usb 3-1: USB disconnect, device number 16
[  238.344422][ T1110] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  238.430188][ T9837] loop4: detected capacity change from 0 to 764
[  238.754097][ T1110] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  238.764254][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.874042][ T1110] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  238.883178][ T1110] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  238.898716][ T1110] usb 4-1: Manufacturer: syz
[  238.922816][ T1110] usb 4-1: config 0 descriptor??
[  239.063892][ T1110] rc_core: IR keymap rc-hauppauge not found
[  239.069892][ T1110] Registered IR keymap rc-empty
[  239.089105][ T1110] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  239.105340][ T1110] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20
[  239.204109][ T1110] usb 4-1: USB disconnect, device number 16
[  239.218143][ T9870] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[  239.736805][ T4228] wlan0: Trigger new scan to find an IBSS to join
[  239.991723][ T9908] fuse: Bad value for 'fd'
[  240.289045][ T9924] loop2: detected capacity change from 0 to 1024
[  240.481886][ T9933] loop0: detected capacity change from 0 to 256
[  240.518114][ T9924] hfsplus: catalog searching failed
[  240.583576][ T9933] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d)
[  240.622201][ T4272] hfsplus: b-tree write err: -5, ino 3
[  240.939482][ T9925] loop4: detected capacity change from 0 to 32768
[  241.022101][ T9948] atomic_op ffff8880205d6998 conn xmit_atomic 0000000000000000
[  241.049211][ T9952] program syz.0.2256 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  241.126960][ T9925] JBD2: Ignoring recovery information on journal
[  241.276891][ T9925] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  241.332016][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'.
[  241.385077][ T4807] ocfs2: Unmounting device (7,4) on (node local)
[  241.918326][ T9986] loop4: detected capacity change from 0 to 4096
[  242.041512][ T9986] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  242.075882][T10002] loop0: detected capacity change from 0 to 1024
[  242.139157][T10002] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  242.220380][T10002] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,dioread_nolock,acl,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none.
[  242.240107][    C1] vkms_vblank_simulate: vblank timer overrun
[  242.255166][T10002] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.327852][T10002] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.2278: lblock 0 mapped to illegal pblock 0 (length 1)
[  242.351433][T10002] EXT4-fs (loop0): Remounting filesystem read-only
[  242.517134][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2295'.
[  242.656998][T10021] loop3: detected capacity change from 0 to 4096
[  242.684387][ T4211] wlan0: Trigger new scan to find an IBSS to join
[  242.699995][T10027] loop2: detected capacity change from 0 to 2048
[  242.729496][T10023] loop4: detected capacity change from 0 to 4096
[  242.778446][T10021] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  242.808940][T10027] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled
[  242.881523][T10023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  242.935478][T10027] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback.
[  242.953421][T10021] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  242.966321][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'.
[  242.979543][T10027] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.217642][ T4187] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22.
[  243.258317][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'.
[  243.267596][ T4187] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22.
[  243.571372][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2303'.
[  243.626437][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2303'.
[  243.736911][T10064] device erspan0 entered promiscuous mode
[  243.742774][T10070] loop0: detected capacity change from 0 to 1024
[  243.764485][T10064] device gretap0 entered promiscuous mode
[  243.786305][T10064] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  243.812993][T10064] Cannot create hsr debugfs directory
[  243.845149][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  244.002249][T10081] loop3: detected capacity change from 0 to 1024
[  244.114822][T10081] hfsplus: catalog searching failed
[  244.194935][ T4211] hfsplus: b-tree write err: -5, ino 3
[  244.644272][T10120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2327'.
[  244.652042][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2330'.
[  244.671484][T10120] netem: invalid attributes len -24
[  244.684582][T10120] netem: change failed
[  244.715864][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2330'.
[  244.820222][T10128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2333'.
