last executing test programs:

1m37.018525256s ago: executing program 0 (id=405):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000500)={0xd0, 0x1, 0x1, 0x0, 0x6})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000c40)=@fd={0x8, 0x1, 0x4, 0x2000, 0xfffffffe, {0x0, 0xea60}, {0x3, 0x0, 0x8, 0xf7, 0x6, 0x1, "92c14d63"}, 0xc1a, 0x4, {}, 0x343})

1m36.923795905s ago: executing program 0 (id=406):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x1}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9587, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

1m36.87841249s ago: executing program 0 (id=407):
r0 = socket$inet6(0x10, 0x80002, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0)

1m36.77394126s ago: executing program 0 (id=409):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x4)
read$FUSE(r0, &(0x7f0000006840)={0x2020}, 0x2020)

1m36.749048683s ago: executing program 0 (id=410):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]})

1m36.457521301s ago: executing program 0 (id=411):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f000071b000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m25.777578064s ago: executing program 4 (id=504):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1)
ioctl$TCFLSH(r0, 0x8926, 0xbffffffffffffffb)

1m25.337539188s ago: executing program 4 (id=509):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1)

1m24.630867167s ago: executing program 4 (id=514):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f00000009c0)={[{@uni_xlateno}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@fat=@tz_utc}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@nocase}, {@shortname_lower}, {@uni_xlateno}]}, 0x25, 0x365, &(0x7f0000000640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

1m23.718195847s ago: executing program 4 (id=524):
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="b0030000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd0000000000000084000500e0000001000000000000000000000000000004d5330000000a000000ac1e0101000000000000000000000000ff3400000402d30001f8ffff050000000300000000000000000000000000000000000000000004d2330000000200000000000000000000000000ffff00000000ff34000000d209000b000000ff030000f5000000e70001006e68706f6c79313330352d6176783200000000c0e6e8da0000000000000000000000000000000000000000000000000000000000000000000000000000000000f8040000cb7e364887800daa90674271d049d9822205e75c4bbfd4ecbbc6610942e246ef31a2c75c1a7aaee036ec212d959cd9299355b697b89c67de92bb1b1516206ed1a1d3164cd615adc29a0fa96327335550a50d55d25666c56a875cbe4f146c483b7f735c75978cfd1dab428349e001f08de7629d694cde2b136f7c59163b8e628ead8c69052b44a7b5f7a7ad9bd1eb919835e48b91add702a5087ac1a26f7260000a0010000000000000000000050019006c00000008000b0001000000370102"], 0x3b0}}, 0x0)

1m23.454907183s ago: executing program 4 (id=529):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

1m23.302536638s ago: executing program 4 (id=530):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20)
getsockname$l2tp6(r0, 0x0, &(0x7f00000003c0))

1m21.324983713s ago: executing program 32 (id=411):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f000071b000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m8.248316702s ago: executing program 33 (id=530):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20)
getsockname$l2tp6(r0, 0x0, &(0x7f00000003c0))

4.092223677s ago: executing program 1 (id=1462):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$dsp(r0, 0x0, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000000))

3.96233198s ago: executing program 1 (id=1465):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x18, 0x31, 0xd7, 0x40, 0x0, 0x2}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000)

3.907671555s ago: executing program 2 (id=1466):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x800018, &(0x7f00000000c0)={[{@autodefrag}, {@clear_cache}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

2.554510018s ago: executing program 5 (id=1480):
syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x1141, &(0x7f0000002380)="$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")
lseek(0xffffffffffffffff, 0x1ff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)

2.201384413s ago: executing program 3 (id=1483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0)

2.078608056s ago: executing program 2 (id=1484):
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000080)
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3})

2.053083548s ago: executing program 3 (id=1485):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
sendto$inet(r0, &(0x7f0000000340)="6acb", 0x2, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

1.989707894s ago: executing program 1 (id=1486):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYBLOB=',gid='])

1.823596641s ago: executing program 1 (id=1487):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x130)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.82336052s ago: executing program 3 (id=1488):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe24, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.684055164s ago: executing program 3 (id=1489):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000013c0)={0x2, {0x2, 0xa, 0x8, 0x6, 0x3}})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001400)={0x2, {0x2, 0x4, 0x2, 0x1, 0x200}})

1.498609913s ago: executing program 3 (id=1491):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0)

1.397029733s ago: executing program 5 (id=1492):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000004c0)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@inlinecrypt}, {@sysvgroups}, {@i_version}]}, 0x1, 0x50c, &(0x7f0000001000)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)

1.270970205s ago: executing program 3 (id=1493):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c)
lchown(&(0x7f00000001c0)='./file1\x00', 0x0, 0xee00)

1.182574714s ago: executing program 2 (id=1494):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x7, @random="07311916f2d1", 'vlan0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

1.11491096s ago: executing program 6 (id=1496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

877.549924ms ago: executing program 6 (id=1497):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
sendto$inet(r0, &(0x7f0000000340)="6acb", 0x2, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

699.494172ms ago: executing program 1 (id=1498):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r0)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xc}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7d2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x40884)

658.645425ms ago: executing program 6 (id=1499):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0)

467.644834ms ago: executing program 5 (id=1500):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)

467.392814ms ago: executing program 2 (id=1501):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000f6dbdf25020000000800010028b4"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4)

467.073204ms ago: executing program 6 (id=1502):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe24, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

