last executing test programs:

3m46.98648821s ago: executing program 2 (id=1106):
r0 = socket$phonet(0x23, 0x2, 0x1)
setresuid(0x0, 0xee00, 0x0)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000007c0)=0x6)

3m46.677444985s ago: executing program 2 (id=1109):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x2b1e}, 0x4000)
r0 = io_uring_setup(0x2c93, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000, 0x0, 0x9f8})
io_uring_enter(r0, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18)

3m46.431829085s ago: executing program 2 (id=1113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8040)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

3m46.055136286s ago: executing program 2 (id=1117):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000005900)={[{@force}, {@barrier}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'macgreek'}}, {}, {@force}, {@umask={'umask', 0x3d, 0x399}}, {@type={'type', 0x3d, "3562f949"}}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
utime(&(0x7f0000000080)='./file0\x00', 0x0)

3m45.604924443s ago: executing program 2 (id=1122):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x2, 0x4)

3m44.921419799s ago: executing program 2 (id=1128):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000000)={[{@user_xattr}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
write$UHID_INPUT(r0, &(0x7f0000000d40)={0x8, {"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", 0x1000}}, 0x1006)

3m44.134242123s ago: executing program 32 (id=1128):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000000)={[{@user_xattr}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
write$UHID_INPUT(r0, &(0x7f0000000d40)={0x8, {"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", 0x1000}}, 0x1006)

38.020585548s ago: executing program 5 (id=2754):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00\t'], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

37.190889536s ago: executing program 5 (id=2758):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0)

36.613846933s ago: executing program 5 (id=2762):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x4, 0x9, "fb29af004080010000938a8ad64d7eb4a500ef"})

36.176270049s ago: executing program 5 (id=2766):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

35.149977502s ago: executing program 5 (id=2773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4c080)

33.866001977s ago: executing program 5 (id=2780):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000082, &(0x7f0000000100)={[{@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@rodir}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@utf8no}, {@shortname_mixed}]}, 0x1, 0x353, &(0x7f0000000280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8141, 0x0)
fallocate(r0, 0x10, 0x1, 0x8010000)

33.270368236s ago: executing program 33 (id=2780):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000082, &(0x7f0000000100)={[{@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@rodir}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@utf8no}, {@shortname_mixed}]}, 0x1, 0x353, &(0x7f0000000280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8141, 0x0)
fallocate(r0, 0x10, 0x1, 0x8010000)

4.757537872s ago: executing program 4 (id=2975):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./file0\x00', 0x80, &(0x7f0000000040)={[{@prjquota}, {@uquota}, {@noalign}, {@largeio}, {}, {@inode32}, {@inode32}]}, 0xfe, 0x97d9, &(0x7f000001c700)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020)

4.494219084s ago: executing program 1 (id=2977):
unshare(0x600)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

4.166943931s ago: executing program 1 (id=2980):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4.138678183s ago: executing program 3 (id=2981):
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

3.531802682s ago: executing program 1 (id=2985):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfaa}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.206719859s ago: executing program 6 (id=2988):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r0)

3.083260799s ago: executing program 3 (id=2989):
r0 = socket(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000880)=""/141, 0x8d}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000002dc0)=""/4097, 0x1001}, {&(0x7f00000007c0)=""/147, 0x93}, {&(0x7f0000000980)=""/230, 0xe6}, {&(0x7f0000000700)=""/151, 0x97}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000180)=""/171, 0xab}], 0x8}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8001}], 0x3, 0x2000, 0x0)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002d40)={0x4c, 0x12, 0x905, 0x70bd26, 0x25dfdbfd, {0x1a, 0x9, 0x4, 0x2, {0x4e22, 0x4e22, [0xfffffffb, 0xff, 0x6, 0x7], [0xffffffdd, 0x5, 0x2001, 0xffffff56], 0x0, [0xfffffffe, 0x1000]}, 0x6ca, 0x10001}}, 0x4c}, 0x1, 0x0, 0x0, 0x22004014}, 0x800)

2.835698399s ago: executing program 6 (id=2991):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

2.591783259s ago: executing program 1 (id=2993):
syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file1\x00', 0xa00010, &(0x7f0000000680)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030372c6e6f7374726963742c7569643d69676e6f72652c6769643d666f726765742c6c6f6e6761642c6e6f7672732c756e64656c6574652c6d6f64653d30303030303030303030303030303030303033353031362c646d6f64653d30303030303030303030303030303030303030303031312c00e3cc6abaa52ef118fcbe734b47a6bf66bdd357c81c22ed4c07659e40ba6f24e50fafda55f8d6b01f7fa9505996c5c8e5fac082523b41c69e892f8f3372228da85b089c449c8243489693fc724dc3a34a1c85226b306f86ba0484aad17849d21905bbe3dbc20bf4c98777720c05637db44ef1224790223b183be4cbccef28b6dc7701cf3b6d45babe7a0177b34116f8033c0614d351a01526a5e4626159b2d7a3176575b87ce23efc23d6fc182ecb01ea4d182720d93ab9a99e432ce3c68dcdeec61f9cc21345ccd818e18d6d9c4bb97e0f79e4cfb80641"], 0x1, 0xc56, &(0x7f0000002680)="$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")
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')

2.549186312s ago: executing program 3 (id=2994):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea608641619f36514000cc008002c0107000200060019c00364bc24eab556a705251e618294ff005100000000f4d49302000000a6d0001000000e45916f996b2823b47a", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.511490516s ago: executing program 4 (id=2995):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8, [0x8000, 0xc95a, 0xd, 0xf, 0x3, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x5, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xc23c, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x1c, 0x7, 0x3e, 0x8f, 0x6, 0x6, 0xffffffff, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x402, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x4, 0xd, 0x4e0, 0x2, 0x8, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x7f, 0x3, 0x9, 0x1, 0x3, 0x403, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xb, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x1000, 0xa2, 0x800007, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x9, 0x0, 0xffffff7f, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x5, 0x1ff, 0x5, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x6, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x110000, 0x3, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x9, 0x8, 0x30b1d693, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x8, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.181601293s ago: executing program 3 (id=2997):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4440)

2.142704076s ago: executing program 1 (id=2998):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x1b0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x4, '\x00', @a})

1.60280954s ago: executing program 1 (id=3001):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000180)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x31, 0x4444, &(0x7f000000cd00)="$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")
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x1000000000003, 0x5, 0x8, 0x3, 0x1, {0x5, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)

1.22993343s ago: executing program 6 (id=3002):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5384b9927ce1a186, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r1}, 0x18)

1.181449104s ago: executing program 4 (id=3003):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd85, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x808d0}, 0x24004000)

962.226532ms ago: executing program 6 (id=3004):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x7b, 0x4)

877.918319ms ago: executing program 0 (id=3005):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000040), 0x10)

877.601779ms ago: executing program 4 (id=3006):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000080000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060)

747.902649ms ago: executing program 6 (id=3007):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4080004)

705.046363ms ago: executing program 4 (id=3008):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48)

585.787723ms ago: executing program 0 (id=3009):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x20, 0x12, 0x1, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x300}, [@generic="54fcc321cb8eecf1f1"]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0)

532.635857ms ago: executing program 6 (id=3010):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
syz_usb_disconnect(r0)

440.140075ms ago: executing program 4 (id=3011):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$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")
r0 = open(&(0x7f0000000600)='./file1\x00', 0x41, 0x20)
fallocate(r0, 0x11, 0x2, 0x1001f0)

428.815416ms ago: executing program 3 (id=3012):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb2, &(0x7f00000008c0)="$eJzs1zFqAkEUBuC3G0i2CqQJgRSpt8kdcpSQMjZipQjeQLyIV/EI9hYW24o4ws6KiJ3FCvJ9xcA/Pw9e+1a75eeijkiziFR/DDfpbDSe/P8O8hs8pDIiXiKiioivt5y3P7kruv61mf6tm6fr4ed57/sCAAC3K+P7Mh9S97HvrsA2vJ/6Kp8KraK/NQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu5hgAAP//VS0nxA==")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

390.120359ms ago: executing program 0 (id=3013):
r0 = timerfd_create(0x0, 0x80000)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))

159.148277ms ago: executing program 0 (id=3014):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

113.538301ms ago: executing program 3 (id=3015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000011000000000000001410000001400170000f0fffffffdff6474683a6c"], 0x30}}, 0x0)

97.223413ms ago: executing program 0 (id=3016):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="24000000000000002900000032000000ff0100208689580ca4e9a43e762f38a5cb"], 0x28}}], 0x1, 0x58004)

0s ago: executing program 0 (id=3017):
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)={0x6666666666666ca, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}, {0xc0000001, 0x10000, 0x4, 0x1, 0x203a, 0x9, 0x200}]})

kernel console output (not intermixed with test programs):