[  245.408673][T10136] smpboot: CPU 1 is now offline
[  245.664569][ T4272] wlan0: Trigger new scan to find an IBSS to join
[  246.780038][ T4211] wlan0: Creating new IBSS network, BSSID 12:ed:7c:4c:f0:6a
[  246.821890][T10148] loop0: detected capacity change from 0 to 512
[  246.828603][T10146] loop3: detected capacity change from 0 to 4096
[  246.924955][ T9201] Bluetooth: hci2: command 0x040e tx timeout
[  246.971624][T10148] EXT4-fs (loop0): 1 truncate cleaned up
[  247.009645][T10146] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  247.027837][T10148] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  247.122467][T10154] pimreg1: tun_chr_ioctl cmd 1074025677
[  247.182959][T10154] pimreg1: linktype set to 0
[  247.543762][ T5910] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  247.768955][T10173] tap0: tun_chr_ioctl cmd 1074025673
[  247.903996][ T5910] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  247.930225][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.961649][T10175] netlink: 'syz.3.2354': attribute type 11 has an invalid length.
[  247.992229][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'.
[  248.013811][ T1110] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  248.069025][ T5910] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  248.118896][ T5910] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  248.167293][ T5910] usb 5-1: Manufacturer: syz
[  248.199926][ T5910] usb 5-1: config 0 descriptor??
[  248.273748][ T1110] usb 3-1: Using ep0 maxpacket: 16
[  248.292026][T10165] loop0: detected capacity change from 0 to 32768
[  248.348991][T10165] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2347 (10165)
[  248.374492][ T5910] rc_core: IR keymap rc-hauppauge not found
[  248.380421][ T5910] Registered IR keymap rc-empty
[  248.406159][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.431640][ T5910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  248.466879][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.496039][T10165] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  248.517381][ T5910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21
[  248.538259][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  248.559354][T10165] BTRFS info (device loop0): setting nodatasum
[  248.590099][T10165] BTRFS info (device loop0): force zlib compression, level 3
[  248.614223][ T5910] usb 5-1: USB disconnect, device number 13
[  248.623575][ T1110] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  248.647774][T10165] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  248.665144][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.685194][T10165] BTRFS info (device loop0): use lzo compression, level 0
[  248.704880][ T1110] usb 3-1: config 0 descriptor??
[  248.748466][T10165] BTRFS info (device loop0): turning on flush-on-commit
[  248.782529][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'.
[  248.797261][T10165] BTRFS info (device loop0): enabling auto defrag
[  248.816401][T10165] BTRFS info (device loop0): max_inline at 4096
[  248.827383][T10190] netlink: 580 bytes leftover after parsing attributes in process `syz.1.2358'.
[  248.850106][T10165] BTRFS info (device loop0): using free space tree
[  248.877750][T10165] BTRFS info (device loop0): has skinny extents
[  248.996775][T10165] BTRFS info (device loop0): enabling ssd optimizations
[  249.195113][ T1110] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max
[  249.257970][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.316787][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.358911][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.385270][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2367'.
[  249.405020][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.412272][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.430081][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2367'.
[  249.452486][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.472660][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.500311][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.528021][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.551141][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.572105][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.591517][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.605370][ T1110] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  249.654272][ T1110] microsoft 0003:045E:07DA.000C: No inputs registered, leaving
[  249.678551][ T1110] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  249.708199][ T1110] microsoft 0003:045E:07DA.000C: no inputs found
[  249.726466][ T1110] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway
[  250.245698][ T5905] usb 3-1: USB disconnect, device number 17
[  251.592268][ T5905] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  251.675701][T10233] loop0: detected capacity change from 0 to 32768
[  251.710117][ T5905] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  251.800975][T10233] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2364 (10233)
[  252.005322][T10233] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  252.090929][T10233] BTRFS info (device loop0): using free space tree
[  252.163802][T10233] BTRFS info (device loop0): has skinny extents
[  252.393348][T10233] BTRFS info (device loop0): enabling ssd optimizations
[  252.624306][T10245] loop2: detected capacity change from 0 to 32768
[  252.783942][T10245] XFS (loop2): Mounting V5 Filesystem
[  253.458049][T10245] XFS (loop2): Ending clean mount
[  253.644367][ T1202] block nbd0: Possible stuck request ffff888020a78000: control (read@0,4096B). Runtime 120 seconds
[  253.832497][ T4188] XFS (loop2): Unmounting Filesystem
[  254.193302][T10345] loop0: detected capacity change from 0 to 64
[  254.305072][T10345] MINIX-fs: mounting file system with errors, running fsck is recommended
[  254.479201][T10351] loop4: detected capacity change from 0 to 1024
[  254.632261][T10351] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none.