413.52825ms ago: executing program 1 (id=1503):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5579, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x2, 0x4, 0x1})

330.395708ms ago: executing program 6 (id=1504):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x0)

328.673178ms ago: executing program 2 (id=1505):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x1000000})

212.764909ms ago: executing program 5 (id=1506):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket(0x22, 0x2, 0x3)
getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1)

181.508652ms ago: executing program 5 (id=1507):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)

74.264233ms ago: executing program 6 (id=1508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

27.824108ms ago: executing program 5 (id=1509):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x130)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

0s ago: executing program 2 (id=1510):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0)

kernel console output (not intermixed with test programs):

l, please convert it to SG_IO
[  113.203011][ T1325] usb 2-1: Using ep0 maxpacket: 32
[  113.333147][ T1325] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.382865][ T1325] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  113.441069][ T1325] usb 2-1: config 0 interface 0 has no altsetting 0
[  113.448779][ T1325] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  113.497276][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.550024][ T1325] usb 2-1: config 0 descriptor??
[  113.869045][ T3076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.996210][ T3076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.115587][ T1325] betop 0003:20BC:5500.0006: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0
[  114.147247][ T1325] betop 0003:20BC:5500.0006: no inputs found
[  114.213747][ T3076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.259069][ T1325] usb 2-1: USB disconnect, device number 6
[  114.362674][ T5671] fido_id[5671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  114.421502][ T3076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.493300][ T5645] chnl_net:caif_netlink_parms(): no params data found
[  114.666906][ T5682] netlink: 104 bytes leftover after parsing attributes in process `syz.2.585'.
[  114.667047][ T5678] loop3: detected capacity change from 0 to 8192
[  114.787281][ T5687] overlayfs: filesystem on './file0' not supported
[  114.865256][ T5689] netlink: 104 bytes leftover after parsing attributes in process `syz.1.587'.
[  114.891348][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.952889][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.023823][ T5645] device bridge_slave_0 entered promiscuous mode
[  115.095641][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.120357][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.143346][ T5645] device bridge_slave_1 entered promiscuous mode
[  115.152900][ T4230] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  115.384940][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.394280][ T4230] usb 3-1: Using ep0 maxpacket: 8
[  115.513118][ T4230] usb 3-1: config 0 has an invalid interface number: 92 but max is 0
[  115.531452][ T4230] usb 3-1: config 0 has no interface number 0
[  115.555162][ T1325] Bluetooth: hci3: command 0x0409 tx timeout
[  115.641654][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.719659][ T4230] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=81.44
[  115.743179][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.777642][ T4230] usb 3-1: Product: syz
[  115.792111][ T4230] usb 3-1: Manufacturer: syz
[  115.812397][ T4230] usb 3-1: SerialNumber: syz
[  115.824608][ T4230] usb 3-1: config 0 descriptor??
[  115.874909][ T5645] team0: Port device team_slave_0 added
[  115.965784][ T5645] team0: Port device team_slave_1 added
[  116.067157][ T4230] usb 3-1: USB disconnect, device number 5
[  116.173154][ T5732] loop3: detected capacity change from 0 to 2048
[  116.173439][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.204707][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.339214][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.379001][ T5732] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.398537][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.413299][ T5732] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.416030][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.536984][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.900252][ T5645] device hsr_slave_0 entered promiscuous mode
[  116.923600][ T5645] device hsr_slave_1 entered promiscuous mode
[  117.023587][ T5645] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.031217][ T5645] Cannot create hsr debugfs directory
[  117.450951][ T5767] netlink: 'syz.2.613': attribute type 1 has an invalid length.
[  117.520222][ T5750] loop1: detected capacity change from 0 to 32768
[  117.633267][ T4230] Bluetooth: hci3: command 0x041b tx timeout
[  117.715427][ T5645] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  117.802011][ T5645] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  117.820569][ T5645] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  117.848917][ T5645] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  117.979909][ T3076] device hsr_slave_0 left promiscuous mode
[  118.017590][ T3076] device hsr_slave_1 left promiscuous mode
[  118.052676][ T3076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.076182][ T3076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.103513][ T3076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.130430][ T3076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.155458][ T3076] device bridge_slave_1 left promiscuous mode
[  118.178725][ T3076] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.220364][ T5758] loop3: detected capacity change from 0 to 40427
[  118.259737][ T3076] device bridge_slave_0 left promiscuous mode
[  118.267890][ T5758] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  118.284947][ T3076] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.300545][ T5758] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff
[  118.346271][ T5758] F2FS-fs (loop3): invalid crc value
[  118.354938][ T5758] F2FS-fs (loop3): Found nat_bits in checkpoint
[  118.378053][ T5789] loop1: detected capacity change from 0 to 512
[  118.447495][ T3076] device veth1_macvtap left promiscuous mode
[  118.467305][ T3076] device veth0_macvtap left promiscuous mode
[  118.482845][ T5789] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  118.484577][ T3076] device veth1_vlan left promiscuous mode
[  118.510730][ T5758] F2FS-fs (loop3): Start checkpoint disabled!
[  118.522226][ T5789] EXT4-fs (loop1): invalid journal inode
[  118.528892][ T3076] device veth0_vlan left promiscuous mode
[  118.533941][ T5789] EXT4-fs (loop1): can't get journal size
[  118.578186][ T5758] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  118.613731][ T5789] EXT4-fs (loop1): 1 truncate cleaned up
[  118.629588][ T5789] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none.
[  118.669673][ T5791] loop2: detected capacity change from 0 to 2048