: the hint is outside the map
[  323.795418][T10228] 
[  323.807076][T10224] loop1: detected capacity change from 0 to 32768
[  323.819328][T10228] ERROR: (device loop4): remounting filesystem as read-only
[  323.827323][T10228] ialloc: diAlloc returned -5!
[  323.834226][T10224] XFS: noikeep mount option is deprecated.
[  323.850590][T10221] XFS (loop0): Mounting V5 Filesystem
[  323.953652][T10224] XFS (loop1): Mounting V5 Filesystem
[  323.953682][T10222] XFS (loop5): Ending clean mount
[  323.980010][T10222] XFS (loop5): Quotacheck needed: Please wait.
[  324.084747][T10224] XFS (loop1): Ending clean mount
[  324.097250][T10222] XFS (loop5): Quotacheck: Done.
[  324.103380][T10221] XFS (loop0): Ending clean mount
[  324.133937][T10224] XFS (loop1): Quotacheck needed: Please wait.
[  324.142194][T10221] XFS (loop0): Quotacheck needed: Please wait.
[  324.317745][T10221] XFS (loop0): Quotacheck: Done.
[  324.320135][T10224] XFS (loop1): Quotacheck: Done.
[  324.344502][   T26] audit: type=1326 audit(1754051281.558:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  324.452939][ T7484] XFS (loop5): Unmounting Filesystem
[  324.490110][   T26] audit: type=1326 audit(1754051281.558:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  324.512583][    C1] vkms_vblank_simulate: vblank timer overrun
[  324.622125][ T4268] XFS (loop0): Unmounting Filesystem
[  324.633001][ T4264] XFS (loop1): Unmounting Filesystem
[  324.647995][   T26] audit: type=1326 audit(1754051281.598:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  324.727629][   T26] audit: type=1326 audit(1754051281.598:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  324.858038][   T26] audit: type=1326 audit(1754051281.598:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  324.880504][    C1] vkms_vblank_simulate: vblank timer overrun
[  324.953745][   T26] audit: type=1326 audit(1754051281.598:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  324.976613][    C1] vkms_vblank_simulate: vblank timer overrun
[  325.005490][   T26] audit: type=1326 audit(1754051281.598:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  325.028068][    C1] vkms_vblank_simulate: vblank timer overrun
[  325.125128][   T26] audit: type=1326 audit(1754051281.598:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10257 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  325.147796][    C1] vkms_vblank_simulate: vblank timer overrun
[  325.216345][T10250] loop3: detected capacity change from 0 to 32768
[  325.323320][T10250] XFS (loop3): Mounting V5 Filesystem
[  325.474903][T10250] XFS (loop3): Ending clean mount
[  325.552672][   T26] audit: type=1326 audit(1754051282.768:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.0.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4f98eb69 code=0x7ffc0000
[  325.667695][   T26] audit: type=1326 audit(1754051282.798:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.0.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3b4f98eb69 code=0x7ffc0000
[  325.744325][ T4274] XFS (loop3): Unmounting Filesystem
[  325.880011][T10260] loop4: detected capacity change from 0 to 40427
[  326.020052][T10260] F2FS-fs (loop4): Found nat_bits in checkpoint
[  326.034076][T10279] loop0: detected capacity change from 0 to 16
[  326.047439][T10279] erofs: (device loop0): mounted with root inode @ nid 36.
[  326.202100][T10260] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  326.456154][ T4277] syz-executor: attempt to access beyond end of device
[  326.456154][ T4277] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  326.669518][T10289] loop5: detected capacity change from 0 to 1024
[  326.834154][ T4356] hfsplus: b-tree write err: -5, ino 4
[  327.277746][ T4309] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  327.447467][T10291] loop0: detected capacity change from 0 to 32768
[  327.468038][ T4309] usb 4-1: Using ep0 maxpacket: 8
[  327.475217][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  327.481097][T10304] loop4: detected capacity change from 0 to 1024
[  327.513039][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  327.536362][ T4309] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  327.573395][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  327.594460][T10304] hfsplus: bad catalog entry type
[  327.613526][ T4309] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  327.625524][T10306] ieee802154 phy0 wpan0: encryption failed: -22
[  327.630825][ T4309] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  327.675184][T10291] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  327.675184][T10291] 
[  327.693191][T10291] ERROR: (device loop0): remounting filesystem as read-only
[  327.706986][ T4309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.725362][T10291] ialloc: diAlloc returned -5!
[  327.739945][ T4309] usb 4-1: config 0 descriptor??
[  327.746582][T10296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  327.785427][ T4308] hfsplus: b-tree write err: -5, ino 4
[  328.203938][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2157'.
[  328.276071][T10314] tipc: Enabled bearer <udp:syz1>, priority 10
[  328.456718][ T5057] usb 4-1: USB disconnect, device number 9
[  328.462199][ T4281] Bluetooth: hci5: Opcode 0x0c03 failed: -19
[  328.932769][T10336] loop1: detected capacity change from 0 to 2048
[  328.972584][T10336] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  329.073152][T10336] UDF-fs: unknown compression code (0)
[  329.097703][ T4329] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  329.300192][ T4329] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.318094][ T4329] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.337637][ T4329] usb 5-1: config 0 interface 0 has no altsetting 0
[  329.344372][ T4329] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  329.367634][ T4329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.377422][ T4329] usb 5-1: config 0 descriptor??
[  329.388100][ T4309] tipc: Node number set to 3758096385
[  329.583507][T10344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2162'.
[  329.630548][T10347] ieee802154 phy0 wpan0: encryption failed: -22
[  329.829355][ T4329] pantherlord 0003:0810:0002.0027: unknown main item tag 0x0
[  329.843545][ T4329] pantherlord 0003:0810:0002.0027: unknown main item tag 0x0
[  329.857627][ T4329] pantherlord 0003:0810:0002.0027: unknown main item tag 0x0
[  329.913887][ T4329] pantherlord 0003:0810:0002.0027: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0
[  329.952897][ T4329] pantherlord 0003:0810:0002.0027: no output reports found
[  330.032423][ T4329] usb 5-1: USB disconnect, device number 17
[  330.272883][T10369] loop0: detected capacity change from 0 to 128
[  330.297459][T10361] fido_id[10361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  330.346102][T10369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  330.382837][T10369] System zones: 1-3, 19-19, 35-36
[  330.425218][T10369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  330.436590][T10369] ext4 filesystem being mounted at /429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  330.494532][T10377] loop3: detected capacity change from 0 to 64
[  330.510635][T10369] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full
[  330.581441][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  330.974847][T10381] loop4: detected capacity change from 0 to 4096
[  331.069236][T10391] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  331.377770][ T4601] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  331.404031][T10395] loop0: detected capacity change from 0 to 4096
[  331.456748][T10395] ntfs3: loop0: ino=3, Correct links count -> 2.
[  331.571202][ T4601] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  331.585887][ T4601] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  331.610005][ T4601] usb 2-1: config 0 has no interface number 0
[  331.616345][ T4601] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  331.645723][ T4601] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  331.661080][T10395] ntfs3: loop0: failed to convert "0080" to cp874
[  331.682006][ T4601] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  331.723457][ T4601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.752269][ T4601] usb 2-1: Product: syz
[  331.765896][ T4601] usb 2-1: Manufacturer: syz
[  331.791115][ T4601] usb 2-1: SerialNumber: syz
[  331.813199][ T4601] usb 2-1: config 0 descriptor??
[  332.005499][T10414] loop3: detected capacity change from 0 to 764
[  332.455820][ T4601] usbtouchscreen: probe of 2-1:0.117 failed with error -71
[  332.494589][ T4601] usb 2-1: USB disconnect, device number 19
[  332.553230][T10426] program syz.0.2200 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.589151][T10428] loop3: detected capacity change from 0 to 512
[  332.638736][T10428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  332.692055][T10428] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  332.712462][T10428] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  332.750880][T10428] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  332.786134][T10428] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  332.803308][T10428] EXT4-fs (loop3): orphan cleanup on readonly fs
[  332.823351][T10428] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2199: bg 0: block 34: padding at end of block bitmap is not set
[  332.853167][T10428] __quota_error: 5 callbacks suppressed
[  332.853186][T10428] Quota error (device loop3): write_blk: dquota write failed
[  332.867623][T10428] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  332.877911][T10428] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.2199: Failed to acquire dquot type 1
[  332.901734][T10410] loop4: detected capacity change from 0 to 32768
[  332.916990][T10428] EXT4-fs (loop3): 1 truncate cleaned up
[  332.948895][T10428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  332.982391][T10410] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  333.061752][T10410] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  333.093529][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  333.370292][T10439] loop0: detected capacity change from 0 to 128
[  333.474357][ T4277] ocfs2: Unmounting device (7,4) on (node local)
[  333.553956][T10424] loop5: detected capacity change from 0 to 32768
[  333.805595][T10424] XFS (loop5): Mounting V5 Filesystem
[  334.030917][T10424] XFS (loop5): Ending clean mount
[  334.394984][T10469] loop1: detected capacity change from 0 to 1024
[  334.405556][ T7484] XFS (loop5): Unmounting Filesystem
[  334.547280][T10469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  334.581258][T10471] loop4: detected capacity change from 0 to 1024
[  334.627727][T10471] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  334.691927][T10471] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  334.713319][T10471] EXT4-fs (loop4): orphan cleanup on readonly fs
[  334.771128][ T4264] EXT4-fs (loop1): unmounting filesystem.
[  334.773469][T10471] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.2217: Inode bitmap for bg 0 marked uninitialized
[  334.854923][T10471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  334.903465][T10471] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  335.089118][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  335.318298][ T4309] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  335.476415][T10477] loop3: detected capacity change from 0 to 32768
[  335.484394][T10495] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2224'.
[  335.516258][T10477] 
[  335.516258][T10477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  335.516258][T10477] 
[  335.529349][ T4309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  335.558029][ T4309] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[  335.584281][ T4309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.670038][ T4309] usb 2-1: config 0 descriptor??
[  335.692216][ T4274] 
[  335.692216][ T4274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  335.692216][ T4274] 
[  335.733726][ T4274] 
[  335.733726][ T4274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  335.733726][ T4274] 
[  335.919456][T10503] loop5: detected capacity change from 0 to 1024
[  335.968804][T10503] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  336.074966][T10503] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  336.099336][ T4309] aquacomputer_d5next 0003:0C70:F00D.0028: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0
[  336.300700][T10516] loop0: detected capacity change from 0 to 8192
[  336.345850][T10516] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  336.357818][ T4309] usb 2-1: USB disconnect, device number 20
[  336.372550][T10516] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  336.382189][ T4600] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  336.403212][T10516] REISERFS (device loop0): using ordered data mode
[  336.423015][T10516] reiserfs: using flush barriers
[  336.455071][ T7484] EXT4-fs (loop5): unmounting filesystem.
[  336.478925][T10516] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  336.516528][T10521] loop3: detected capacity change from 0 to 256
[  336.525763][T10516] REISERFS (device loop0): checking transaction log (loop0)
[  336.548785][T10521] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  336.563420][T10516] REISERFS (device loop0): Using r5 hash to sort names
[  336.571076][ T4600] usb 5-1: Using ep0 maxpacket: 32
[  336.578982][ T4600] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  336.602587][T10516] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  336.647712][ T4600] usb 5-1: config 0 has an invalid interface number: 164 but max is 0
[  336.691733][ T4600] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  336.721940][ T4600] usb 5-1: config 0 has no interface number 0
[  336.747654][ T4600] usb 5-1: config 0 has no interface number 1
[  336.783237][ T4600] usb 5-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30
[  336.836304][ T4600] usb 5-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110
[  336.905679][T10522] fido_id[10522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  336.924283][ T4600] usb 5-1: config 0 interface 50 has no altsetting 0
[  336.952248][ T4600] usb 5-1: config 0 interface 164 has no altsetting 0
[  336.969589][ T4600] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a
[  337.009031][ T4600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.052901][ T4600] usb 5-1: Product: syz
[  337.069833][ T4600] usb 5-1: Manufacturer: syz
[  337.089736][ T4600] usb 5-1: SerialNumber: syz
[  337.129775][ T4600] usb 5-1: config 0 descriptor??
[  337.168699][ T4600] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I
[  337.354449][T10528] loop1: detected capacity change from 0 to 4096
[  337.377635][ T4600] usb 5-1: reset high-speed USB device number 18 using dummy_hcd
[  337.857880][ T4600] usb 5-1: device descriptor read/64, error -71
[  337.925606][T10543] loop5: detected capacity change from 0 to 4096
[  338.053637][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00
[  338.081561][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00
[  338.117017][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00
[  338.130003][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00
[  338.137850][ T4600] usb 5-1: reset high-speed USB device number 18 using dummy_hcd
[  338.139994][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00
[  338.183152][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00
[  338.204204][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00
[  338.220998][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00
[  338.231589][ T4317] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  338.243456][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00
[  338.271484][T10543] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00
[  338.440043][ T4317] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  338.457144][ T4317] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  338.497012][ T4317] usb 4-1: config 220 has an invalid descriptor of length 253, skipping remainder of the config
[  338.517690][ T4317] usb 4-1: config 220 has no interface number 2
[  338.532483][ T4317] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  338.555846][ T4317] usb 4-1: config 220 interface 0 has no altsetting 0
[  338.563098][ T4317] usb 4-1: config 220 interface 76 has no altsetting 0
[  338.571386][ T4600] usb 5-1: failed to restore interface 50 altsetting 4 (error=-71)
[  338.588325][ T4600] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware
[  338.596227][ T4317] usb 4-1: config 220 interface 1 has no altsetting 0
[  338.618873][ T4600] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  338.634031][ T4317] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  338.660315][ T4600] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I
[  338.677628][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.687131][ T4317] usb 4-1: Product: syz
[  338.700916][ T4600] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware
[  338.713743][ T4317] usb 4-1: Manufacturer: syz
[  338.720543][ T4317] usb 4-1: SerialNumber: syz
[  338.727132][ T4600] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  338.746828][ T4600] usb 5-1: USB disconnect, device number 18