[  254.788998][T10351] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.807493][ T5910] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  255.031449][T10351] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2402: bg 0: block 112: padding at end of block bitmap is not set
[  255.157015][T10351] EXT4-fs (loop4): Remounting filesystem read-only
[  255.224060][ T5910] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  255.253603][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.290723][ T5910] usb 4-1: config 0 descriptor??
[  255.492962][T10382] loop4: detected capacity change from 0 to 256
[  255.565626][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.571993][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.586733][ T1421] clip:clip_start_xmit: skb_dst(skb) == NULL
[  255.823819][ T5910] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f
[  255.851282][ T5910] hackrf 4-1:0.0: Could not detect board
[  255.899547][ T5910] hackrf: probe of 4-1:0.0 failed with error -71
[  255.936899][ T5910] usb 4-1: USB disconnect, device number 17
[  256.731492][T10416] overlayfs: invalid origin (0000)
[  256.902476][T10414] loop4: detected capacity change from 0 to 8192
[  256.983092][T10414] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  257.025492][T10420] autofs4:pid:10420:autofs_fill_super: could not open pipe file descriptor
[  257.042766][T10386] loop2: detected capacity change from 0 to 40427
[  257.067870][T10414] REISERFS (device loop4): using ordered data mode
[  257.137514][T10386] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  257.173779][T10414] reiserfs: using flush barriers
[  257.237082][T10386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  257.248482][T10414] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  257.318126][T10386] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6
[  257.363184][T10410] loop3: detected capacity change from 0 to 32768
[  257.376141][T10414] REISERFS (device loop4): checking transaction log (loop4)
[  257.391612][T10386] F2FS-fs (loop2): invalid crc value
[  257.440102][T10414] REISERFS (device loop4): Using r5 hash to sort names
[  257.452607][T10410] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  257.462375][T10386] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  257.503469][T10414] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  257.527375][T10410] JBD2: Ignoring recovery information on journal
[  257.544775][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'.
[  257.603369][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2437'.
[  257.697959][T10410] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  257.900580][T10386] F2FS-fs (loop2): Start checkpoint disabled!
[  258.041355][T10386] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  258.051540][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  258.087087][T10386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  258.420039][T10386] attempt to access beyond end of device
[  258.420039][T10386] loop2: rw=10241, want=45104, limit=40427
[  258.718761][    T9] attempt to access beyond end of device
[  258.718761][    T9] loop2: rw=2049, want=45112, limit=40427
[  258.804708][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2442'.
[  259.088797][T10457] loop4: detected capacity change from 0 to 512
[  259.204234][T10457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  259.358181][T10457] fs-verity: sha256 using implementation "sha256-avx2"
[  259.387118][T10457] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #13: comm syz.4.2449: verity is only allowed on extent-based files
[  259.859322][T10477] loop2: detected capacity change from 0 to 64
[  259.975158][T10477] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  260.104554][T10477] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  leaving read-only.
[  260.197313][ T1110] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  260.401746][T10496] loop2: detected capacity change from 0 to 256
[  260.493879][T10496] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  260.583855][ T1110] usb 5-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config
[  260.620910][ T1110] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  260.727549][ T1110] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  260.754717][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  260.782223][ T1110] usb 5-1: SerialNumber: syz
[  261.089864][ T1110] usb 5-1: 0:2 : does not exist
[  261.099334][ T1110] usb 5-1: unit 5 not found!
[  261.132431][ T1110] usb 5-1: USB disconnect, device number 14
[  261.482467][T10522] program syz.3.2478 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  261.586979][T10520] loop2: detected capacity change from 0 to 8192
[  261.611885][T10526] loop3: detected capacity change from 0 to 512
[  261.668239][T10520] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  261.776372][T10526] EXT4-fs (loop3): corrupt root inode, run e2fsck
[  261.803216][T10520] REISERFS (device loop2): using ordered data mode
[  261.833643][T10526] EXT4-fs (loop3): mount failed
[  261.874078][T10520] reiserfs: using flush barriers
[  261.937029][T10520] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  261.957954][T10526] autofs4:pid:10526:autofs_fill_super: could not open pipe file descriptor
[  262.108119][T10520] REISERFS (device loop2): checking transaction log (loop2)
[  262.211606][T10520] REISERFS (device loop2): Using r5 hash to sort names
[  262.304072][T10520] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  262.671257][T10547] loop3: detected capacity change from 0 to 256
[  262.775995][T10547] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  263.023447][T10550] i2c i2c-0: new_device: Can't parse I2C address
[  263.484900][T10560] netem: change failed
[  263.839701][T10574] loop0: detected capacity change from 0 to 2048
[  263.903640][T10538] loop4: detected capacity change from 0 to 32768
[  263.928230][T10574] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  263.989303][ T4890] udevd[4890]: incorrect nilfs2 checksum on /dev/loop0
[  264.025156][T10538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2484 (10538)
[  264.090671][T10585] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.282633][T10538] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  264.423978][T10538] BTRFS info (device loop4): setting nodatasum
[  264.492119][T10538] BTRFS info (device loop4): force zlib compression, level 3
[  264.623480][T10538] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  264.684150][T10600] netlink: 'syz.0.2504': attribute type 1 has an invalid length.