[  118.739547][ T5791] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  118.781857][ T5789] EXT4-fs warning (device loop1): ext4_group_add:1696: No reserved GDT blocks, can't resize
[  118.852821][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2
[  118.910872][ T5794] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.912208][ T5791] attempt to access beyond end of device
[  118.912208][ T5791] loop2: rw=524288, want=33554432, limit=2048
[  118.972162][ T4175] udevd[4175]: incorrect nilfs2 checksum on /dev/loop2
[  119.065063][  T154] attempt to access beyond end of device
[  119.065063][  T154] loop3: rw=2049, want=40976, limit=40427
[  119.438262][ T5802] loop1: detected capacity change from 0 to 764
[  119.523975][ T5802] rock: directory entry would overflow storage
[  119.530657][ T5802] rock: sig=0x4654, size=5, remaining=4
[  119.646878][ T3076] team0 (unregistering): Port device team_slave_1 removed
[  119.712877][ T1325] Bluetooth: hci3: command 0x040f tx timeout
[  119.722640][ T3076] team0 (unregistering): Port device team_slave_0 removed
[  119.795817][ T3076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.849939][ T3076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.936424][ T5800] loop2: detected capacity change from 0 to 32768
[  119.997543][ T5800] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  120.048571][ T5800] (syz.2.621,5800,0):ocfs2_reflink_ioctl:4454 ERROR: status = -14
[  120.075933][ T3076] bond0 (unregistering): Released all slaves
[  120.212566][ T4196] (syz-executor,4196,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  120.247371][ T4196] ocfs2: Unmounting device (7,2) on (node local)
[  120.449028][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.497123][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.521690][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.577681][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[  120.626433][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  120.646994][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.717133][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.724302][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.753484][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  120.775516][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  120.788589][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.798914][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.806176][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.820026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  120.847203][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  120.897562][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  120.922168][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  120.995547][ T5645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  121.018612][ T5645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.052067][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  121.060715][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  121.100233][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  121.120311][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  121.143643][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.159773][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  121.173992][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.196120][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  121.505846][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  121.538507][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  121.566155][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.793443][ T4286] Bluetooth: hci3: command 0x0419 tx timeout
[  122.106891][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.127193][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.176963][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.204174][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.227942][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.238845][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.267720][ T5645] device veth0_vlan entered promiscuous mode
[  122.317956][ T5645] device veth1_vlan entered promiscuous mode
[  122.414940][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  122.434108][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  122.444218][ T5645] device veth0_macvtap entered promiscuous mode
[  122.461703][ T5645] device veth1_macvtap entered promiscuous mode
[  122.505609][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.532555][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.552888][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.588541][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.613038][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.668552][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.693007][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.717858][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.743869][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.757236][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  122.773696][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  122.784123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.803858][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.825774][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.872762][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.912746][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.952741][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.962600][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.992768][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.002628][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.032820][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.054123][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.073395][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  123.088477][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  123.115938][ T5645] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.132953][ T5645] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.141742][ T5645] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.172494][ T5645] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.323342][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.331847][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.394182][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  123.394248][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.449687][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.482904][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  123.941870][ T5891] loop3: detected capacity change from 0 to 64
[  123.990453][ T5893] loop2: detected capacity change from 0 to 1024
[  124.121435][ T5897] loop5: detected capacity change from 0 to 512
[  124.283853][ T5897] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback.
[  124.303018][ T5897] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.440133][ T5897] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:338: inode #15: comm syz.5.630: verity file corrupted; can't find descriptor
[  124.481864][ T5897] EXT4-fs (loop5): Remounting filesystem read-only
[  124.502871][ T5897] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size
[  124.663432][ T5918] loop1: detected capacity change from 0 to 128