[  338.866401][ T4601] usb 5-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[  338.890350][ T4601] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[  338.908019][ T4601] kobject_add_internal failed for firmware (error: -2 parent: 5-1)
[  338.917314][ T4601] firmware ueagle-atm!eagleI.fw: fw_load_sysfs_fallback: device_register failed
[  338.934957][   T33] usb 5-1: [UEAGLE-ATM] firmware is not available
[  338.942094][ T4601] usb 5-1: [UEAGLE-ATM] firmware is not available
[  338.961809][ T4317] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  338.969768][ T4317] usb 4-1: No valid video chain found.
[  338.975326][ T4317] usb 4-1: selecting invalid altsetting 0
[  339.015555][ T4317] usb 4-1: selecting invalid altsetting 0
[  339.027658][ T4317] usbtest: probe of 4-1:220.1 failed with error -22
[  339.046252][ T4317] usb 4-1: USB disconnect, device number 10
[  339.257298][T10576] loop5: detected capacity change from 0 to 64
[  339.282185][T10576] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  339.390743][T10580] loop1: detected capacity change from 0 to 128
[  339.445449][T10580] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  339.579969][T10562] loop0: detected capacity change from 0 to 32768
[  339.586691][T10580] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  339.704608][T10562] XFS (loop0): Mounting V5 Filesystem
[  339.817587][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  339.851883][T10562] XFS (loop0): Ending clean mount
[  339.863415][T10598] binder: 10596:10598 ioctl c0306201 2000000003c0 returned -22
[  339.883963][T10562] XFS (loop0): Quotacheck needed: Please wait.
[  340.052793][T10562] XFS (loop0): Quotacheck: Done.
[  340.318072][ T4268] XFS (loop0): Unmounting Filesystem
[  340.528794][T10620] loop1: detected capacity change from 0 to 16
[  340.563287][T10620] erofs: (device loop1): mounted with root inode @ nid 36.
[  340.828039][ T4264] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  340.865181][ T4264] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  340.907077][ T4264] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  341.091786][T10632] loop5: detected capacity change from 0 to 512
[  341.128566][T10632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  341.179210][T10632] EXT4-fs (loop5): orphan cleanup on readonly fs
[  341.200214][T10632] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2287: bg 0: block 248: padding at end of block bitmap is not set
[  341.210639][T10639] loop3: detected capacity change from 0 to 1024
[  341.237302][T10632] Quota error (device loop5): write_blk: dquota write failed
[  341.245825][T10632] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  341.256750][T10632] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.2287: Failed to acquire dquot type 1
[  341.272274][T10639] hfsplus: bad catalog entry type
[  341.322744][T10632] EXT4-fs (loop5): 1 truncate cleaned up
[  341.358162][T10632] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  341.425332][T10632] EXT4-fs error (device loop5): __ext4_remount:6623: comm syz.5.2287: Abort forced by user
[  341.457754][T10632] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  341.458348][   T11] hfsplus: b-tree write err: -5, ino 4
[  341.472887][T10645] loop1: detected capacity change from 0 to 256
[  341.685838][ T7484] EXT4-fs (loop5): unmounting filesystem.
[  341.776101][T10651] loop4: detected capacity change from 0 to 64
[  341.943960][T10651] syz.4.2296: attempt to access beyond end of device
[  341.943960][T10651] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64
[  342.038299][T10651] Buffer I/O error on dev loop4, logical block 512, async page read
[  342.096308][T10651] syz.4.2296: attempt to access beyond end of device
[  342.096308][T10651] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64
[  342.151870][T10651] Buffer I/O error on dev loop4, logical block 56576, async page read
[  342.222205][T10665] loop3: detected capacity change from 0 to 64
[  342.426814][   T26] audit: type=1800 audit(1754051299.638:1449): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2303" name="file1" dev="loop3" ino=18 res=0 errno=0
[  342.500214][T10674] loop4: detected capacity change from 0 to 1024
[  342.600510][T10674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  342.695937][T10681] loop1: detected capacity change from 0 to 512
[  342.752095][T10681] EXT4-fs: Ignoring removed nobh option
[  342.790099][T10681] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.2309: iget: bad i_size value: 38620345925642
[  342.805352][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2311'.
[  342.892454][T10681] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2309: couldn't read orphan inode 15 (err -117)
[  342.902200][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  342.926432][T10681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  343.194603][T10696] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  343.218037][T10696] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  343.224647][T10696] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  343.233952][T10696] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  343.243637][T10696] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  343.251115][T10696] comedi comedi3: 8255: I/O port conflict (0x12,4)
[  343.258113][T10696] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  343.264788][T10696] comedi comedi3: 8255: I/O port conflict (0xd,4)
[  343.272030][T10696] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  343.280223][T10696] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  343.286993][T10696] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  343.296124][T10696] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  343.326781][ T4264] EXT4-fs (loop1): unmounting filesystem.
[  343.362453][T10696] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  343.374519][T10696] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  343.394675][T10696] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  343.417067][T10696] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  343.439654][T10696] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  343.469200][T10696] comedi comedi3: 8255: I/O port conflict (0x80,4)
[  343.484979][T10696] comedi comedi3: 8255: I/O port conflict (0x20001e58,4)
[  343.493871][T10696] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  343.500972][T10696] comedi comedi3: 8255: I/O port conflict (0x2000e67,4)
[  343.508568][T10696] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  343.515221][T10696] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  343.652692][T10708] loop1: detected capacity change from 0 to 256
[  343.756114][T10708] FAT-fs (loop1): Directory bread(block 64) failed
[  343.765329][T10711] virtio-fs: tag </dev/md0> not found
[  343.767692][T10708] FAT-fs (loop1): Directory bread(block 65) failed
[  343.805651][T10708] FAT-fs (loop1): Directory bread(block 66) failed
[  343.845907][T10708] FAT-fs (loop1): Directory bread(block 67) failed
[  343.867789][T10708] FAT-fs (loop1): Directory bread(block 68) failed
[  343.927905][T10708] FAT-fs (loop1): Directory bread(block 69) failed
[  343.938203][T10708] FAT-fs (loop1): Directory bread(block 70) failed
[  343.955114][T10708] FAT-fs (loop1): Directory bread(block 71) failed
[  344.006629][T10708] FAT-fs (loop1): Directory bread(block 72) failed
[  344.048127][T10708] FAT-fs (loop1): Directory bread(block 73) failed
[  344.766714][T10736] loop0: detected capacity change from 0 to 8192
[  345.143741][T10758] loop3: detected capacity change from 0 to 1024
[  345.163807][T10758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  345.215953][T10758] EXT4-fs warning (device loop3): empty_inline_dir:1866: bad inline directory (dir #12) - no `..'
[  345.377634][ T4599] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  345.452048][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  345.582528][ T4599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.643923][ T4599] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  345.668907][ T4599] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  345.688388][ T4599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.700809][T10771] loop5: detected capacity change from 0 to 64
[  345.710636][ T4599] usb 2-1: config 0 descriptor??
[  345.742180][T10771] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  346.025443][T10779] loop4: detected capacity change from 0 to 512
[  346.087302][T10779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  346.116515][T10783] loop5: detected capacity change from 0 to 64
[  346.157435][ T4599] logitech 0003:046D:C29C.0029: unknown main item tag 0x0
[  346.167930][T10779] EXT4-fs (loop4): orphan cleanup on readonly fs
[  346.183645][ T4599] logitech 0003:046D:C29C.0029: unknown main item tag 0x0
[  346.193280][ T4599] logitech 0003:046D:C29C.0029: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0
[  346.196219][T10786] loop3: detected capacity change from 0 to 256
[  346.231206][T10779] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2354: bg 0: block 248: padding at end of block bitmap is not set
[  346.356554][ T4599] logitech 0003:046D:C29C.0029: no inputs found
[  346.371025][ T4599] usb 2-1: USB disconnect, device number 21
[  346.407192][T10779] Quota error (device loop4): write_blk: dquota write failed
[  346.509583][T10779] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  346.534937][T10791] loop5: detected capacity change from 0 to 128
[  346.560777][T10779] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.2354: Failed to acquire dquot type 1
[  346.635348][T10779] EXT4-fs (loop4): 1 truncate cleaned up
[  346.676139][T10779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  346.753958][T10779] EXT4-fs error (device loop4): __ext4_remount:6623: comm syz.4.2354: Abort forced by user
[  346.799595][T10787] fido_id[10787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  346.855602][T10779] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  347.051035][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  347.419985][T10815] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  347.559010][T10819] loop5: detected capacity change from 0 to 256
[  347.568226][T10818] CUSE: DEVNAME unspecified
[  347.832742][T10830] loop4: detected capacity change from 0 to 64
[  347.856107][T10830] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  348.107858][ T4600] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  348.187777][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'.
[  348.505194][ T4600] usb 6-1: config 0 has an invalid interface number: 32 but max is 0
[  348.518023][ T4600] usb 6-1: config 0 has no interface number 0
[  348.524226][ T4600] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  348.557804][ T4600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.568954][ T4600] usb 6-1: config 0 descriptor??
[  348.588832][ T4600] cp210x 6-1:0.32: cp210x converter detected
[  348.980314][ T4600] cp210x 6-1:0.32: failed to get vendor val 0x000e size 3: -71
[  349.005549][ T4600] usb 6-1: cp210x converter now attached to ttyUSB0
[  349.018907][ T4600] usb 6-1: USB disconnect, device number 11
[  349.028022][ T4600] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  349.046650][ T4600] cp210x 6-1:0.32: device disconnected
[  349.544560][   T26] audit: type=1326 audit(1754051306.758:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d898eb69 code=0x7ffc0000
[  349.642765][   T26] audit: type=1326 audit(1754051306.758:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d898eb69 code=0x7ffc0000
[  349.751752][   T26] audit: type=1326 audit(1754051306.788:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff9d898eb69 code=0x7ffc0000
[  349.853416][   T26] audit: type=1326 audit(1754051306.788:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d898eb69 code=0x7ffc0000
[  349.953425][   T26] audit: type=1326 audit(1754051306.788:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d898eb69 code=0x7ffc0000
[  350.067618][   T26] audit: type=1326 audit(1754051306.788:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ff9d898eb69 code=0x7ffc0000
[  350.173806][   T26] audit: type=1326 audit(1754051306.788:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d898eb69 code=0x7ffc0000
[  350.283478][   T26] audit: type=1326 audit(1754051306.788:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10879 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d898eb69 code=0x7ffc0000
[  350.310578][T10894] xt_socket: unknown flags 0x8
[  350.553059][T10867] loop3: detected capacity change from 0 to 32768
[  350.589726][T10874] loop0: detected capacity change from 0 to 32768
[  350.701445][ T4599] XFS (loop3): filesystem is marked as having an internal log; do not specify logdev on the mount command line.
[  350.823243][T10874] find_entry called with index = 0
[  350.969171][T10874] read_mapping_page failed!
[  351.007748][T10874] ERROR: (device loop0): txCommit: 
[  351.007748][T10874] 
[  351.075686][T10916] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2406'.
[  351.414570][T10883] loop4: detected capacity change from 0 to 40427
[  351.500987][T10883] F2FS-fs (loop4): Found nat_bits in checkpoint
[  351.659894][T10883] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  351.754102][T10883] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  351.912094][T10883] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  352.507474][T10956] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  352.617720][ T4329] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  352.807857][ T4329] usb 4-1: Using ep0 maxpacket: 16
[  352.815896][ T4329] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  352.848753][ T4329] usb 4-1: config 0 has no interface number 0
[  352.873598][ T4329] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  352.901180][ T4329] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  352.920328][ T4329] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  352.957642][ T4329] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  352.984803][ T4329] usb 4-1: Product: syz
[  352.999125][ T4329] usb 4-1: SerialNumber: syz
[  353.029831][ T4329] usb 4-1: config 0 descriptor??
[  353.069343][ T4329] cm109 4-1:0.8: invalid payload size 0, expected 4
[  353.105978][ T4329] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input18
[  353.162417][   T26] audit: type=1326 audit(1754051310.378:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  353.307432][   T26] audit: type=1326 audit(1754051310.378:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  353.330015][    C1] vkms_vblank_simulate: vblank timer overrun
[  353.352619][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.353584][ T4599] usb 4-1: USB disconnect, device number 11
[  353.360077][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  353.375719][    C1] vkms_vblank_simulate: vblank timer overrun
[  353.434667][   T26] audit: type=1326 audit(1754051310.378:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  353.436805][ T4599] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  353.511083][   T26] audit: type=1326 audit(1754051310.378:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  353.612067][   T26] audit: type=1326 audit(1754051310.378:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.4.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  353.735021][T10984] loop0: detected capacity change from 0 to 1024
[  353.919363][T10989] usb usb8: usbfs: process 10989 (syz.1.2433) did not claim interface 0 before use
[  354.094279][   T26] audit: type=1326 audit(1754051311.308:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.4.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  354.144845][T10995] loop0: detected capacity change from 0 to 64
[  354.170286][   T26] audit: type=1326 audit(1754051311.308:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.4.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  354.192798][    C1] vkms_vblank_simulate: vblank timer overrun
[  354.231755][   T26] audit: type=1326 audit(1754051311.308:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.4.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  354.338303][   T26] audit: type=1326 audit(1754051311.308:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.4.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  354.361308][    C1] vkms_vblank_simulate: vblank timer overrun
[  354.374891][   T26] audit: type=1326 audit(1754051311.308:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.4.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878338eb69 code=0x7ffc0000
[  354.535322][T11005] loop3: detected capacity change from 0 to 256
[  354.556724][T11005] exfat: Bad value for 'uid'
[  354.677457][T11011] loop4: detected capacity change from 0 to 128
[  355.154509][T11014] loop3: detected capacity change from 0 to 32768
[  355.181434][T11014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2445 (11014)
[  355.223291][T11014] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  355.233612][T11014] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  355.242543][T11014] BTRFS info (device loop3): setting nodatacow, compression disabled
[  355.250783][T11014] BTRFS info (device loop3): max_inline at 0
[  355.257407][T11014] BTRFS info (device loop3): using free space tree
[  355.695476][T11043] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  355.741019][T11014] BTRFS info (device loop3): enabling ssd optimizations