[  264.729751][T10538] BTRFS info (device loop4): use lzo compression, level 0
[  264.753872][T10600] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2504'.
[  264.809689][T10538] BTRFS info (device loop4): turning on flush-on-commit
[  264.923357][T10538] BTRFS info (device loop4): enabling auto defrag
[  264.985896][T10538] BTRFS info (device loop4): max_inline at 4096
[  265.064423][T10538] BTRFS info (device loop4): using free space tree
[  265.071087][T10538] BTRFS info (device loop4): has skinny extents
[  265.185419][T10613] loop0: detected capacity change from 0 to 128
[  265.287080][T10613] EXT4-fs (loop0): Ignoring removed nobh option
[  265.739349][T10613] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none.
[  265.825302][T10613] ext4 filesystem being mounted at /434/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  265.962253][T10613] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop0' because it doesn't have stable inode numbers
[  266.319515][T10639] loop3: detected capacity change from 0 to 16
[  266.361911][T10639] erofs: (device loop3): mounted with root inode @ nid 36.
[  266.480190][T10538] BTRFS error (device loop4): open_ctree failed: -12
[  267.577037][T10674] loop9: detected capacity change from 0 to 7
[  267.624960][    C0] print_req_error: 29 callbacks suppressed
[  267.624973][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.641792][    C0] buffer_io_error: 29 callbacks suppressed
[  267.641805][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  267.752366][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.763461][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  267.852145][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.863143][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  267.943629][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.954650][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  268.037508][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.048558][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  268.126273][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.137438][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  268.174313][T10660] loop0: detected capacity change from 0 to 40427
[  268.189264][T10666] loop3: detected capacity change from 0 to 32768
[  268.195874][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2538'.
[  268.222581][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2538'.
[  268.233085][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.244141][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  268.263760][T10660] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  268.270959][T10660] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  268.279324][ T4890] ldm_validate_partition_table(): Disk read failed.
[  268.298467][T10690] netlink: 'syz.1.2538': attribute type 19 has an invalid length.
[  268.316948][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.328013][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  268.351670][T10660] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x1ffff
[  268.380930][T10660] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8
[  268.404497][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.415474][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  268.465699][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  268.476797][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  268.539276][T10660] F2FS-fs (loop0): invalid crc value
[  268.544687][ T4890] Dev loop9: unable to read RDB block 0
[  268.571579][T10696] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2541'.
[  268.590461][T10666] JBD2: Ignoring recovery information on journal
[  268.599034][ T4890]  loop9: unable to read partition table
[  268.632576][ T4890] loop9: partition table beyond EOD, truncated
[  268.642537][T10660] F2FS-fs (loop0): Found nat_bits in checkpoint
[  268.745026][T10674] ldm_validate_partition_table(): Disk read failed.
[  268.777927][T10677] loop4: detected capacity change from 0 to 32768
[  268.801033][T10666] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  268.822731][T10674] Dev loop9: unable to read RDB block 0
[  268.862074][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'.
[  268.903394][T10674]  loop9: unable to read partition table
[  268.959368][T10677] overlayfs: failed to clone lowerpath
[  268.974766][T10660] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  268.987449][T10674] loop9: partition table beyond EOD, truncated
[  269.053807][T10660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  269.105048][T10674] loop_reread_partitions: partition scan of loop9 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  269.195628][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  269.471768][ T4185] attempt to access beyond end of device
[  269.471768][ T4185] loop0: rw=2049, want=45104, limit=40427
[  270.090590][T10726] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2553'.