[  124.771384][ T5918] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.802807][ T4237] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.838614][ T5918] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.223033][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.248537][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.293007][ T4237] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  125.347040][ T4237] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[  125.376611][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.414836][ T4237] usb 4-1: config 0 descriptor??
[  125.618443][ T5952] loop2: detected capacity change from 0 to 128
[  125.694018][ T5952] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  125.900565][ T4237] uclogic 0003:28BD:0074.0007: interface is invalid, ignoring
[  126.005390][ T5963] loop2: detected capacity change from 0 to 512
[  126.091415][ T4261] usb 4-1: USB disconnect, device number 8
[  126.108008][ T5963] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,noinit_itable,barrier=0x0000000000000040,grpjquota=,errors=remount-ro,init_itable,. Quota mode: writeback.
[  126.233422][ T5963] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.391076][ T5963] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:338: inode #15: comm syz.2.651: verity file corrupted; can't find descriptor
[  126.467067][ T5963] EXT4-fs (loop2): Remounting filesystem read-only
[  126.514671][ T5963] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size
[  126.668323][ T4296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.919966][ T4296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.182985][ T6012] loop3: detected capacity change from 0 to 2048
[  127.219594][ T6017] loop1: detected capacity change from 0 to 512
[  127.228935][ T4296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.262315][ T6021] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.330572][ T6017] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  127.405592][ T6017] EXT4-fs (loop1): 1 truncate cleaned up
[  127.411301][ T6017] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000066,nodioread_nolock,nodiscard,noquota,. Quota mode: none.
[  127.452943][   T26] audit: type=1800 audit(1760359359.377:13): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.671" name="bus" dev="loop1" ino=18 res=0 errno=0
[  127.495557][ T4296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.762880][ T5980] chnl_net:caif_netlink_parms(): no params data found
[  127.780754][ T6037] loop2: detected capacity change from 0 to 512
[  127.844550][ T6037] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  127.925758][ T6044] loop5: detected capacity change from 0 to 1024
[  127.950790][ T6046] loop1: detected capacity change from 0 to 1024
[  128.043034][ T6044] hfsplus: bad catalog entry type
[  128.102590][  T144] hfsplus: b-tree write err: -5, ino 4
[  128.261601][ T6046] overlayfs: unrecognized mount option "\fsplus" or missing value
[  128.345224][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.347750][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.348883][ T5980] device bridge_slave_0 entered promiscuous mode
[  128.366536][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.375682][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.376817][ T5980] device bridge_slave_1 entered promiscuous mode
[  128.437420][ T6072] netlink: 'syz.1.689': attribute type 6 has an invalid length.
[  128.461488][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.508242][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.593215][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[  128.720849][ T6088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.694'.
[  128.770737][ T6088] netlink: 43 bytes leftover after parsing attributes in process `syz.1.694'.
[  128.801732][ T6088] netlink: 'syz.1.694': attribute type 5 has an invalid length.
[  128.819422][ T6088] netlink: 43 bytes leftover after parsing attributes in process `syz.1.694'.
[  128.872500][ T5980] team0: Port device team_slave_0 added
[  128.986300][ T5980] team0: Port device team_slave_1 added
[  129.031808][ T6100] loop3: detected capacity change from 0 to 1024
[  129.178683][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.190765][ T6100] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  129.254028][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.280862][ T6100] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.316009][ T6100] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  129.478694][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.516683][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.534073][ T6125] loop1: detected capacity change from 0 to 512
[  129.554538][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.597786][ T6126] netlink: 64 bytes leftover after parsing attributes in process `syz.2.709'.
[  129.628023][ T6125] EXT4-fs (loop1): Ignoring removed oldalloc option
[  129.657716][ T6125] EXT4-fs (loop1): 1 truncate cleaned up
[  129.663739][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.715547][ T6125] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  129.835370][ T6135] loop2: detected capacity change from 0 to 1024
[  129.897323][ T6125] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.707: invalid indirect mapped block 234881024 (level 0)
[  129.982449][ T6125] EXT4-fs (loop1): Remounting filesystem read-only
[  130.096931][ T5980] device hsr_slave_0 entered promiscuous mode
[  130.128868][ T5980] device hsr_slave_1 entered promiscuous mode
[  130.170351][ T5980] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.234665][ T5980] Cannot create hsr debugfs directory
[  130.567420][ T6151] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  130.688681][ T4185] Bluetooth: hci1: command 0x041b tx timeout
[  130.771033][ T6151] syz.5.719 (6151) used greatest stack depth: 20992 bytes left
[  130.959826][ T4296] device hsr_slave_0 left promiscuous mode
[  130.972797][ T4297] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  130.988532][ T6176] loop3: detected capacity change from 0 to 512
[  131.015639][ T4296] device hsr_slave_1 left promiscuous mode
[  131.022349][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.051552][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.088146][ T6176] EXT4-fs (loop3): 1 orphan inode deleted
[  131.102891][ T6176] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,noquota,init_itable,dax=never,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[  131.103828][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.165218][ T6176] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.167282][ T6185] sctp: [Deprecated]: syz.5.730 (pid 6185) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.167282][ T6185] Use struct sctp_sack_info instead
[  131.195690][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.224000][ T4296] device bridge_slave_1 left promiscuous mode
[  131.230401][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.246175][ T4296] device bridge_slave_0 left promiscuous mode
[  131.264019][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.289037][ T4296] device veth1_macvtap left promiscuous mode
[  131.289656][ T4297] usb 3-1: Using ep0 maxpacket: 16
[  131.300513][ T4296] device veth0_macvtap left promiscuous mode