[  355.750370][ T7579] BTRFS warning (device loop3): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x93271da5 level 0
[  355.765857][T11010] loop5: detected capacity change from 0 to 40427
[  355.779390][T11043] CIFS mount error: No usable UNC path provided in device string!
[  355.779390][T11043] 
[  355.789797][T11010] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  355.796852][T11010] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  355.808949][T11010] F2FS-fs (loop5): invalid crc value
[  355.832318][T11043] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  355.872780][T11010] F2FS-fs (loop5): Found nat_bits in checkpoint
[  355.948037][ T4329] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  356.137128][T11010] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  356.147300][T11010] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  356.155026][ T4329] usb 5-1: Using ep0 maxpacket: 32
[  356.162442][ T4329] usb 5-1: config 0 interface 0 has no altsetting 0
[  356.199456][ T4329] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  356.227821][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.243586][T11055] loop1: detected capacity change from 0 to 1024
[  356.247791][ T4329] usb 5-1: Product: syz
[  356.254194][ T4329] usb 5-1: Manufacturer: syz
[  356.279427][ T4329] usb 5-1: SerialNumber: syz
[  356.342822][ T4329] usb 5-1: config 0 descriptor??
[  356.453011][ T4384] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4384)
[  356.580407][ T7579] hfsplus: b-tree write err: -5, ino 4
[  356.586655][ T7484] syz-executor: attempt to access beyond end of device
[  356.586655][ T7484] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  356.773184][ T4329] gs_usb 5-1:0.0: Configuring for 62 interfaces
[  356.784635][ T4329] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  356.825766][ T4329] gs_usb: probe of 5-1:0.0 failed with error -22
[  356.892790][T11066] loop0: detected capacity change from 0 to 2048
[  356.954179][T11069] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  357.009756][ T4329] usb 5-1: USB disconnect, device number 19
[  357.024011][T11071] loop1: detected capacity change from 0 to 256
[  357.072726][T11071] exfat: Deprecated parameter 'utf8'
[  357.100678][T11071] exfat: Deprecated parameter 'utf8'
[  357.187260][T11071] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  357.808050][ T5057] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  357.851902][T11085] device ipvlan3 entered promiscuous mode
[  357.860070][T11085] bridge0: port 3(ipvlan3) entered blocking state
[  357.866747][T11085] bridge0: port 3(ipvlan3) entered disabled state
[  357.892953][T11088] loop4: detected capacity change from 0 to 128
[  357.934495][T11088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  357.954025][T11088] System zones: 1-3, 19-19, 35-36
[  358.005193][T11088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  358.026464][ T5057] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.037439][T11088] ext4 filesystem being mounted at /492/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  358.070622][T11088] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full
[  358.184045][ T5057] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.215994][ T5057] usb 2-1: config 0 interface 0 has no altsetting 0
[  358.246526][ T5057] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  358.272461][ T5057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.298111][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  358.311148][ T5057] usb 2-1: config 0 descriptor??
[  358.710660][T11113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2477'.
[  358.788789][ T5057] pantherlord 0003:0810:0002.002A: unknown main item tag 0x0
[  358.826895][ T5057] pantherlord 0003:0810:0002.002A: unknown main item tag 0x0
[  358.867947][ T5057] pantherlord 0003:0810:0002.002A: unknown main item tag 0x0
[  358.895597][ T5057] pantherlord 0003:0810:0002.002A: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0
[  358.922095][ T5057] pantherlord 0003:0810:0002.002A: no output reports found
[  359.032360][ T4329] usb 2-1: USB disconnect, device number 22
[  359.161600][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2495'.
[  359.191875][T11122] fido_id[11122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  359.753931][T11116] loop0: detected capacity change from 0 to 32768
[  359.786312][T11116] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.2491 (11116)
[  359.796480][T11133] loop3: detected capacity change from 0 to 8192
[  359.827440][T11116] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  359.863342][T11133] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  359.877074][T11133] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  359.887245][T11133] REISERFS (device loop3): using ordered data mode
[  359.894467][T11133] reiserfs: using flush barriers
[  359.901309][T11116] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  359.911393][T11133] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  359.929264][T11116] BTRFS info (device loop0): using free space tree
[  359.944318][T11133] REISERFS (device loop3): checking transaction log (loop3)
[  359.992957][T11133] REISERFS (device loop3): Using r5 hash to sort names
[  360.068006][T11133] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  360.209584][T11127] loop4: detected capacity change from 0 to 32768
[  360.213352][T11152] loop5: detected capacity change from 0 to 4096
[  360.371164][T11127] 
[  360.371164][T11127]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.371164][T11127] 
[  360.467684][T11116] BTRFS info (device loop0): enabling ssd optimizations
[  360.689457][ T4277] 
[  360.689457][ T4277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.689457][ T4277] 
[  360.812953][T11169] loop1: detected capacity change from 0 to 256
[  360.825345][ T4277] 
[  360.825345][ T4277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.825345][ T4277] 
[  360.847788][ T4268] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  360.880682][T11169] exfat: Deprecated parameter 'namecase'
[  361.018588][T11169] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  361.973832][T11167] loop3: detected capacity change from 0 to 32768
[  362.014578][T11167] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11
[  362.362013][ T4384] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11
[  362.525206][T11200] loop5: detected capacity change from 0 to 16
[  362.599537][T11200] erofs: (device loop5): mounted with root inode @ nid 36.
[  362.766542][T11200] syz.5.2509: attempt to access beyond end of device
[  362.766542][T11200] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16
[  362.886007][T11202] loop3: detected capacity change from 0 to 4096
[  362.905347][T11205] syz.5.2509: attempt to access beyond end of device
[  362.905347][T11205] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16
[  362.932464][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  362.962393][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  362.997259][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  363.035109][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  363.095215][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00
[  363.120101][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00
[  363.154435][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00
[  363.187716][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00
[  363.199464][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00
[  363.235061][T11212] loop0: detected capacity change from 0 to 128
[  363.237997][T11202] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00
[  363.284159][T11193] loop4: detected capacity change from 0 to 32768
[  363.471050][T11193] XFS (loop4): Mounting V5 Filesystem
[  363.652342][T11193] XFS (loop4): Ending clean mount
[  363.703416][T11193] XFS (loop4): Quotacheck needed: Please wait.
[  363.921832][T11193] XFS (loop4): Quotacheck: Done.
[  364.113521][ T4277] XFS (loop4): Unmounting Filesystem
[  364.183045][T11231] loop0: detected capacity change from 0 to 4096
[  364.535283][T11241] loop3: detected capacity change from 0 to 512
[  364.683302][T11241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  364.757901][T11241] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  364.876238][T11248] loop5: detected capacity change from 0 to 512
[  364.982365][T11248] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.2528: corrupted in-inode xattr
[  365.128816][T11248] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2528: couldn't read orphan inode 15 (err -117)
[  365.172320][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  365.232669][T11248] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  365.393466][T11248] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #2: comm syz.5.2528: directory missing '.'
[  365.521967][T11259] loop4: detected capacity change from 0 to 2048
[  365.615982][T11262] rdma_op ffff888055ee31f0 conn xmit_rdma 0000000000000000
[  365.616020][T11259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  365.627980][T11237] loop1: detected capacity change from 0 to 32768
[  365.709248][T11237] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  365.827085][T11237] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  365.833994][ T7484] EXT4-fs (loop5): unmounting filesystem.
[  365.854765][T11268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2534'.
[  365.871337][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  365.958476][T11269] UBIFS error (pid: 11269): cannot open "upperdir=./file1,", error -22
[  366.036425][ T4264] ocfs2: Unmounting device (7,1) on (node local)
[  366.172348][T11271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2537'.
[  366.319067][T11278] loop3: detected capacity change from 0 to 1024
[  366.351039][T11278] EXT4-fs: Ignoring removed oldalloc option
[  366.390634][T11278] EXT4-fs: Ignoring removed bh option
[  366.485364][T11278] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  366.765338][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  367.167253][T11306] loop0: detected capacity change from 0 to 256
[  367.245790][T11308] loop4: detected capacity change from 0 to 128
[  367.346798][   T26] audit: type=1800 audit(1754051324.558:1468): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2551" name="file1" dev="loop4" ino=1048748 res=0 errno=0
[  367.957763][T11325] loop3: detected capacity change from 0 to 1024
[  367.978714][T11325] EXT4-fs: Ignoring removed orlov option
[  368.036968][T11325] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  368.133267][T11330] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2560'.
[  368.356185][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  368.750467][T11351] loop4: detected capacity change from 0 to 512
[  368.815111][T11351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  368.845027][T11351] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  368.988349][T11351] EXT4-fs: Cannot change quota options when quota turned on
[  369.182572][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  369.422264][T11328] loop1: detected capacity change from 0 to 32768
[  369.438506][T11369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.511278][T11369] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  369.560759][T11328] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root
[  369.560759][T11328] 
[  369.586469][T11328] ERROR: (device loop1): remounting filesystem as read-only
[  370.180139][T11375] loop4: detected capacity change from 0 to 32768
[  370.188098][T11375] XFS: attr2 mount option is deprecated.
[  370.314661][T11375] XFS (loop4): Mounting V5 Filesystem
[  370.383638][T11360] loop0: detected capacity change from 0 to 32768
[  370.437785][T11059] XFS (loop4): Metadata CRC error detected at xfs_agi_read_verify+0x18d/0x250, xfs_agi block 0x2 
[  370.473479][T11059] XFS (loop4): Unmount and run xfs_repair
[  370.485399][T11389] program syz.3.2582 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  370.501695][T11059] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  370.527671][T11059] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00  XAGI............
[  370.534841][T11360] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  370.560431][T11059] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37  ...@...........7
[  370.580705][T11059] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff  ...@............
[  370.600963][T11059] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  370.627688][T11059] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  370.642955][T11059] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  370.652363][T11059] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  370.661782][T11059] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  370.671437][T11375] XFS (loop4): metadata I/O error in "xfs_read_agi+0x295/0x650" at daddr 0x2 len 1 error 74
[  370.682997][T11375] XFS (loop4): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  370.692730][T11375] XFS (loop4): Failed to read root inode 0x1140, error 117
[  370.840358][T11396] loop1: detected capacity change from 0 to 512
[  370.899110][T11396] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  370.968268][T11396] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  371.022309][T11396] EXT4-fs (loop1): group descriptors corrupted!
[  371.090044][ T4268] ocfs2: Unmounting device (7,0) on (node local)
[  371.228394][ T5057] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  371.427797][ T5057] usb 6-1: Using ep0 maxpacket: 16
[  371.436166][ T5057] usb 6-1: config index 0 descriptor too short (expected 65, got 36)
[  371.496874][ T5057] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.527813][T11059] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  371.549776][ T5057] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  371.572834][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'.
[  371.609790][ T5057] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  371.622956][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2589'.
[  371.652542][ T5057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.664491][T11407] netlink: 'syz.3.2589': attribute type 18 has an invalid length.
[  371.692875][ T5057] usb 6-1: config 0 descriptor??
[  371.720202][ T5057] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19
[  371.738945][T11059] usb 1-1: Using ep0 maxpacket: 32
[  371.764600][T11059] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.814999][T11059] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  371.880874][T11059] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  371.927269][T11059] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  371.957969][T11059] usb 1-1: Product: syz
[  371.962254][T11059] usb 1-1: Manufacturer: syz
[  371.967099][T11059] usb 1-1: SerialNumber: syz
[  371.999676][T11412] loop3: detected capacity change from 0 to 512
[  372.018773][T11059] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input20
[  372.047257][ T5057] usb 6-1: USB disconnect, device number 12
[  372.047364][    C1] pxrc 6-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  372.079428][T11412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  372.198848][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  372.229560][ T9352] usb 1-1: USB disconnect, device number 18
[  372.229667][    C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  372.283725][ T9352] appletouch 1-1:1.0: input: appletouch disconnected
[  372.577028][T11404] loop4: detected capacity change from 0 to 32768
[  372.604859][T11421] loop3: detected capacity change from 0 to 256
[  372.651000][ T9352] XFS (loop4): filesystem is marked as having an internal log; do not specify logdev on the mount command line.
[  372.695990][T11421] exfat: Deprecated parameter 'namecase'
[  372.747958][T11421] exfat: Deprecated parameter 'utf8'
[  372.767758][T11421] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  372.824019][T11421] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  373.130180][T11430] loop5: detected capacity change from 0 to 8192
[  373.319011][T11439] loop3: detected capacity change from 0 to 1024
[  373.398885][T11442] program syz.0.2602 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  373.474850][T11439] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  373.571310][T11447] loop0: detected capacity change from 0 to 256
[  373.579243][T11447] exfat: Deprecated parameter 'utf8'
[  373.608051][T11447] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  374.071327][T11455] program syz.4.2607 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  374.781808][T11452] loop5: detected capacity change from 0 to 32768
[  374.798254][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  374.912528][T11452] XFS (loop5): Mounting V5 Filesystem
[  375.097045][T11452] XFS (loop5): Ending clean mount
[  375.203460][T11490] loop4: detected capacity change from 0 to 512
[  375.249081][T11490] EXT4-fs: Ignoring removed orlov option
[  375.268147][T11490] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  375.328686][ T7484] XFS (loop5): Unmounting Filesystem
[  375.353966][T11490] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  375.426945][T11490] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.2619: corrupted in-inode xattr