[  270.292870][T10732] program syz.3.2556 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  270.446721][T10735] loop4: detected capacity change from 0 to 64
[  270.821580][T10744] loop3: detected capacity change from 0 to 16
[  270.885285][T10744] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  270.919596][T10739] loop0: detected capacity change from 0 to 8192
[  271.049864][T10739] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  271.140853][T10739] REISERFS (device loop0): using ordered data mode
[  271.221995][T10739] reiserfs: using flush barriers
[  271.280376][T10739] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  271.345479][T10752] loop4: detected capacity change from 0 to 2048
[  271.416138][T10739] REISERFS (device loop0): checking transaction log (loop0)
[  271.526742][T10739] REISERFS (device loop0): Using r5 hash to sort names
[  271.579262][T10739] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  272.686777][T10781] loop3: detected capacity change from 0 to 128
[  272.820809][T10781] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  272.848641][T10784] loop0: detected capacity change from 0 to 256
[  272.924318][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  272.924330][   T26] audit: type=1800 audit(2000000058.619:57): pid=10784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2580" name="file1" dev="loop0" ino=1048682 res=0 errno=0
[  272.987493][T10781] hpfs: filesystem error: improperly stopped
[  272.993543][T10781] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  273.088509][T10781] hpfs: You really don't want any checks? You are crazy...
[  273.132344][T10781] hpfs: Code page index out of array
[  273.190735][T10781] hpfs: code page support is disabled
[  273.228210][T10781] hpfs: hpfs_map_4sectors(): unaligned read
[  273.283842][T10781] hpfs: hpfs_map_4sectors(): unaligned read
[  273.301057][T10764] loop2: detected capacity change from 0 to 32768
[  273.342660][T10781] hpfs: filesystem error: unable to find root dir
[  273.424719][T10781] hpfs: hpfs_map_4sectors(): unaligned read
[  273.530264][T10781] hpfs: hpfs_map_sector(): read error
[  273.537638][T10764] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  273.581504][T10768] loop4: detected capacity change from 0 to 32768
[  273.751891][T10768] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  273.918130][T10809] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2590'.
[  273.972380][T10808] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  273.996175][T10768] JBD2: Ignoring recovery information on journal
[  274.055268][T10808] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  274.137144][T10808] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  274.170074][T10768] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  274.192648][T10808] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  274.270866][T10808] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  274.301973][T10768] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  274.302096][T10768] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  274.338684][ T4188] ocfs2: Unmounting device (7,2) on (node local)
[  274.352449][T10808] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  274.410569][T10808] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  274.439520][T10808] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  274.470906][T10768] OCFS2: Returning error to the calling process.
[  274.543143][T10768] (syz.4.2573,10768,0):ocfs2_setattr:1302 ERROR: status = -117
[  274.618358][T10817] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  274.618444][T10817] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  274.860283][T10817] OCFS2: Returning error to the calling process.
[  274.916588][T10817] (syz.4.2573,10817,0):ocfs2_calc_xattr_init:642 ERROR: status = -117
[  274.973322][T10817] (syz.4.2573,10817,0):ocfs2_mknod:334 ERROR: status = -117
[  275.064072][T10817] (syz.4.2573,10817,0):ocfs2_mknod:502 ERROR: status = -117
[  275.173816][T10817] (syz.4.2573,10817,0):ocfs2_create:676 ERROR: status = -117
[  275.454358][ T4807] ocfs2: Unmounting device (7,4) on (node local)
[  275.674839][T10836] loop3: detected capacity change from 0 to 4096
[  275.772419][T10836] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  275.899994][T10848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2608'.
[  275.983835][T10848] sch_fq: defrate 0 ignored.
[  276.218873][T10850] loop2: detected capacity change from 0 to 2048
[  276.404949][T10855] loop3: detected capacity change from 0 to 4096
[  276.647218][T10863] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2614'.
[  276.666051][T10865] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.740908][T10864] loop2: detected capacity change from 0 to 1764
[  276.809945][    T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  276.880537][T10842] loop0: detected capacity change from 0 to 32768
[  277.069964][T10842] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  277.396962][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[  279.031913][T10900] loop0: detected capacity change from 0 to 40427
[  279.128986][T10900] F2FS-fs (loop0): invalid crc value
[  279.188084][T10900] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  279.588389][T10900] F2FS-fs (loop0): Start checkpoint disabled!