[  131.312405][ T4296] device veth1_vlan left promiscuous mode
[  131.327540][ T4296] device veth0_vlan left promiscuous mode
[  131.450832][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.482347][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.485491][ T6165] loop1: detected capacity change from 0 to 32768
[  131.512790][ T4297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  131.540849][ T4297] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  131.560812][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.599894][ T4297] usb 3-1: config 0 descriptor??
[  131.661462][ T6165] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  131.745034][ T4183] ocfs2: Unmounting device (7,1) on (node local)
[  131.770347][ T4296] bond1 (unregistering): Released all slaves
[  131.942937][ T6200] netlink: 260 bytes leftover after parsing attributes in process `syz.1.735'.
[  132.061457][ T4296] team0 (unregistering): Port device team_slave_1 removed
[  132.074835][ T4297] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  132.131534][ T4296] team0 (unregistering): Port device team_slave_0 removed
[  132.168800][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.188222][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.293643][ T4297] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[  132.304230][ T6208] loop1: detected capacity change from 0 to 64
[  132.318487][ T4297] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  132.332220][ T4297] microsoft 0003:045E:07DA.0008: no inputs found
[  132.341224][ T4297] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  132.374967][ T4297] usb 3-1: USB disconnect, device number 6
[  132.384525][ T4296] bond0 (unregistering): Released all slaves
[  132.395658][ T6208] hfs: request for non-existent node 131072 in B*Tree
[  132.406328][ T6208] hfs: request for non-existent node 131072 in B*Tree
[  132.469810][ T6209] fido_id[6209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  132.521208][ T6185] 8021q: VLANs not supported on hsr0
[  132.635080][ T6213] loop1: detected capacity change from 0 to 128
[  132.744740][ T6219] loop3: detected capacity change from 0 to 1024
[  132.754616][ T4297] Bluetooth: hci1: command 0x040f tx timeout
[  132.756856][ T5980] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  132.763085][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  132.774607][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  132.789685][ T5980] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  132.812083][ T6213] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  132.839341][ T5980] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  132.889997][ T6213] ext4 filesystem being mounted at mnt:[4026532799] supports timestamps until 2038-01-19 (0x7fffffff)
[  132.913495][ T4261] hid-generic 0000:0000:0000.0009: item fetching failed at offset 0/1
[  132.969425][ T5980] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  132.970068][ T4261] hid-generic: probe of 0000:0000:0000.0009 failed with error -22
[  133.463538][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.535008][ T5980] 8021q: adding VLAN 0 to HW filter on device team0
[  133.535802][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  133.536470][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  133.554791][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  133.555400][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  133.555803][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.555887][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.556403][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  133.585908][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  133.588729][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  133.604804][ T3076] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.604850][ T3076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.605476][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  133.622807][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  133.623763][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  133.626880][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  133.647734][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  133.722128][ T6248] loop1: detected capacity change from 0 to 8192
[  133.786069][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  133.787144][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  133.815988][ T6248] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  133.816455][ T6248] REISERFS (device loop1): using ordered data mode
[  133.816467][ T6248] reiserfs: using flush barriers
[  133.840443][ T6248] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  133.917028][ T6248] REISERFS (device loop1): checking transaction log (loop1)
[  133.945992][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  133.998232][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  134.009285][ T6248] REISERFS (device loop1): Using r5 hash to sort names
[  134.044145][ T6248] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  134.058858][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  134.148869][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  134.198780][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  134.538787][ T6292] loop5: detected capacity change from 0 to 1024
[  134.656189][ T6292] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.812664][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.822588][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  134.836929][ T2857] Bluetooth: hci1: command 0x0419 tx timeout
[  134.854614][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.118182][ T6315] loop5: detected capacity change from 0 to 256
[  135.270573][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  135.270605][ T6315] FAT-fs (loop5): Directory bread(block 64) failed
[  135.324501][ T6315] FAT-fs (loop5): Directory bread(block 65) failed
[  135.373489][ T6315] FAT-fs (loop5): Directory bread(block 66) failed
[  135.380098][ T6315] FAT-fs (loop5): Directory bread(block 67) failed
[  135.472373][ T6315] FAT-fs (loop5): Directory bread(block 68) failed
[  135.520152][ T6315] FAT-fs (loop5): Directory bread(block 69) failed
[  135.557756][ T6315] FAT-fs (loop5): Directory bread(block 70) failed
[  135.594547][ T6315] FAT-fs (loop5): Directory bread(block 71) failed
[  135.643293][ T6315] FAT-fs (loop5): Directory bread(block 72) failed
[  135.649893][ T6315] FAT-fs (loop5): Directory bread(block 73) failed
[  135.668344][ T6336] loop2: detected capacity change from 0 to 64
[  135.758636][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  135.786409][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  135.889252][ T5980] device veth0_vlan entered promiscuous mode
[  135.947634][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  135.969331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.043202][ T5980] device veth1_vlan entered promiscuous mode
[  136.060472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.089445][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  136.092554][ T6298] loop3: detected capacity change from 0 to 32768
[  136.134995][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  136.227678][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  136.246955][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  136.261711][ T6351] loop1: detected capacity change from 0 to 1024