[  375.478121][T11490] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2619: couldn't read orphan inode 15 (err -117)
[  375.553050][T11490] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  375.807321][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  376.025796][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'.
[  376.426403][T11507] loop3: detected capacity change from 0 to 32768
[  376.471647][T11507] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  376.479970][T11507] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  376.491393][T11507] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  376.491393][T11507]   inode = 1 19
[  376.491393][T11507]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115
[  376.510300][T11507] gfs2: fsid=syz:syz.0: G:  s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  376.520288][T11507] gfs2: fsid=syz:syz.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[  376.530848][T11507] gfs2: fsid=syz:syz.0:  I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[  376.539473][T11507] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  376.547222][T11507] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  376.556458][T11507] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  376.563192][T11507] gfs2: fsid=syz:syz.0: File system withdrawn
[  376.565569][T11511] loop1: detected capacity change from 0 to 512
[  376.569365][T11507] CPU: 1 PID: 11507 Comm: syz.3.2628 Not tainted 6.1.147-syzkaller #0
[  376.569442][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  376.569466][T11507] Call Trace:
[  376.569473][T11507]  <TASK>
[  376.569483][T11507]  dump_stack_lvl+0x168/0x22e
[  376.569514][T11507]  ? kobject_uevent_env+0x35f/0x8a0
[  376.569545][T11507]  ? show_regs_print_info+0x12/0x12
[  376.569568][T11507]  ? load_image+0x3b0/0x3b0
[  376.569598][T11507]  ? kobject_uevent_env+0x35f/0x8a0
[  376.569637][T11507]  gfs2_withdraw+0x143f/0x1780
[  376.569685][T11507]  ? gfs2_lm+0x220/0x220
[  376.569720][T11507]  ? gfs2_glock_nq+0xcf0/0x14e0
[  376.569758][T11507]  ? gfs2_consist_inode_i+0xf1/0x110
[  376.569796][T11507]  gfs2_jdesc_check+0x137/0x290
[  376.569827][T11507]  init_journal+0xcad/0x2300
[  376.569866][T11507]  ? format_decode+0xb3b/0x1330
[  376.569894][T11507]  ? init_inodes+0xdb/0x320
[  376.569931][T11507]  ? _compound_head+0x120/0x120
[  376.569964][T11507]  ? vsnprintf+0x1905/0x1a00
[  376.570003][T11507]  ? snprintf+0xd7/0x120
[  376.570033][T11507]  ? init_inodes+0xdb/0x320
[  376.570065][T11507]  ? vscnprintf+0x80/0x80
[  376.570093][T11507]  ? gfs2_glock_nq_num+0x17f/0x1c0
[  376.570143][T11507]  init_inodes+0xdb/0x320
[  376.570177][T11507]  gfs2_fill_super+0x1718/0x1f80
[  376.700968][T11507]  ? gfs2_reconfigure+0xcd0/0xcd0
[  376.706041][T11507]  ? init_locking+0xb8/0x200
[  376.710663][T11507]  ? sb_set_blocksize+0xa5/0xe0
[  376.715540][T11507]  get_tree_bdev+0x3f1/0x610
[  376.720177][T11507]  ? gfs2_reconfigure+0xcd0/0xcd0
[  376.725238][T11507]  gfs2_get_tree+0x4d/0x1e0
[  376.729772][T11507]  vfs_get_tree+0x88/0x270
[  376.734221][T11507]  do_new_mount+0x24a/0xa40
[  376.738748][T11507]  __se_sys_mount+0x2d6/0x3c0
[  376.743454][T11507]  ? __x64_sys_mount+0xc0/0xc0
[  376.748241][T11507]  ? lockdep_hardirqs_on+0x94/0x140
[  376.753480][T11507]  ? __x64_sys_mount+0x1c/0xc0
[  376.758270][T11507]  do_syscall_64+0x4c/0xa0
[  376.762797][T11507]  ? clear_bhb_loop+0x60/0xb0
[  376.767531][T11507]  ? clear_bhb_loop+0x60/0xb0
[  376.772257][T11507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  376.778192][T11507] RIP: 0033:0x7fb3b1d9030a
[  376.782645][T11507] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.802300][T11507] RSP: 002b:00007fb3b2b73e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  376.810746][T11507] RAX: ffffffffffffffda RBX: 00007fb3b2b73ef0 RCX: 00007fb3b1d9030a
[  376.818752][T11507] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fb3b2b73eb0
[  376.826835][T11507] RBP: 0000200000000400 R08: 00007fb3b2b73ef0 R09: 0000000000200001
[  376.834830][T11507] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500
[  376.842824][T11507] R13: 00007fb3b2b73eb0 R14: 00000000000125bb R15: 0000200000000480
[  376.850839][T11507]  </TASK>
[  376.853887][    C1] vkms_vblank_simulate: vblank timer overrun
[  376.861062][T11507] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[  376.903936][T11511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  377.011118][T11511] EXT4-fs (loop1): 1 truncate cleaned up
[  377.017450][T11511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  377.180932][T11519] loop5: detected capacity change from 0 to 128
[  377.220253][T11519] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  377.239552][T11521] loop4: detected capacity change from 0 to 164
[  377.286374][ T4264] EXT4-fs (loop1): unmounting filesystem.
[  377.367005][T11519] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  377.542044][T11528] netlink: 'syz.1.2635': attribute type 3 has an invalid length.
[  377.734107][ T7484] EXT4-fs (loop5): unmounting filesystem.
[  378.137494][T11546] loop1: detected capacity change from 0 to 128
[  378.359377][T11551] loop4: detected capacity change from 0 to 256
[  378.450382][T11551] FAT-fs (loop4): Directory bread(block 64) failed
[  378.496830][T11551] FAT-fs (loop4): Directory bread(block 65) failed
[  378.524506][T11551] FAT-fs (loop4): Directory bread(block 66) failed
[  378.565117][T11551] FAT-fs (loop4): Directory bread(block 67) failed
[  378.591833][T11551] FAT-fs (loop4): Directory bread(block 68) failed
[  378.637109][T11551] FAT-fs (loop4): Directory bread(block 69) failed
[  378.653978][T11551] FAT-fs (loop4): Directory bread(block 70) failed
[  378.661682][T11559] loop0: detected capacity change from 0 to 256
[  378.686347][T11551] FAT-fs (loop4): Directory bread(block 71) failed
[  378.696087][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.696140][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.734611][T11529] loop3: detected capacity change from 0 to 32768
[  378.743809][T11559] exfat: Deprecated parameter 'namecase'
[  378.765849][T11551] FAT-fs (loop4): Directory bread(block 72) failed
[  378.808127][T11551] FAT-fs (loop4): Directory bread(block 73) failed
[  378.857365][T11559] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  379.248117][  T952] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  379.405072][T11577] loop3: detected capacity change from 0 to 256
[  379.468163][  T952] usb 2-1: Using ep0 maxpacket: 16
[  379.478789][  T952] usb 2-1: config index 0 descriptor too short (expected 65, got 36)
[  379.519696][  T952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.573224][  T952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  379.608650][  T952] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  379.638451][  T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.675836][  T952] usb 2-1: config 0 descriptor??
[  379.712010][  T952] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21
[  379.961802][  T952] usb 2-1: USB disconnect, device number 23
[  379.985497][ T3622] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  380.074201][T11587] loop4: detected capacity change from 0 to 256
[  380.092149][T11587] exfat: Deprecated parameter 'utf8'
[  380.152394][T11587] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  380.571442][T11597] loop0: detected capacity change from 0 to 4096
[  380.599194][T11594] loop4: detected capacity change from 0 to 4096
[  380.626627][T11597] ntfs: (device loop0): load_attribute_list(): Cannot read attribute list since runlist is missing.
[  380.649524][T11594] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  380.666620][T11599] loop1: detected capacity change from 0 to 8
[  380.683102][T11597] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to load attribute list attribute.
[  380.714305][T11601] loop5: detected capacity change from 0 to 1024
[  380.728158][T11597] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  380.760108][T11601] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  380.761957][T11599] SQUASHFS error: lzo decompression failed, data probably corrupt
[  380.816433][T11597] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  380.827567][T11594] ntfs3: loop4: Failed to load root.
[  380.856273][T11599] SQUASHFS error: Failed to read block 0x91: -5
[  380.869440][T11599] SQUASHFS error: Unable to read metadata cache entry [8f]
[  380.893232][T11599] SQUASHFS error: Unable to read inode 0x11f
[  380.912492][T11597] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  381.022360][T11597] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  381.064961][T11597] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup $DATA attribute.
[  381.095500][T11597] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x3 as bad.  Run chkdsk.
[  381.168843][T11597] ntfs: (device loop0): load_system_files(): Failed to load $Volume.
[  381.237297][T11597] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files.
[  381.274318][T11591] loop3: detected capacity change from 0 to 32768
[  381.339927][T11591] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2666 (11591)
[  381.447830][T11591] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  381.508528][T11591] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  381.517259][T11591] BTRFS info (device loop3): enabling auto defrag
[  381.561229][T11591] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  381.603815][T11591] BTRFS info (device loop3): use zstd compression, level 3
[  381.627177][T11591] BTRFS info (device loop3): force clearing of disk cache
[  381.651105][T11591] BTRFS info (device loop3): max_inline at 0
[  381.683956][T11591] BTRFS info (device loop3): use zlib compression, level 3
[  381.701960][T11591] BTRFS info (device loop3): using free space tree
[  381.868102][  T952] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  381.896236][T11591] BTRFS info (device loop3): enabling ssd optimizations
[  381.944945][T11591] BTRFS info (device loop3): rebuilding free space tree
[  382.020173][T11635] sp0: Synchronizing with TNC
[  382.063868][  T952] usb 2-1: Using ep0 maxpacket: 16
[  382.073475][  T952] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  382.104677][  T952] usb 2-1: config 0 has no interface number 0
[  382.124208][  T952] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  382.169624][  T952] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  382.184084][T11605] loop5: detected capacity change from 0 to 32768
[  382.229910][T11605] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2672 (11605)
[  382.245490][  T952] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  382.276445][  T952] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  382.293064][  T952] usb 2-1: Product: syz
[  382.302333][  T952] usb 2-1: SerialNumber: syz
[  382.309765][T11605] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  382.324229][  T952] usb 2-1: config 0 descriptor??
[  382.358656][T11605] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  382.374673][ T4274] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  382.402002][  T952] cm109 2-1:0.8: invalid payload size 0, expected 4
[  382.411780][T11605] BTRFS info (device loop5): using free space tree
[  382.424843][  T952] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input22
[  382.687527][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.699177][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.706546][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.716596][T11639] loop4: detected capacity change from 0 to 4096
[  382.759019][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.767843][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.775195][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.801285][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.828047][T11639] ntfs3: loop4: ino=3, Correct links count -> 2.
[  382.839347][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.846735][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.897368][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  382.969281][T11605] BTRFS info (device loop5): enabling ssd optimizations
[  382.991973][T11639] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  383.060389][T11639] ntfs3: loop4: failed to convert "0080" to cp932
[  383.126760][T11639] ntfs3: loop4: failed to convert name for inode 1e.
[  383.172905][ T4702] usb 2-1: USB disconnect, device number 24
[  383.179767][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  383.311959][ T4702] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  383.420262][ T7484] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  383.502060][T11667] loop4: detected capacity change from 0 to 256
[  383.535724][T11668] 9pnet_fd: p9_fd_create_unix (11668): problem connecting socket: éq‰Y’3aK: -111
[  383.699132][T11667] FAT-fs (loop4): Directory bread(block 64) failed
[  383.757824][T11667] FAT-fs (loop4): Directory bread(block 65) failed
[  383.769121][T11667] FAT-fs (loop4): Directory bread(block 66) failed
[  383.775817][T11667] FAT-fs (loop4): Directory bread(block 67) failed
[  383.818465][T11667] FAT-fs (loop4): Directory bread(block 68) failed
[  383.825089][T11667] FAT-fs (loop4): Directory bread(block 69) failed
[  383.842730][ T4384] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop5 scanned by udevd (4384)
[  383.912353][T11667] FAT-fs (loop4): Directory bread(block 70) failed
[  383.927434][T11667] FAT-fs (loop4): Directory bread(block 71) failed
[  383.955419][T11667] FAT-fs (loop4): Directory bread(block 72) failed
[  383.985046][T11667] FAT-fs (loop4): Directory bread(block 73) failed
[  383.992098][T11680] loop3: detected capacity change from 0 to 256
[  384.081931][T11680] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  384.312154][T11667] syz.4.2687: attempt to access beyond end of device
[  384.312154][T11667] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  384.398281][T11667] syz.4.2687: attempt to access beyond end of device
[  384.398281][T11667] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256
[  384.865029][T11693] tipc: Enabled bearer <eth:batadv0>, priority 15
[  384.886771][T11695] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2708'.
[  385.209056][ T6565] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  385.369580][T11708] loop3: detected capacity change from 0 to 256
[  385.411291][ T6565] usb 6-1: Using ep0 maxpacket: 16
[  385.424714][ T6565] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  385.443471][T11708] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  385.474931][ T6565] usb 6-1: config 0 has no interface number 0
[  385.487258][ T6565] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  385.499465][T11708] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  385.529568][ T6565] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  385.556729][T11708] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  385.590127][ T6565] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  385.618428][ T6565] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  385.639445][ T6565] usb 6-1: Product: syz
[  385.643707][ T6565] usb 6-1: SerialNumber: syz
[  385.700054][T11690] loop0: detected capacity change from 0 to 32768
[  385.729109][ T6565] usb 6-1: config 0 descriptor??
[  385.770580][ T6565] cm109 6-1:0.8: invalid payload size 0, expected 4
[  385.808977][T11690] XFS (loop0): Mounting V5 Filesystem
[  385.809240][ T6565] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input23
[  385.937689][ T4381] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  386.005710][ T6565] tipc: Node number set to 11552
[  386.027894][    T7] usb 6-1: USB disconnect, device number 13
[  386.027998][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  386.070677][T11690] XFS (loop0): Ending clean mount
[  386.088776][    T7] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  386.120337][T11690] XFS (loop0): Quotacheck needed: Please wait.
[  386.157999][ T4381] usb 5-1: Using ep0 maxpacket: 16
[  386.170023][ T4381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.201850][ T4381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.248288][ T4381] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  386.282937][ T4381] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  386.304230][ T4381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.342886][ T4381] usb 5-1: config 0 descriptor??
[  386.393662][T11690] XFS (loop0): Quotacheck: Done.
[  386.497149][ T4268] XFS (loop0): Unmounting Filesystem
[  386.579585][T11060] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  386.791743][ T4381] microsoft 0003:045E:07DA.002B: No inputs registered, leaving
[  386.823774][ T4381] microsoft 0003:045E:07DA.002B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  386.825110][T11060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.846353][ T4381] microsoft 0003:045E:07DA.002B: no inputs found
[  386.846376][ T4381] microsoft 0003:045E:07DA.002B: could not initialize ff, continuing anyway
[  386.903507][T11727] loop3: detected capacity change from 0 to 32768
[  386.923250][T11060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.934028][T11727] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11
[  386.955222][T11060] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  386.988775][ T4381] usb 5-1: USB disconnect, device number 20