[  279.697822][T10900] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e7
[  279.862547][T10917] loop2: detected capacity change from 0 to 40427
[  279.940576][  T154] attempt to access beyond end of device
[  279.940576][  T154] loop0: rw=2049, want=45104, limit=40427
[  279.979846][T10923] loop3: detected capacity change from 0 to 32768
[  280.010572][T10917] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  280.109617][T10917] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  280.142371][T10923] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  280.253214][T10917] F2FS-fs (loop2): invalid crc value
[  280.350691][T10917] F2FS-fs (loop2): Found nat_bits in checkpoint
[  280.502206][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  280.832286][T10917] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  280.891441][T10917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  281.079872][T10917] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  281.204667][T10980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  281.211937][T10980] IPv6: NLM_F_CREATE should be set when creating new route
[  281.219415][T10980] IPv6: NLM_F_CREATE should be set when creating new route
[  281.226642][T10980] IPv6: NLM_F_CREATE should be set when creating new route
[  281.287938][T10984] loop3: detected capacity change from 0 to 2048
[  281.351364][T10984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.380780][T10980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  281.718294][T10992] loop0: detected capacity change from 0 to 1024
[  281.786170][T10992] EXT4-fs (loop0): Ignoring removed oldalloc option
[  281.871226][T10992] EXT4-fs (loop0): Ignoring removed bh option
[  281.957564][T10992] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,oldalloc,stripe=0x0000000000000010,bh,inode_readahead_blks=0x0000000000000800,,errors=continue. Quota mode: none.
[  282.080592][T11007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2673'.
[  282.208561][T11005] loop3: detected capacity change from 0 to 8192
[  282.381057][T11005]  loop3: p1 < > p2 < > p3 p4 < >
[  282.416560][T11005] loop3: partition table partially beyond EOD, truncated
[  282.503621][T11005] loop3: p1 start 67108864 is beyond EOD, truncated
[  282.612698][T11005] loop3: p3 start 100859904 is beyond EOD, truncated
[  282.656039][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2678'.
[  282.720048][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2665'.
[  282.756758][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2678'.
[  282.835081][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2665'.
[  282.962348][T11020] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2665'.
[  283.159782][ T7248] udevd[7248]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  283.177535][ T4890] udevd[4890]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  283.378174][ T4890] udevd[4890]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  283.390944][ T7248] udevd[7248]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  283.723987][ T1202] block nbd0: Possible stuck request ffff888020a78000: control (read@0,4096B). Runtime 150 seconds
[  284.179375][T11061] loop4: detected capacity change from 0 to 16
[  284.193093][T11043] loop0: detected capacity change from 0 to 32768
[  284.227386][T11061] erofs: (device loop4): mounted with root inode @ nid 36.
[  284.364673][T11061] overlayfs: failed to clone lowerpath
[  284.831516][T11051] loop2: detected capacity change from 0 to 32768
[  284.960380][T11051] 
[  284.960380][T11051]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  284.960380][T11051] 
[  285.233059][T11084] loop3: detected capacity change from 0 to 2048
[  285.254046][ T4228] ERROR: (device loop2): diWrite: ixpxd invalid
[  285.254046][ T4228] 
[  285.338089][T11084] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  285.357223][ T4228] ERROR: (device loop2): txCommit: 
[  285.357223][ T4228] 
[  285.401900][ T7248] udevd[7248]: incorrect nilfs2 checksum on /dev/loop3
[  285.409151][ T4228] jfs_write_inode: jfs_commit_inode failed!
[  285.463858][T11084] NILFS (loop3): mounting unchecked fs
[  285.487134][ T4188] 
[  285.487134][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.487134][ T4188] 
[  285.548947][T11084] NILFS (loop3): recovery complete
[  285.584055][ T4188] 
[  285.584055][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.584055][ T4188] 
[  285.600508][T11091] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  286.469434][T11112] loop0: detected capacity change from 0 to 2048
[  286.572479][T11114] loop3: detected capacity change from 0 to 512
[  286.604107][   T13] Bluetooth: hci4: command 0x0405 tx timeout
[  286.666453][T11112] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  286.764948][T11114] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  286.791619][T11112] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.950407][T11112] fs-verity: sha512 using implementation "sha512-avx2"
[  287.182562][T11134] loop4: detected capacity change from 0 to 128
[  287.311926][T11134] EXT4-fs (loop4): Test dummy encryption mode enabled
[  287.430222][T11134] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  287.563980][   T27] INFO: task udevd:4372 blocked for more than 143 seconds.