[  136.309197][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.311029][ T6298] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  136.328731][ T5980] device veth0_macvtap entered promiscuous mode
[  136.390744][ T5980] device veth1_macvtap entered promiscuous mode
[  136.446671][ T6355] loop2: detected capacity change from 0 to 4096
[  136.460070][ T6359] (syz.3.767,6359,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8
[  136.513565][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.530190][ T6359] (syz.3.767,6359,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  136.540976][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.563192][ T6359] (syz.3.767,6359,0):ocfs2_mknod:298 ERROR: status = -2
[  136.581442][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.596447][ T6359] (syz.3.767,6359,0):ocfs2_mknod:502 ERROR: status = -2
[  136.607846][ T6359] (syz.3.767,6359,0):ocfs2_create:676 ERROR: status = -2
[  136.615323][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.626650][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.652814][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.668575][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.679373][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.749270][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.787499][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  136.811809][ T6362] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.815951][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  136.855742][ T4193] ocfs2: Unmounting device (7,3) on (node local)
[  136.909170][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  136.949543][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  137.015537][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.050707][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.072156][ T6370] loop3: detected capacity change from 0 to 2048
[  137.091132][ T6372] loop5: detected capacity change from 0 to 1024
[  137.099811][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.113000][ T4286] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  137.126122][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.138417][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.152283][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.172542][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.184574][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.197380][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.208641][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  137.228560][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  137.289707][ T6370] EXT4-fs (loop3): Ignoring removed bh option
[  137.323423][ T5980] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.332190][ T5980] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.403709][ T6372] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.442789][ T5980] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.451553][ T5980] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.463335][ T6370] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  137.486606][ T6386] loop2: detected capacity change from 0 to 256
[  137.490194][ T6372] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #11: comm syz.5.790: directory missing '..'
[  137.513045][ T4286] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  137.521093][ T4286] usb 2-1: config 0 has no interface number 0
[  137.527853][ T4286] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.543547][ T4286] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.553434][ T4286] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  137.562502][ T4286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.572422][ T4286] usb 2-1: config 0 descriptor??
[  137.583561][ T6370] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  137.602194][ T6370] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  137.622039][ T6370] EXT4-fs (loop3): This should not happen!! Data will be lost
[  137.622039][ T6370] 
[  137.631849][ T6370] EXT4-fs (loop3): Total free blocks count 0
[  137.638746][ T6370] EXT4-fs (loop3): Free/Dirty block details
[  137.644925][ T6370] EXT4-fs (loop3): free_blocks=2415919104
[  137.646786][ T6386] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d)
[  137.650738][ T6370] EXT4-fs (loop3): dirty_blocks=64
[  137.668096][ T6370] EXT4-fs (loop3): Block reservation details
[  137.692971][ T6370] EXT4-fs (loop3): i_reserved_data_blocks=4
[  137.909365][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.962866][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.009121][    T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  138.023654][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  138.051322][ T4286] prodikeys 0003:041E:2801.000A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1
[  138.101906][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.107177][ T4286] hid_prodikeys: hid-prodikeys: failed to find output report
[  138.107177][ T4286] 
[  138.130724][    T9] EXT4-fs (loop3): This should not happen!! Data will be lost
[  138.130724][    T9] 
[  138.150543][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.255039][ T1108] usb 2-1: USB disconnect, device number 7
[  138.277394][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.372858][ T2857] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  138.518468][ T6401] fido_id[6401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  138.622830][ T2857] usb 3-1: Using ep0 maxpacket: 16
[  138.747797][ T2857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.798547][ T2857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.842742][ T2857] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  138.886072][ T2857] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  138.938932][ T2857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.995068][ T2857] usb 3-1: config 0 descriptor??
[  139.507265][ T2857] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input12
[  139.608116][ T2857] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  139.707996][   T13] usb 3-1: USB disconnect, device number 7
[  139.805895][ T6457] fido_id[6457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  139.828835][ T6454] loop3: detected capacity change from 0 to 4096
[  139.875915][ T6454] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  139.929698][ T6454] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  140.018506][ T6454] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  140.087274][ T6430] loop6: detected capacity change from 0 to 32768
[  140.092384][ T6454] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  140.129300][ T6454] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  140.157798][ T6454] ntfs: volume version 3.1.
[  140.171210][ T6454] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  140.172339][ T6473] bridge0: port 3(vlan1) entered blocking state
[  140.216606][ T6454] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  140.269967][ T6473] bridge0: port 3(vlan1) entered disabled state
[  140.290990][ T6430] XFS (loop6): Mounting V5 Filesystem