[  386.999228][T11060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.053648][T11060] usb 2-1: config 0 descriptor??
[  387.225685][T11732] fido_id[11732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  387.404582][ T4384] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11
[  387.494736][T11060] isku 0003:1E7D:319C.002C: unknown main item tag 0x0
[  387.513532][T11060] isku 0003:1E7D:319C.002C: unknown main item tag 0x0
[  387.563284][T11060] isku 0003:1E7D:319C.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  387.644868][T11744] loop5: detected capacity change from 0 to 2048
[  387.668998][T11744] EXT4-fs: inline encryption not supported
[  387.694173][T11060] isku 0003:1E7D:319C.002C: couldn't init struct isku_device
[  387.704090][T11060] isku 0003:1E7D:319C.002C: couldn't install keyboard
[  387.728588][T11060] isku: probe of 0003:1E7D:319C.002C failed with error -71
[  387.788300][T11744] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  387.821240][T11744] EXT4-fs (loop5): resizing filesystem from 512 to 0 blocks
[  387.845744][T11060] usb 2-1: USB disconnect, device number 25
[  387.882176][T11744] EXT4-fs warning (device loop5): ext4_resize_fs:2051: can't shrink FS - resize aborted
[  388.112624][ T7484] EXT4-fs (loop5): unmounting filesystem.
[  388.255170][T11758] fido_id[11758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  388.575775][T11771] loop1: detected capacity change from 0 to 2048
[  388.626881][T11775] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  388.704505][T11778] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  388.957096][T11755] loop0: detected capacity change from 0 to 32768
[  388.978268][T11781] loop5: detected capacity change from 0 to 64
[  389.054521][T11791] netlink: 'syz.1.2734': attribute type 30 has an invalid length.
[  389.079345][T11755] XFS (loop0): Mounting V5 Filesystem
[  389.211628][T11755] XFS (loop0): Ending clean mount
[  389.500112][ T4268] XFS (loop0): Unmounting Filesystem
[  390.091414][T11815] loop1: detected capacity change from 0 to 1024
[  390.396576][ T4356] hfsplus: b-tree write err: -5, ino 4
[  390.483112][T11825] loop0: detected capacity change from 0 to 64
[  390.715202][T11832] device vlan2 entered promiscuous mode
[  390.744555][T11801] loop3: detected capacity change from 0 to 32768
[  390.757906][T11832] device bridge0 entered promiscuous mode
[  390.869782][T11836] loop1: detected capacity change from 0 to 1024
[  390.877098][T11836] EXT4-fs: inline encryption not supported
[  390.927740][T11836] EXT4-fs: Ignoring removed i_version option
[  390.997448][T11836] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.2752: lblock 2 mapped to illegal pblock 2 (length 1)
[  391.035596][T11836] __quota_error: 1 callbacks suppressed
[  391.035614][T11836] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  391.050178][T11836] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.2752: lblock 0 mapped to illegal pblock 48 (length 1)
[  391.088114][T11836] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  391.107630][T11836] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.2752: Failed to acquire dquot type 0
[  391.137467][T11836] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  391.164404][T11836] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.2752: mark_inode_dirty error
[  391.254463][T11836] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  391.273538][T11841] device hsr0 entered promiscuous mode
[  391.291552][T11836] EXT4-fs (loop1): 1 orphan inode deleted
[  391.319327][T11836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  391.343106][T11841] device hsr0 left promiscuous mode
[  391.348718][ T4356] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  391.448501][ T4356] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  391.492800][ T4356] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 0
[  391.570020][ T4264] EXT4-fs (loop1): unmounting filesystem.
[  391.591542][ T4264] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0
[  391.697289][ T4264] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem
[  391.730579][ T4264] EXT4-fs error (device loop1): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error
[  391.816701][T11848] loop3: detected capacity change from 0 to 4096
[  391.842731][T11848] ntfs: (device loop3): load_attribute_list(): Cannot read attribute list since runlist is missing.
[  391.955585][T11848] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to load attribute list attribute.
[  391.999683][T11848] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  392.057179][T11829] loop4: detected capacity change from 0 to 32768
[  392.062489][T11848] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  392.136889][T11848] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  392.150234][T11848] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  392.159289][T11848] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to lookup $DATA attribute.
[  392.246390][T11829] XFS (loop4): Mounting V5 Filesystem
[  392.454308][T11829] XFS (loop4): Ending clean mount
[  392.647830][    T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  392.661296][ T4277] XFS (loop4): Unmounting Filesystem
[  392.866684][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.884324][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  392.906212][    T7] usb 4-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.00
[  392.923089][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.960782][T11885] loop5: detected capacity change from 0 to 2048
[  392.985589][    T7] usb 4-1: config 0 descriptor??
[  393.059808][T11885] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  393.224150][T11885] overlayfs: upper fs needs to support d_type.
[  393.264080][T11857] loop1: detected capacity change from 0 to 32768
[  393.339968][T11885] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  393.377767][T11885] overlayfs: failed to set xattr on upper
[  393.383682][T11885] overlayfs: ...falling back to index=off,metacopy=off.
[  393.423511][    T7] asus 0003:0B05:1869.002D: hidraw0: USB HID v0.00 Device [HID 0b05:1869] on usb-dummy_hcd.3-1/input0
[  393.448765][T11857] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  393.526861][    T7] asus 0003:0B05:1869.002D: Asus input not registered
[  393.584255][    T7] asus: probe of 0003:0B05:1869.002D failed with error -12
[  393.669334][    T7] usb 4-1: USB disconnect, device number 12
[  393.687355][ T4264] ocfs2: Unmounting device (7,1) on (node local)
[  393.803313][ T7484] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh
[  393.909504][ T7484] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh
[  393.916836][T11904] loop4: detected capacity change from 0 to 1024
[  394.019407][T11904] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  394.033477][T11900] fido_id[11900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  394.204327][T11908] loop0: detected capacity change from 0 to 4096
[  394.301786][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  394.374814][T11908] ntfs: volume version 3.1.
[  395.369347][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.558824][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.750197][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.922379][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.228614][ T4702] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  396.454276][ T4702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.496307][ T4702] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  396.521801][ T4702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.598479][ T4702] usb 4-1: config 0 descriptor??
[  396.657038][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  396.681293][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  396.684219][T11954] loop4: detected capacity change from 0 to 2048
[  396.698856][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  396.709917][T11941] loop0: detected capacity change from 0 to 32768
[  396.713099][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  396.724714][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  396.733777][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  396.756831][T11941] JBD2: Ignoring recovery information on journal
[  396.840298][T11954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  397.030270][T11941] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  397.054513][ T4702] prodikeys 0003:041E:2801.002E: unknown main item tag 0x2
[  397.093816][ T4702] prodikeys 0003:041E:2801.002E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0
[  397.263952][  T952] usb 4-1: USB disconnect, device number 13
[  397.367968][ T4268] ocfs2: Unmounting device (7,0) on (node local)
[  397.596034][T11967] fido_id[11967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  397.889352][T11960] loop1: detected capacity change from 0 to 32768
[  398.044548][T11955] chnl_net:caif_netlink_parms(): no params data found
[  398.092533][T11960] XFS (loop1): Mounting V5 Filesystem
[  398.376300][T11960] XFS (loop1): Ending clean mount
[  398.744959][ T4264] XFS (loop1): Unmounting Filesystem
[  398.766031][T12007] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2803'.
[  398.777458][ T4276] Bluetooth: hci2: command 0x0409 tx timeout
[  398.788804][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2803'.
[  399.035582][T11955] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.053653][T11955] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.068802][T11955] device bridge_slave_0 entered promiscuous mode
[  399.201784][T12002] syz.4.2800 (12002): drop_caches: 2
[  399.406303][T11955] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.447975][T11955] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.481989][T11955] device bridge_slave_1 entered promiscuous mode
[  399.659137][   T11] device hsr_slave_0 left promiscuous mode
[  399.737718][   T11] device hsr_slave_1 left promiscuous mode
[  399.745233][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.771317][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  399.822125][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.841257][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.889033][   T11] device bridge_slave_1 left promiscuous mode
[  399.895446][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.907109][ T4384] udevd[4384]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory
[  399.951160][T12005] loop3: detected capacity change from 0 to 40427
[  399.959566][   T11] device bridge_slave_0 left promiscuous mode
[  399.993179][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.200365][   T11] device veth1_macvtap left promiscuous mode
[  400.206593][   T11] device veth0_macvtap left promiscuous mode
[  400.256245][   T11] device veth1_vlan left promiscuous mode
[  400.270243][   T11] device veth0_vlan left promiscuous mode
[  400.344875][T12028] loop0: detected capacity change from 0 to 512
[  400.644274][T12005] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  400.695881][T12002] syz.4.2800 (12002): drop_caches: 2
[  400.717602][T12005] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  400.787922][T12005] F2FS-fs (loop3): invalid crc value
[  400.826556][T12005] F2FS-fs (loop3): Found nat_bits in checkpoint
[  400.847924][ T4276] Bluetooth: hci2: command 0x041b tx timeout
[  401.073712][T12005] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  401.089915][T12005] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  401.378720][T12048] loop0: detected capacity change from 0 to 22
[  401.413495][T12048] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  401.494805][T12048] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  401.953160][T12057] loop0: detected capacity change from 0 to 2048
[  402.005998][T12057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  402.270062][T12039] loop4: detected capacity change from 0 to 40427
[  402.305160][T12039] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  402.352678][T12039] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2
[  402.372793][T12039] F2FS-fs (loop4): invalid crc value
[  402.402113][T12039] F2FS-fs (loop4): Found nat_bits in checkpoint
[  402.497689][T12039] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  402.609062][T12039] syz.4.2811: attempt to access beyond end of device
[  402.609062][T12039] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  402.708136][ T4277] syz-executor: attempt to access beyond end of device
[  402.708136][ T4277] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  402.948161][ T4276] Bluetooth: hci2: command 0x040f tx timeout
[  403.083884][   T11] team0 (unregistering): Port device team_slave_1 removed
[  403.209887][   T11] team0 (unregistering): Port device team_slave_0 removed
[  403.290846][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  403.383145][T12067] Falling back ldisc for ttyS3.
[  403.394468][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.954775][T12084] loop4: detected capacity change from 0 to 2048
[  404.036387][T12086] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  404.286185][T12090] loop4: detected capacity change from 0 to 256
[  404.318680][T12090] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  404.974043][   T11] bond0 (unregistering): Released all slaves
[  405.008604][ T4276] Bluetooth: hci2: command 0x0419 tx timeout
[  405.100124][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.111688][T12052] netlink: 'syz.1.2814': attribute type 2 has an invalid length.
[  405.134322][T12096] loop4: detected capacity change from 0 to 32768
[  405.203056][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.272684][T12096] XFS (loop4): Mounting V5 Filesystem
[  405.443419][T11955] team0: Port device team_slave_0 added
[  405.511068][T11955] team0: Port device team_slave_1 added
[  405.573676][T12096] XFS (loop4): Ending clean mount
[  405.763597][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.780283][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.878380][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.945385][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.966410][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.014560][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.027086][ T4277] XFS (loop4): Unmounting Filesystem
[  406.419462][T11955] device hsr_slave_0 entered promiscuous mode
[  406.441059][T11955] device hsr_slave_1 entered promiscuous mode
[  406.466242][T11955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  406.502961][T11955] Cannot create hsr debugfs directory
[  406.714793][T12112] loop0: detected capacity change from 0 to 32768
[  407.357383][T11955] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  407.381148][T11955] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  407.435156][T11955] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  407.457817][T11955] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  407.667895][    T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  407.861057][T11955] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.868970][    T7] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  407.898700][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[  407.918399][    T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  407.959385][    T7] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  407.969906][T11955] 8021q: adding VLAN 0 to HW filter on device team0
[  407.976998][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  407.990560][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  407.998591][    T7] usb 1-1: Product: syz
[  408.002822][    T7] usb 1-1: Manufacturer: syz
[  408.048195][    T7] usb 1-1: SerialNumber: syz
[  408.059164][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  408.080430][    T7] usb 1-1: config 0 descriptor??
[  408.092578][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  408.100786][T12166] loop1: detected capacity change from 0 to 256
[  408.145762][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.153006][ T7579] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.171225][    T7] usb 1-1: selecting invalid altsetting 0
[  408.180495][T12166] FAT-fs (loop1): Directory bread(block 64) failed
[  408.187358][T12166] FAT-fs (loop1): Directory bread(block 65) failed
[  408.204536][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  408.215513][T12166] FAT-fs (loop1): Directory bread(block 66) failed
[  408.237239][T12166] FAT-fs (loop1): Directory bread(block 67) failed
[  408.238084][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  408.264985][T12166] FAT-fs (loop1): Directory bread(block 68) failed
[  408.284922][T12166] FAT-fs (loop1): Directory bread(block 69) failed
[  408.293403][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.300638][ T7579] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.327145][T12166] FAT-fs (loop1): Directory bread(block 70) failed
[  408.347739][T12166] FAT-fs (loop1): Directory bread(block 71) failed
[  408.362531][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  408.365849][T12166] FAT-fs (loop1): Directory bread(block 72) failed
[  408.392470][T12166] FAT-fs (loop1): Directory bread(block 73) failed
[  408.450843][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  408.469344][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  408.531873][    T7] usb 1-1: USB disconnect, device number 19