[  287.571340][   T27]       Not tainted syzkaller #0
[  287.627805][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.661574][T11134] ext4 filesystem being mounted at /476/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  287.708647][   T27] task:udevd           state:D stack:23280 pid: 4372 ppid:  3557 flags:0x00004002
[  287.746227][   T27] Call Trace:
[  287.764532][   T27]  <TASK>
[  287.792776][   T27]  __schedule+0x11c3/0x4350
[  287.824440][   T27]  ? release_firmware_map_entry+0x190/0x190
[  287.857558][   T27]  ? preempt_schedule+0xbc/0xd0
[  287.872525][   T27]  ? preempt_schedule_common+0xa5/0xd0
[  287.887405][   T27]  ? release_firmware_map_entry+0x190/0x190
[  287.901560][   T27]  ? preempt_schedule+0xbc/0xd0
[  287.917043][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  287.936673][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  287.951314][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  287.973222][   T27]  ? lock_chain_count+0x20/0x20
[  287.987256][   T27]  schedule+0x11b/0x1e0
[  287.998370][   T27]  io_schedule+0x7c/0xd0
[  288.008659][   T27]  wait_on_page_bit_common+0x8bf/0xeb0
[  288.023251][   T27]  ? wait_on_page_bit+0x50/0x50
[  288.037028][   T27]  ? blkdev_fallocate+0x4a0/0x4a0
[  288.043503][T11134] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  288.057656][   T27]  ? rcu_lock_release+0x20/0x20
[  288.062638][   T27]  do_read_cache_page+0xae6/0x1010
[  288.069978][   T27]  read_part_sector+0xd7/0x4c0
[  288.083761][   T27]  ? vsnprintf+0x14e/0x1c20
[  288.091915][   T27]  adfspart_check_ICS+0xc3/0xe90
[  288.104999][   T27]  ? vsnprintf+0x1b22/0x1c20
[  288.118335][   T27]  ? adfspart_check_ADFS+0x840/0x840
[  288.128743][   T27]  ? snprintf+0xe5/0x140
[  288.141593][   T27]  ? vscnprintf+0x80/0x80
[  288.150872][   T27]  bdev_disk_changed+0x936/0x1690
[  288.164407][   T27]  ? blk_drop_partitions+0x1b0/0x1b0
[  288.183382][   T27]  ? iput+0x345/0x880
[  288.192054][   T27]  blkdev_get_whole+0x2f9/0x390
[  288.209201][   T27]  blkdev_get_by_dev+0x2da/0xa50
[  288.223730][   T27]  blkdev_open+0x128/0x2c0
[  288.237682][   T27]  ? block_ioctl+0xf0/0xf0
[  288.246693][   T27]  do_dentry_open+0x7f7/0xf90
[  288.263748][   T27]  path_openat+0x2718/0x2fb0
[  288.273146][   T27]  ? __kasan_slab_alloc+0xa9/0xc0
[  288.283351][T11134] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  288.293567][   T27]  ? do_filp_open+0x400/0x400
[  288.301876][   T27]  do_filp_open+0x1df/0x400
[  288.307387][   T27]  ? vfs_tmpfile+0x300/0x300
[  288.317667][   T27]  ? _raw_spin_unlock+0x24/0x40
[  288.329377][   T27]  ? alloc_fd+0x59e/0x650
[  288.341061][   T27]  do_sys_openat2+0x14b/0x500
[  288.350153][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  288.361550][   T27]  ? do_sys_open+0xe0/0xe0
[  288.379288][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  288.390722][   T27]  ? lock_chain_count+0x20/0x20
[  288.404502][   T27]  __x64_sys_openat+0x135/0x160
[  288.419063][   T27]  do_syscall_64+0x4c/0xa0
[  288.427793][   T27]  ? clear_bhb_loop+0x30/0x80
[  288.432822][ T4807] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /476/mnt/lost+found: directory fails checksum at offset 6144
[  288.451842][   T27]  ? clear_bhb_loop+0x30/0x80
[  288.456849][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  288.462851][   T27] RIP: 0033:0x7f8f41c12407
[  288.470832][   T27] RSP: 002b:00007ffdee7383d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  288.480880][ T4807] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum
[  288.500925][   T27] RAX: ffffffffffffffda RBX: 00007f8f41b24880 RCX: 00007f8f41c12407
[  288.511410][   T27] RDX: 00000000000a0800 RSI: 0000556371f70900 RDI: ffffffffffffff9c
[  288.523267][   T27] RBP: 0000556371f5f910 R08: 0000000000000000 R09: 0000000000000000
[  288.531564][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000556371f74830
[  288.547664][   T27] R13: 0000556371f7e930 R14: 0000000000000000 R15: 0000556371f74830