[  140.302569][ T6454] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  140.317000][ T6473] device vlan1 entered promiscuous mode
[  140.324069][ T6473] bridge0: port 3(vlan1) entered blocking state
[  140.331583][ T6473] bridge0: port 3(vlan1) entered forwarding state
[  140.374651][ T6454] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  140.388642][ T6454] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  140.687134][ T6430] XFS (loop6): Ending clean mount
[  140.759751][ T6430] XFS (loop6): Quotacheck needed: Please wait.
[  140.872592][ T6507] loop1: detected capacity change from 0 to 512
[  140.961744][ T6430] XFS (loop6): Quotacheck: Done.
[  140.988605][ T6507] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  141.001346][ T6507] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.031975][ T6507] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz.1.828: Directory hole found for htree leaf block 0
[  141.083254][ T4230] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  141.191117][ T5980] XFS (loop6): Unmounting Filesystem
[  141.322814][ T4230] usb 4-1: Using ep0 maxpacket: 32
[  141.464652][ T4230] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.484849][ T4230] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.516073][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0
[  141.540382][ T6534] loop2: detected capacity change from 0 to 1024
[  141.547673][ T4230] usb 4-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  141.565066][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.592851][ T6534] EXT4-fs (loop2): Ignoring removed bh option
[  141.625241][ T4230] usb 4-1: config 0 descriptor??
[  141.757845][ T6534] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noauto_da_alloc,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  141.923586][ T6534] EXT4-fs error (device loop2): ext4_check_all_de:667: inode #12: block 7: comm syz.2.837: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  141.973977][ T6555] loop6: detected capacity change from 0 to 64
[  141.992245][ T6534] EXT4-fs (loop2): Remounting filesystem read-only
[  142.073036][ T2857] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  142.089306][ T4230] wacom 0003:056A:0057.000C: unknown main item tag 0x0
[  142.106755][ T4230] wacom 0003:056A:0057.000C: unknown main item tag 0x0
[  142.149457][ T4230] wacom 0003:056A:0057.000C: hidraw0: USB HID vb.27 Device [HID 056a:0057] on usb-dummy_hcd.3-1/input0
[  142.291218][ T4230] usb 4-1: USB disconnect, device number 9
[  142.369262][ T2857] usb 2-1: Using ep0 maxpacket: 8
[  142.464482][ T6568] fido_id[6568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  142.662221][ T6574] loop5: detected capacity change from 0 to 32768
[  142.753086][ T2857] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[  142.765218][ T2857] usb 2-1: config 2 has no interface number 0
[  142.771380][ T2857] usb 2-1: config 2 interface 31 has no altsetting 0
[  142.784831][ T6574] attempt to access beyond end of device
[  142.784831][ T6574] loop5: rw=0, want=34359738368, limit=32768
[  142.796961][ T6574] metapage_read_end_io: I/O error
[  142.802053][ T6574] read_mapping_page failed!
[  142.806736][ T6574] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  142.813872][ T6574] Mount JFS Failure: -5
[  142.818064][ T6574] jfs_mount failed w/return code = -5
[  143.052996][ T2857] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  143.087126][ T2857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.105548][ T2857] usb 2-1: Product: syz
[  143.109773][ T2857] usb 2-1: Manufacturer: syz
[  143.117362][ T6594] loop5: detected capacity change from 0 to 16
[  143.152091][ T2857] usb 2-1: SerialNumber: syz
[  143.263418][ T6594] erofs: (device loop5): mounted with root inode @ nid 36.
[  143.392147][ T6594] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  143.393043][ T1108] Bluetooth: hci2: command 0x0811 tx timeout
[  143.472787][ T6594] attempt to access beyond end of device
[  143.472787][ T6594] loop5: rw=524288, want=34359740336, limit=16
[  143.921031][ T6631] loop2: detected capacity change from 0 to 1024
[  144.023753][ T6635] loop6: detected capacity change from 0 to 1024
[  144.063080][ T2857] ch9200: probe of 2-1:2.31 failed with error -22
[  144.092566][ T2857] usb 2-1: USB disconnect, device number 8
[  144.095878][ T6631] hfsplus: request for non-existent node 134217728 in B*Tree
[  144.130989][ T6637] loop5: detected capacity change from 0 to 512
[  144.134492][ T6635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002]
[  144.168348][ T6631] hfsplus: request for non-existent node 134217728 in B*Tree
[  144.178609][ T6635] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,barrier,minixdf,noblock_validity,debug_want_extra_isize=0x0000000000000080,bsddf,debug,acl,noinit_itable,,errors=continue. Quota mode: none.
[  144.319493][ T6637] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5
[  144.319493][ T6637] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  144.319493][ T6637] 
[  144.388728][ T6635] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.870: bg 0: block 88: padding at end of block bitmap is not set
[  144.481016][ T6637] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  144.576452][ T6637] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000]
[  144.614242][ T6605] loop3: detected capacity change from 0 to 32768
[  144.642567][ T6637] EXT4-fs (loop5): 1 truncate cleaned up
[  144.696196][ T6637] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,nodiscard,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  144.759568][ T6637] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.871: iget: bad i_size value: 360287970199339018
[  144.883197][ T1279] __quota_error: 6 callbacks suppressed
[  144.883214][ T1279] Quota error (device loop5): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[  144.941791][ T6663] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  144.984663][ T1279] EXT4-fs error (device loop5): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 1
[  145.092446][ T6671] loop2: detected capacity change from 0 to 512
[  145.271895][ T6671] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  145.327223][ T6671] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  145.365927][ T6671] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  145.498823][ T6671] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 7: comm syz.2.882: lblock 12 mapped to illegal pblock 7 (length 22)
[  145.642935][ T4230] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  145.752852][ T4286] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  145.882473][ T6700] loop6: detected capacity change from 0 to 512
[  145.903145][ T4230] usb 2-1: Using ep0 maxpacket: 8
[  145.960851][ T6700] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.891: casefold flag without casefold feature
[  145.990415][ T6700] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.891: couldn't read orphan inode 15 (err -117)
[  146.035439][ T6703] loop2: detected capacity change from 0 to 4096
[  146.043177][ T4230] usb 2-1: config 140 has an invalid interface number: 41 but max is 0
[  146.051785][ T6700] EXT4-fs (loop6): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback.
[  146.071126][ T4230] usb 2-1: config 140 has no interface number 0