[  408.553345][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  408.596466][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  408.646237][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  408.682237][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  408.700693][T12146] loop3: detected capacity change from 0 to 40427
[  408.717040][ T7579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  408.756720][T12146] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  408.782213][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  408.798036][T12146] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  408.812233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  408.843953][T11955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  408.867131][T12146] F2FS-fs (loop3): Found nat_bits in checkpoint
[  408.914195][T11955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  408.948527][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  408.969605][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  409.076949][T12146] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  409.120945][T12146] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  409.271365][T12183] loop1: detected capacity change from 0 to 256
[  409.329522][T12183] exfat: Deprecated parameter 'namecase'
[  409.350060][ T4274] syz-executor: attempt to access beyond end of device
[  409.350060][ T4274] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  409.364354][T12183] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  409.585751][T12188] loop4: detected capacity change from 0 to 256
[  409.595721][T12188] exfat: Deprecated parameter 'utf8'
[  409.639420][T12188] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  410.266805][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  410.275282][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  410.281541][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.360971][T12203] use of bytesused == 0 is deprecated and will be removed in the future,
[  410.361090][T12203] use the actual size instead.
[  411.046738][T12221] loop3: detected capacity change from 0 to 2048
[  411.089160][T12226] loop1: detected capacity change from 0 to 512
[  411.096293][T12221] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  411.128366][T12226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  411.181698][T12199] loop4: detected capacity change from 0 to 32768
[  411.195030][T12231] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  411.212282][T12199] (syz.4.2862,12199,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  411.226004][T12226] EXT4-fs (loop1): 1 truncate cleaned up
[  411.226039][T12226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  411.261932][T12199] (syz.4.2862,12199,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  411.308562][    T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  411.315219][T12199] JBD2: Ignoring recovery information on journal
[  411.460141][T12199] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  411.491037][    T7] usb 1-1: unable to get BOS descriptor or descriptor too short
[  411.513543][    T7] usb 1-1: config 6 has an invalid interface number: 200 but max is 0
[  411.560619][ T4264] EXT4-fs (loop1): unmounting filesystem.
[  411.587567][    T7] usb 1-1: config 6 has no interface number 0
[  411.593768][    T7] usb 1-1: config 6 interface 200 has no altsetting 0
[  411.646614][    T7] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  411.709372][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.717462][    T7] usb 1-1: Product: syz
[  411.739730][T12237] netlink: 'syz.3.2872': attribute type 5 has an invalid length.
[  411.747580][    T7] usb 1-1: Manufacturer: syz
[  411.747604][    T7] usb 1-1: SerialNumber: syz
[  411.884331][ T4277] ocfs2: Unmounting device (7,4) on (node local)
[  412.116697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  412.138870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  412.250658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  412.275229][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  412.295516][T11955] device veth0_vlan entered promiscuous mode
[  412.312088][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  412.348842][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  412.381350][T11955] device veth1_vlan entered promiscuous mode
[  412.482528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  412.503797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  412.532664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  412.544190][T12251] loop4: detected capacity change from 0 to 256
[  412.562461][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  412.593360][T12251] exfat: Deprecated parameter 'utf8'
[  412.594426][T11955] device veth0_macvtap entered promiscuous mode
[  412.624968][T12251] exfat: Deprecated parameter 'namecase'
[  412.626950][T11955] device veth1_macvtap entered promiscuous mode
[  412.658397][T12251] exfat: Deprecated parameter 'namecase'
[  412.678718][T12251] exfat: Deprecated parameter 'utf8'
[  412.732444][T12251] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  412.758048][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.794314][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.823574][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.875386][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.918173][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.981019][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.004826][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.034211][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.067319][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.089946][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  413.103569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  413.157851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  413.187110][T12243] loop1: detected capacity change from 0 to 32768
[  413.222265][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  413.285372][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.311811][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.334829][T12243] JBD2: Ignoring recovery information on journal
[  413.390952][T12266] loop4: detected capacity change from 0 to 64
[  413.404518][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.416121][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.426636][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.437359][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.449261][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.469663][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  413.513771][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  413.601086][T11955] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.621727][T12243] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  413.630300][T11955] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.687303][T11955] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.722091][T11955] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.733173][T12243] (syz.1.2875,12243,0):ocfs2_reflink_ioctl:4433 ERROR: status = -14
[  413.964845][ T4264] ocfs2: Unmounting device (7,1) on (node local)
[  414.074861][    T7] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  414.084599][T12276] sp0: Synchronizing with TNC
[  414.103717][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.115021][T12275] [U] è
[  414.121541][    T7] dvb-usb: bulk message failed: -71 (3/0)
[  414.155916][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.201550][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  414.218129][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  414.268117][    T7] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  414.316709][    T7] usb 1-1: media controller created
[  414.385679][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.396056][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  414.417003][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.494484][    T7] dvb-usb: bulk message failed: -71 (6/0)
[  414.520665][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  414.561437][    T7] dvb-usb: bulk message failed: -71 (6/0)
[  414.601917][    T7] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  414.643803][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24
[  414.739045][    T7] dvb-usb: schedule remote query interval to 150 msecs.
[  414.782378][    T7] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  414.856469][    T7] usb 1-1: USB disconnect, device number 20
[  414.887269][T12298] loop4: detected capacity change from 0 to 16
[  414.984983][T12298] erofs: (device loop4): mounted with root inode @ nid 36.
[  415.043389][    T7] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  415.110065][T12298] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  415.141843][T12298] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  415.549699][T12313] loop4: detected capacity change from 0 to 1024
[  415.706862][T12319] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2901'.
[  415.941318][T12326] loop4: detected capacity change from 0 to 64
[  416.335521][T12341] loop3: detected capacity change from 0 to 16
[  416.393654][T12341] erofs: (device loop3): mounted with root inode @ nid 36.
[  416.469410][T12341] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  416.517727][T12341] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  416.805900][T12351] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48423)
[  416.808611][T12347] loop1: detected capacity change from 0 to 4096
[  416.826267][T12351] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  416.851140][T12347] __ntfs_warning: 26 callbacks suppressed
[  416.851158][T12347] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  416.883717][T12321] loop0: detected capacity change from 0 to 32768
[  416.979214][T12347] ntfs: volume version 3.1.
[  417.088193][ T4276] Bluetooth: hci2: command 0x0411 tx timeout
[  417.114265][T12321] XFS (loop0): Mounting V5 Filesystem
[  417.269963][T12321] XFS (loop0): Ending clean mount
[  417.301090][T12321] XFS (loop0): Quotacheck needed: Please wait.
[  417.424955][T12321] XFS (loop0): Quotacheck: Done.
[  417.626766][ T4268] XFS (loop0): Unmounting Filesystem
[  418.355607][T12393] loop4: detected capacity change from 0 to 4096
[  418.410774][T12393] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  418.523617][T12379] loop3: detected capacity change from 0 to 40427
[  418.565670][T12379] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[  418.580593][T12393] EXT4-fs (loop4): Online resizing not supported with bigalloc
[  418.599557][T12379] F2FS-fs (loop3): invalid crc value
[  418.625459][T12405] loop6: detected capacity change from 0 to 64
[  418.633406][T12379] F2FS-fs (loop3): Found nat_bits in checkpoint
[  418.738598][ T4332] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  418.747831][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  418.789413][T12405] hfs: hfs: Invalid key length: 94
[  418.798328][T12379] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  418.979707][ T4332] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  418.998158][ T4332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  419.007128][ T4332] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  419.067856][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.119379][ T4332] usb 2-1: config 0 descriptor??
[  419.130246][ T4332] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  419.135877][T11955] hfs: node 4:3 still has 1 user(s)!
[  419.136913][ T4332] dvb-usb: bulk message failed: -22 (3/0)
[  419.230298][ T4332] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  419.288715][ T4332] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  419.295950][ T4332] usb 2-1: media controller created
[  419.398014][ T4332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  419.438210][ T4332] dvb-usb: bulk message failed: -22 (6/0)
[  419.444097][ T4332] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  419.529419][ T4332] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25
[  419.579051][ T4332] dvb-usb: schedule remote query interval to 150 msecs.
[  419.586107][ T4332] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  419.662776][ T4332] usb 2-1: USB disconnect, device number 26
[  419.755311][ T4332] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  419.844561][T12429] netlink: 'syz.0.2921': attribute type 29 has an invalid length.
[  419.867925][T12429] netlink: 'syz.0.2921': attribute type 29 has an invalid length.
[  419.887125][T12424] loop4: detected capacity change from 0 to 8192
[  419.909890][T12432] netlink: 'syz.0.2921': attribute type 29 has an invalid length.
[  419.974397][T12424] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  420.058574][T12424] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  420.088954][T12424] REISERFS (device loop4): using ordered data mode
[  420.095558][T12424] reiserfs: using flush barriers
[  420.108283][T12424] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  420.148089][T12424] REISERFS (device loop4): checking transaction log (loop4)
[  420.188606][ T4276] Bluetooth: hci0: Malformed HCI Event
[  420.197901][T12424] REISERFS (device loop4): Using r5 hash to sort names
[  420.227977][T12424] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  420.270417][T12424] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  421.677473][T12474] loop4: detected capacity change from 0 to 4096
[  421.739165][T12474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  421.774437][T12442] loop0: detected capacity change from 0 to 32768
[  421.813581][T12474] fs-verity (loop4, inode 16): Unknown hash algorithm number: 0
[  421.965787][T12442] XFS (loop0): Mounting V5 Filesystem
[  422.048542][T12454] loop6: detected capacity change from 0 to 32768
[  422.131139][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  422.152160][T12442] XFS (loop0): Ending clean mount
[  422.230431][T12442] XFS (loop0): Quotacheck needed: Please wait.
[  422.300309][T12500] loop3: detected capacity change from 0 to 512
[  422.355277][T12500] EXT4-fs: Ignoring removed mblk_io_submit option
[  422.417721][T12500] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  422.494005][T12442] XFS (loop0): Quotacheck: Done.
[  422.494038][T12500] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  422.529061][T12500] EXT4-fs (loop3): orphan cleanup on readonly fs
[  422.572266][T12500] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.2958: Invalid block bitmap block 0 in block_group 0
[  422.641095][T12500] EXT4-fs (loop3): Remounting filesystem read-only
[  422.649695][T12500] Quota error (device loop3): write_blk: dquota write failed
[  422.657253][T12500] Quota error (device loop3): write_blk: dquota write failed
[  422.666186][T12500] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  422.692758][T12500] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.2958: Failed to acquire dquot type 1
[  422.741980][T12500] EXT4-fs (loop3): Remounting filesystem read-only
[  422.763326][T12500] Quota error (device loop3): write_blk: dquota write failed
[  422.809612][T12500] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  422.821671][ T4268] XFS (loop0): Unmounting Filesystem
[  422.869033][T12500] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.2958: Failed to acquire dquot type 1
[  422.968560][T12500] EXT4-fs (loop3): Remounting filesystem read-only
[  422.991890][T12500] Quota error (device loop3): write_blk: dquota write failed
[  423.047964][T12500] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  423.092969][T12500] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.2958: Failed to acquire dquot type 1
[  423.147149][T12500] EXT4-fs (loop3): Remounting filesystem read-only
[  423.189166][T12500] EXT4-fs (loop3): 1 orphan inode deleted
[  423.216633][T12500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  423.332625][T12522] loop6: detected capacity change from 0 to 256
[  423.395444][T12522] FAT-fs (loop6): Directory bread(block 64) failed
[  423.438788][T12522] FAT-fs (loop6): Directory bread(block 65) failed
[  423.470953][T12522] FAT-fs (loop6): Directory bread(block 66) failed
[  423.522387][T12522] FAT-fs (loop6): Directory bread(block 67) failed
[  423.544833][ T4274] EXT4-fs (loop3): unmounting filesystem.
[  423.569272][T12522] FAT-fs (loop6): Directory bread(block 68) failed
[  423.586219][T12522] FAT-fs (loop6): Directory bread(block 69) failed
[  423.612356][T12526] loop4: detected capacity change from 0 to 64
[  423.617137][T12522] FAT-fs (loop6): Directory bread(block 70) failed
[  423.667997][T12522] FAT-fs (loop6): Directory bread(block 71) failed
[  423.674760][T12522] FAT-fs (loop6): Directory bread(block 72) failed
[  423.703532][   T26] audit: type=1800 audit(1754051380.918:1471): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2968" name="bus" dev="loop4" ino=21 res=0 errno=0
[  423.717680][T12522] FAT-fs (loop6): Directory bread(block 73) failed
[  423.830137][T12529] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2969'.
[  424.144341][T12537] loop1: detected capacity change from 0 to 256
[  424.236625][T12539] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2973'.
[  424.350722][T12543] loop6: detected capacity change from 0 to 1024
[  424.406088][T12546] loop0: detected capacity change from 0 to 1024