[  288.559871][ T4807] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /476/mnt/lost+found: directory fails checksum at offset 6144
[  288.578264][   T27]  </TASK>
[  288.581911][   T27] 
[  288.581911][   T27] Showing all locks held in the system:
[  288.591617][   T27] 1 lock held by khungtaskd/27:
[  288.611291][   T27]  #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  288.629566][ T4807] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum
[  288.643536][   T27] 2 locks held by getty/3941:
[  288.651633][   T27]  #0: ffff88814cc01098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  288.662439][   T27]  #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50
[  288.677498][ T4807] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /476/mnt/lost+found: directory fails checksum at offset 6144
[  288.698377][   T27] 1 lock held by udevd/4372:
[  288.703097][   T27]  #0: ffff8880206e3518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x162/0xa50
[  288.713632][   T27] 2 locks held by syz-executor/4807:
[  288.723191][   T27] 
[  288.739185][   T27] =============================================
[  288.739185][   T27] 
[  288.750350][ T4807] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum
[  288.775979][   T27] NMI backtrace for cpu 0
[  288.780324][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  288.787605][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  288.797658][   T27] Call Trace:
[  288.800933][   T27]  <TASK>
[  288.803876][   T27]  dump_stack_lvl+0x188/0x250
[  288.808564][   T27]  ? show_regs_print_info+0x20/0x20
[  288.813769][   T27]  ? load_image+0x410/0x410
[  288.818283][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  288.823678][   T27]  ? nmi_cpu_backtrace+0x1b2/0x3d0
[  288.828797][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  288.833756][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  288.839915][   T27]  ? _printk+0xda/0x130
[  288.844079][   T27]  ? load_image+0x410/0x410
[  288.848594][   T27]  ? load_image+0x410/0x410
[  288.853106][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  288.859195][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  288.865176][   T27]  watchdog+0xe1b/0xe60
[  288.869359][   T27]  kthread+0x42e/0x520
[  288.873428][   T27]  ? hungtask_pm_notify+0x40/0x40
[  288.878453][   T27]  ? kthread_blkcg+0xd0/0xd0
[  288.883040][   T27]  ret_from_fork+0x1f/0x30
[  288.887470][   T27]  </TASK>
[  288.890561][    C0] vkms_vblank_simulate: vblank timer overrun
[  288.920964][ T4807] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /476/mnt/lost+found: directory fails checksum at offset 6144
[  288.941728][ T4807] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum
[  288.959504][ T4807] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /476/mnt/lost+found: directory fails checksum at offset 6144
[  288.978729][ T4807] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum
[  288.992101][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  288.998953][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  289.006149][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  289.016214][   T27] Call Trace:
[  289.019492][   T27]  <TASK>
[  289.022518][   T27]  dump_stack_lvl+0x188/0x250
[  289.027201][   T27]  ? show_regs_print_info+0x20/0x20
[  289.032490][   T27]  ? load_image+0x410/0x410
[  289.037032][   T27]  panic+0x2f8/0x850
[  289.040964][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  289.046632][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  289.051156][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  289.056710][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  289.062874][   T27]  watchdog+0xe5a/0xe60
[  289.067065][   T27]  kthread+0x42e/0x520
[  289.071143][   T27]  ? hungtask_pm_notify+0x40/0x40
[  289.076189][   T27]  ? kthread_blkcg+0xd0/0xd0
[  289.080783][   T27]  ret_from_fork+0x1f/0x30
[  289.085208][   T27]  </TASK>
[  289.088288][   T27] Kernel Offset: disabled
[  289.092617][   T27] Rebooting in 86400 seconds..