[  424.507144][T12546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  424.832442][T12555] loop6: detected capacity change from 0 to 256
[  424.954983][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  424.970578][T12558] loop1: detected capacity change from 0 to 512
[  425.005425][T12558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  425.534760][ T4264] EXT4-fs (loop1): unmounting filesystem.
[  425.715079][T12544] loop4: detected capacity change from 0 to 32768
[  425.833015][T12544] XFS (loop4): Mounting V5 Filesystem
[  425.934369][T12544] XFS (loop4): Ending clean mount
[  425.954279][T12544] XFS (loop4): Quotacheck needed: Please wait.
[  426.079642][T12594] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2989'.
[  426.141321][T12594] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2989'.
[  426.172923][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2989'.
[  426.189104][T12544] XFS (loop4): Quotacheck: Done.
[  426.221746][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2989'.
[  426.258372][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2989'.
[  426.434428][ T4277] XFS (loop4): Unmounting Filesystem
[  426.528121][T12603] netlink: 'syz.3.2994': attribute type 25 has an invalid length.
[  426.547725][T12600] loop1: detected capacity change from 0 to 2048
[  426.564995][T12603] netlink: 'syz.3.2994': attribute type 25 has an invalid length.
[  426.600222][T12600] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  426.954649][T12611] loop1: detected capacity change from 0 to 512
[  427.019633][T12611] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  427.059292][T12611] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  427.075755][T12611] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.2998: iget: bad i_size value: 12154757448730
[  427.098469][T12611] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2998: couldn't read orphan inode 13 (err -117)
[  427.124477][T12611] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  427.198155][ T4702] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  427.256503][T12617] loop0: detected capacity change from 0 to 512
[  427.328262][T12617] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  427.358558][T12617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002]
[  427.366713][T12617] System zones: 1-12
[  427.372950][ T4264] EXT4-fs (loop1): unmounting filesystem.
[  427.392768][T12617] EXT4-fs (loop0): orphan cleanup on readonly fs
[  427.427720][ T4702] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  427.453342][ T4702] usb 4-1: config 0 interface 0 has no altsetting 0
[  427.493697][T12617] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3000: bg 0: block 361: padding at end of block bitmap is not set
[  427.528165][ T4702] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  427.537467][ T4702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.568634][ T4702] usb 4-1: Product: syz
[  427.572883][ T4702] usb 4-1: Manufacturer: syz
[  427.580892][ T4702] usb 4-1: SerialNumber: syz
[  427.588904][ T4702] usb 4-1: config 0 descriptor??
[  427.601314][T12617] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  427.622107][ T4702] usb 4-1: selecting invalid altsetting 0
[  427.655664][T12617] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3000: invalid indirect mapped block 12 (level 1)
[  427.733019][T12617] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3000: invalid indirect mapped block 2 (level 2)
[  427.778358][T12617] EXT4-fs (loop0): 1 truncate cleaned up
[  427.816583][T12617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  427.928529][ T4329] usb 4-1: USB disconnect, device number 14
[  428.022032][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  428.619267][T12646] loop3: detected capacity change from 0 to 64
[  428.701601][T12623] loop1: detected capacity change from 0 to 32768
[  428.748165][ T4597] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  428.774425][T12623] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  428.897200][T12623] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  428.958406][ T4597] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  428.990515][ T4597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.015923][T12623] 
[  429.018344][T12623] ======================================================
[  429.025287][T12656] tipc: Enabling of bearer <dth:l> rejected, media not registered
[  429.025378][T12623] WARNING: possible circular locking dependency detected
[  429.025401][T12623] 6.1.147-syzkaller #0 Not tainted
[  429.033772][ T4597] usb 7-1: Product: syz
[  429.040576][T12623] ------------------------------------------------------
[  429.040590][T12623] syz.1.3001/12623 is trying to acquire lock:
[  429.040603][T12623] ffff8880305fc650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_write_begin_nolock+0x1ca5/0x4270
[  429.040678][T12623] 
[  429.040678][T12623] but task is already holding lock:
[  429.040685][T12623] ffff888071f83f60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}
[  429.067413][ T4597] usb 7-1: Manufacturer: syz
[  429.073734][T12623] , at: ocfs2_write_begin+0x195/0x300
[  429.073774][T12623] 
[  429.073774][T12623] which lock already depends on the new lock.
[  429.073774][T12623] 
[  429.073780][T12623] 
[  429.073780][T12623] the existing dependency chain (in reverse order) is:
[  429.073786][T12623] 
[  429.073786][T12623] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  429.073818][T12623]        down_write+0x36/0x60
[  429.073840][T12623]        ocfs2_lock_global_qf+0x1e5/0x270
[  429.073858][T12623]        ocfs2_acquire_dquot+0x2a0/0xb10
[  429.122341][ T4597] usb 7-1: SerialNumber: syz
[  429.127676][T12623]        dqget+0x778/0xeb0
[  429.127702][T12623]        __dquot_initialize+0x3b6/0xcb0
[  429.127720][T12623]        ocfs2_get_init_inode+0x138/0x1b0
[  429.127742][T12623]        ocfs2_mknod+0x8be/0x2350
[  429.127762][T12623]        ocfs2_mkdir+0x1b6/0x4a0
[  429.127780][T12623]        vfs_mkdir+0x387/0x570
[  429.127796][T12623]        do_mkdirat+0x1d0/0x430
[  429.127812][T12623]        __x64_sys_mkdirat+0x85/0x90
[  429.127828][T12623]        do_syscall_64+0x4c/0xa0
[  429.127846][T12623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.127878][T12623] 
[  429.127878][T12623] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}:
[  429.127917][T12623]        down_write+0x36/0x60
[  429.127937][T12623]        ocfs2_lock_global_qf+0x1c7/0x270
[  429.127955][T12623]        ocfs2_acquire_dquot+0x2a0/0xb10
[  429.127974][T12623]        dqget+0x778/0xeb0
[  429.173993][ T4597] usb 7-1: config 0 descriptor??
[  429.175097][T12623]        __dquot_initialize+0x3b6/0xcb0
[  429.175124][T12623]        ocfs2_get_init_inode+0x138/0x1b0
[  429.249383][T12623]        ocfs2_mknod+0x8be/0x2350
[  429.254456][T12623]        ocfs2_mkdir+0x1b6/0x4a0
[  429.259435][T12623]        vfs_mkdir+0x387/0x570
[  429.264326][T12623]        do_mkdirat+0x1d0/0x430
[  429.269214][T12623]        __x64_sys_mkdirat+0x85/0x90
[  429.274624][T12623]        do_syscall_64+0x4c/0xa0
[  429.279654][T12623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.286121][T12623] 
[  429.286121][T12623] -> #4 (&dquot->dq_lock){+.+.}-{3:3}:
[  429.293902][T12623]        __mutex_lock+0x120/0xaf0
[  429.298995][T12623]        dquot_commit+0x5a/0x410
[  429.304152][T12623]        ext4_write_dquot+0x1f0/0x360
[  429.309565][T12623]        mark_all_dquot_dirty+0xf9/0x400
[  429.315368][T12623]        __dquot_free_space+0x7ec/0xbc0
[  429.320960][T12623]        ext4_free_blocks+0x1bab/0x2640
[  429.326552][T12623]        ext4_ext_remove_space+0x1f0d/0x4490
[  429.332623][T12623]        ext4_ext_truncate+0x211/0x370
[  429.338173][T12623]        ext4_truncate+0xa0b/0x1230
[  429.343419][T12623]        ext4_evict_inode+0xb35/0x1100
[  429.349261][T12623]        evict+0x485/0x870
[  429.353822][T12623]        do_unlinkat+0x377/0x560
[  429.358997][T12623]        __x64_sys_unlink+0x45/0x50
[  429.364292][T12623]        do_syscall_64+0x4c/0xa0
[  429.369450][T12623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.376010][T12623] 
[  429.376010][T12623] -> #3 (&ei->i_data_sem){++++}-{3:3}:
[  429.383799][T12623]        down_write+0x36/0x60
[  429.388527][T12623]        ext4_truncate+0x987/0x1230
[  429.393917][T12623]        ext4_setattr+0x10cb/0x19f0
[  429.399285][T12623]        notify_change+0xc74/0xf40
[  429.404460][T12623]        do_truncate+0x197/0x220
[  429.409468][T12623]        do_sys_ftruncate+0x312/0x3c0
[  429.414898][T12623]        do_syscall_64+0x4c/0xa0
[  429.419899][T12623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.426383][T12623] 
[  429.426383][T12623] -> #2 (jbd2_handle){++++}-{0:0}:
[  429.433756][T12623]        start_this_handle+0x1f49/0x2150
[  429.439461][T12623]        jbd2__journal_start+0x2b7/0x5a0
[  429.445248][T12623]        jbd2_journal_start+0x26/0x30
[  429.450703][T12623]        ocfs2_start_trans+0x372/0x6c0
[  429.456365][T12623]        ocfs2_mknod+0xe6a/0x2350
[  429.461456][T12623]        ocfs2_create+0x1b6/0x4a0
[  429.466529][T12623]        path_openat+0x1187/0x2e70
[  429.471703][T12623]        do_filp_open+0x1c1/0x3c0
[  429.476778][T12623]        do_sys_openat2+0x142/0x490
[  429.482027][T12623]        __x64_sys_openat+0x135/0x160
[  429.487457][T12623]        do_syscall_64+0x4c/0xa0
[  429.492455][T12623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.498932][T12623] 
[  429.498932][T12623] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  429.501869][ T4597] usb 7-1: USB disconnect, device number 2
[  429.507616][T12623]        down_read+0x42/0x2d0
[  429.507655][T12623]        ocfs2_start_trans+0x366/0x6c0
[  429.507686][T12623]        ocfs2_mknod+0xe6a/0x2350
[  429.507704][T12623]        ocfs2_create+0x1b6/0x4a0
[  429.533967][T12623]        path_openat+0x1187/0x2e70
[  429.539122][T12623]        do_filp_open+0x1c1/0x3c0
[  429.544228][T12623]        do_sys_openat2+0x142/0x490
[  429.549486][T12623]        __x64_sys_openat+0x135/0x160
[  429.552817][T12645] loop4: detected capacity change from 0 to 40427
[  429.554930][T12623]        do_syscall_64+0x4c/0xa0
[  429.554962][T12623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.554994][T12623] 
[  429.554994][T12623] -> #0 (sb_internal#3){.+.+}-{0:0}:
[  429.555028][T12623]        __lock_acquire+0x2cf8/0x7c50
[  429.555054][T12623]        lock_acquire+0x1b4/0x490
[  429.555077][T12623]        ocfs2_start_trans+0x267/0x6c0
[  429.555105][T12623]        ocfs2_write_begin_nolock+0x1ca5/0x4270
[  429.555133][T12623]        ocfs2_write_begin+0x1b8/0x300
[  429.555160][T12623]        generic_perform_write+0x2db/0x560
[  429.555185][T12623]        __generic_file_write_iter+0x172/0x430
[  429.555211][T12623]        ocfs2_file_write_iter+0x1593/0x1df0
[  429.555237][T12623]        vfs_write+0x44c/0x960
[  429.555263][T12623]        ksys_write+0x143/0x240
[  429.555287][T12623]        do_syscall_64+0x4c/0xa0
[  429.555305][T12623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.555335][T12623] 
[  429.555335][T12623] other info that might help us debug this:
[  429.555335][T12623] 
[  429.555342][T12623] Chain exists of:
[  429.555342][T12623]   sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key
[  429.555342][T12623] 
[  429.675814][T12623]  Possible unsafe locking scenario:
[  429.675814][T12623] 
[  429.684026][T12623]        CPU0                    CPU1
[  429.689697][T12623]        ----                    ----
[  429.695096][T12623]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  429.700779][T12623]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7);
[  429.710443][T12645] F2FS-fs (loop4): Found nat_bits in checkpoint
[  429.711511][T12623]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  429.711553][T12623]   lock(sb_internal#3);
[  429.731012][T12623] 
[  429.731012][T12623]  *** DEADLOCK ***
[  429.731012][T12623] 
[  429.739213][T12623] 4 locks held by syz.1.3001/12623:
[  429.744453][T12623]  #0: ffff8880779994e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360
[  429.748682][ T4582] udevd[4582]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  429.754074][T12623]  #1: ffff8880305fc460 (sb_writers#16){.+.+}-{0:0}, at: vfs_write+0x256/0x960
[  429.754151][T12623]  #2: ffff888071f842c8 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x438/0x1df0
[  429.785440][T12645] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  429.790732][T12623]  #3: ffff888071f83f60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x195/0x300
[  429.790809][T12623] 
[  429.790809][T12623] stack backtrace:
[  429.790816][T12623] CPU: 0 PID: 12623 Comm: syz.1.3001 Not tainted 6.1.147-syzkaller #0
[  429.790837][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  429.790849][T12623] Call Trace:
[  429.790856][T12623]  <TASK>
[  429.790864][T12623]  dump_stack_lvl+0x168/0x22e
[  429.790887][T12623]  ? load_image+0x3b0/0x3b0
[  429.790914][T12623]  ? show_regs_print_info+0x12/0x12
[  429.790940][T12623]  ? print_circular_bug+0x12b/0x1a0
[  429.790972][T12623]  check_noncircular+0x274/0x310
[  429.840929][T12645] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  429.841417][T12623]  ? add_chain_block+0x940/0x940
[  429.878667][T12623]  ? lockdep_lock+0xdc/0x1e0
[  429.883314][T12623]  ? _find_first_zero_bit+0xcf/0x100
[  429.888661][T12623]  ? _find_first_zero_bit+0xcf/0x100
[  429.894013][T12623]  __lock_acquire+0x2cf8/0x7c50
[  429.898933][T12623]  ? verify_lock_unused+0x140/0x140
[  429.904187][T12623]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  429.910223][T12623]  ? verify_lock_unused+0x140/0x140
[  429.915479][T12623]  ? stack_trace_save+0x98/0xe0
[  429.920392][T12623]  lock_acquire+0x1b4/0x490
[  429.924945][T12623]  ? ocfs2_write_begin_nolock+0x1ca5/0x4270
[  429.930905][T12623]  ? __might_sleep+0xd0/0xd0
[  429.935557][T12623]  ? do_raw_spin_lock+0x11d/0x280
[  429.940666][T12623]  ? read_lock_is_recursive+0x10/0x10
[  429.946096][T12623]  ? __rwlock_init+0x140/0x140
[  429.950925][T12623]  ? do_raw_spin_unlock+0x11d/0x230
[  429.956187][T12623]  ocfs2_start_trans+0x267/0x6c0
[  429.961271][T12623]  ? ocfs2_write_begin_nolock+0x1ca5/0x4270
[  429.967225][T12623]  ? ocfs2_recovery_exit+0x50/0x50
[  429.972396][T12623]  ocfs2_write_begin_nolock+0x1ca5/0x4270
[  429.978207][T12623]  ? ocfs2_size_fits_inline_data+0x90/0x90
[  429.984072][T12623]  ? __lock_acquire+0x28b5/0x7c50
[  429.989185][T12623]  ? __might_sleep+0xd0/0xd0
[  429.993835][T12623]  ? preempt_count_add+0x8d/0x190
[  429.998908][T12623]  ? rwsem_write_trylock+0x12f/0x1b0
[  430.004281][T12623]  ? clear_nonspinnable+0x60/0x60
[  430.009364][T12623]  ocfs2_write_begin+0x1b8/0x300
[  430.014355][T12623]  ? ocfs2_readahead+0x190/0x190
[  430.019470][T12623]  ? mark_lock+0x94/0x320
[  430.023863][T12623]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  430.029889][T12623]  ? fault_in_readable+0x18a/0x1f0
[  430.035031][T12623]  ? fault_in_iov_iter_readable+0xbb/0x2e0
[  430.040883][T12623]  generic_perform_write+0x2db/0x560
[  430.046207][T12623]  ? _raw_spin_unlock_irq+0x1f/0x40
[  430.051542][T12623]  ? generic_file_direct_write+0x660/0x660
[  430.057657][T12623]  ? __file_remove_privs+0x5b0/0x5b0
[  430.063616][T12623]  ? __rwlock_init+0x140/0x140
[  430.068419][T12623]  ? __up_read+0x27c/0x660
[  430.072878][T12623]  ? bpf_lsm_capable+0x5/0x10
[  430.077593][T12623]  ? security_capable+0x85/0xb0
[  430.082495][T12623]  __generic_file_write_iter+0x172/0x430
[  430.088256][T12623]  ? ocfs2_inode_unlock+0x11a/0x140
[  430.093471][T12623]  ocfs2_file_write_iter+0x1593/0x1df0
[  430.098968][T12623]  ? verify_lock_unused+0x140/0x140
[  430.104218][T12623]  ? ocfs2_file_read_iter+0xb50/0xb50
[  430.109620][T12623]  ? aa_file_perm+0x3ef/0xec0
[  430.114344][T12623]  ? rcu_read_lock_any_held+0xb0/0x120
[  430.120050][T12623]  ? rcu_read_lock_bh_held+0xe0/0xe0
[  430.125414][T12623]  ? end_current_label_crit_section+0x14b/0x170
[  430.131695][T12623]  ? common_file_perm+0x171/0x1c0
[  430.136761][T12623]  vfs_write+0x44c/0x960
[  430.141125][T12623]  ? file_end_write+0x250/0x250
[  430.146091][T12623]  ? __fget_files+0x44a/0x4d0
[  430.151147][T12623]  ? __fdget_pos+0x2ae/0x360
[  430.155767][T12623]  ? ksys_write+0x71/0x240
[  430.160224][T12623]  ksys_write+0x143/0x240
[  430.164610][T12623]  ? __ia32_sys_read+0x80/0x80
[  430.169413][T12623]  ? lockdep_hardirqs_on+0x94/0x140
[  430.174664][T12623]  do_syscall_64+0x4c/0xa0
[  430.179128][T12623]  ? clear_bhb_loop+0x60/0xb0
[  430.183845][T12623]  ? clear_bhb_loop+0x60/0xb0
[  430.188704][T12623]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  430.194644][T12623] RIP: 0033:0x7ff9d898eb69
[  430.199107][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  430.218856][T12623] RSP: 002b:00007ff9d97a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  430.227321][T12623] RAX: ffffffffffffffda RBX: 00007ff9d8bb5fa0 RCX: 00007ff9d898eb69
[  430.235325][T12623] RDX: 00000000000000a0 RSI: 0000200000000180 RDI: 0000000000000004
[  430.243842][T12623] RBP: 00007ff9d8a11df1 R08: 0000000000000000 R09: 0000000000000000
[  430.251862][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  430.259877][T12623] R13: 0000000000000000 R14: 00007ff9d8bb5fa0 R15: 00007ffd539e2898
[  430.267899][T12623]  </TASK>
[  430.285904][ T4277] syz-executor: attempt to access beyond end of device
[  430.285904][ T4277] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  430.328962][ T4264] ocfs2: Unmounting device (7,1) on (node local)