[  146.077597][ T4230] usb 2-1: config 140 interface 41 altsetting 0 endpoint 0x6 has invalid maxpacket 926, setting to 64
[  146.091943][ T6673] loop5: detected capacity change from 0 to 32768
[  146.102952][ T6703] ntfs3: loop2: ino=3, Correct links count -> 2.
[  146.123046][ T4286] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  146.131581][ T4286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.211917][ T6673] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.879 (6673)
[  146.255462][ T4286] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  146.273614][ T4286] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  146.308337][ T4286] usb 4-1: Manufacturer: syz
[  146.313382][ T4230] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=77.86
[  146.332775][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.379144][ T4286] usb 4-1: config 0 descriptor??
[  146.392801][ T4230] usb 2-1: Product: syz
[  146.397027][ T4230] usb 2-1: Manufacturer: syz
[  146.411712][ T4230] usb 2-1: SerialNumber: syz
[  146.545162][ T6673] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  146.565753][ T6673] BTRFS info (device loop5): using free space tree
[  146.575816][ T6673] BTRFS info (device loop5): has skinny extents
[  146.592807][ T4286] rc_core: IR keymap rc-hauppauge not found
[  146.609476][ T4286] Registered IR keymap rc-empty
[  146.624005][ T4286] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  146.647739][ T4286] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16
[  146.797815][ T4230] rndis_wlan 2-1:140.41: invalid descriptor buffer length
[  146.809997][ T4230] usb 2-1: bad CDC descriptors
[  146.820410][ T4230] rndis_host 2-1:140.41: invalid descriptor buffer length
[  146.834786][ T4230] usb 2-1: bad CDC descriptors
[  146.840300][ T4230] cdc_acm 2-1:140.41: invalid descriptor buffer length
[  146.859875][ T4230] usb 2-1: USB disconnect, device number 9
[  146.922783][    C0] igorplugusb 4-1:0.0: receive overflow, at least 33 lost
[  147.003250][ T6673] BTRFS info (device loop5): enabling ssd optimizations
[  147.130592][ T4230] usb 4-1: USB disconnect, device number 10
[  147.308981][ T6760] loop1: detected capacity change from 0 to 128
[  147.336251][ T6761] tipc: Invalid UDP bearer configuration
[  147.336292][ T6761] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  147.444186][ T6760] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  147.503999][ T6760] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  147.949320][ T6793] loop2: detected capacity change from 0 to 256
[  147.997985][ T6792] loop1: detected capacity change from 0 to 1024
[  148.033800][ T6793] exfat: Deprecated parameter 'namecase'
[  148.057731][ T6793] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d)
[  148.117329][ T6792] EXT4-fs (loop1): Ignoring removed orlov option
[  148.148440][ T6792] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  148.242557][ T6792] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,sysvgroups,,errors=continue. Quota mode: none.
[  148.352956][ T6783] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  148.562560][ T6814] loop5: detected capacity change from 0 to 256
[  148.625320][ T6783] usb 7-1: Using ep0 maxpacket: 32
[  148.648521][ T6814] exfat: Deprecated parameter 'namecase'
[  148.720762][ T6814] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  148.753513][ T6783] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  148.933809][ T6783] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  148.959606][ T6783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.975782][ T6802] loop3: detected capacity change from 0 to 32768
[  148.993860][ T6783] usb 7-1: Product: syz
[  148.998081][ T6783] usb 7-1: Manufacturer: syz
[  149.016824][ T6829] loop2: detected capacity change from 0 to 2048
[  149.032935][ T6835] loop5: detected capacity change from 0 to 128
[  149.039053][ T6802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.911 (6802)
[  149.064910][ T6783] usb 7-1: SerialNumber: syz
[  149.080111][ T6783] usb 7-1: config 0 descriptor??
[  149.103476][ T6802] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  149.113041][ T6798] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  149.126927][ T6829] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  149.198572][ T6802] BTRFS info (device loop3): setting nodatasum
[  149.236336][ T6802] BTRFS info (device loop3): force zlib compression, level 3
[  149.243913][ T6802] BTRFS info (device loop3): enabling ssd optimizations
[  149.250893][ T6802] BTRFS info (device loop3): allowing degraded mounts
[  149.258552][ T6802] BTRFS info (device loop3): using free space tree
[  149.265489][ T6802] BTRFS info (device loop3): has skinny extents
[  149.348385][ T6783] usb 7-1: USB disconnect, device number 2
[  149.635646][ T6850] udevd[6850]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.664969][ T6864] ptrace attach of "./syz-executor exec"[4196] was attempted by " ��      ��      �      ��      ��      ��      ��              ��      ��      ��                 ����                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ����    ��%-��5鎢��D
|VTy��\x22�͚K��N�/)���/��H�M�&��CsnVkת{Jv1��%���_)�$n�:�,�\x5c�]�n�+]�2yr�r�L˕�-6�^%D�\x5c~�z�w'Mc\x22o������٫�`�ˤ=s�N�8|?ޔ�����Br��9��ɳb��F���{i�$�]�끕
[  150.491086][ T6899] loop6: detected capacity change from 0 to 1024
[  150.640527][ T6833] loop1: detected capacity change from 0 to 65536
[  150.759640][ T6899] hfsplus: bad catalog entry type
[  150.954711][ T6833] XFS (loop1): Mounting V5 Filesystem
[  150.961883][  T144] hfsplus: b-tree write err: -5, ino 4
[  151.100680][   T13] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  151.146464][ T6833] XFS (loop1): Ending clean mount
[  151.166065][ T6833] XFS (loop1): Quotacheck needed: Please wait.
[  151.219214][ T6938] loop5: detected capacity change from 0 to 512
[  151.284515][ T6939] loop2: detected capacity change from 0 to 128
[  151.291658][ T6833] XFS (loop1): Quotacheck: Done.
[  151.330748][ T6833] XFS (loop1): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[  151.378744][ T6939] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  151.423218][ T6939] hpfs: filesystem error: improperly stopped
[  151.429309][ T6939] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  151.456776][ T4183] XFS (loop1): Unmounting Filesystem
[  151.463133][ T6939] hpfs: You really don't want any checks? You are crazy...
[  151.471221][ T6939] hpfs: hpfs_map_sector(): read error
[  151.499607][ T6939] hpfs: code page support is disabled
[  151.505722][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  151.518290][ T6939] hpfs: hpfs_map_4sectors(): unaligned read
[  151.528328][   T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  151.568929][ T6939] hpfs: hpfs_map_4sectors(): unaligned read
[  151.601928][ T6939] hpfs: filesystem error: unable to find root dir
[  151.620973][   T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  151.681410][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.739657][ T6939] hpfs: hpfs_map_4sectors(): unaligned read
[  151.749354][   T13] usb 4-1: config 0 descriptor??
[  151.759732][   T26] audit: type=1800 audit(1760359383.687:14): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.947" name="/newroot/33/bus/#189//deleted" dev="tmpfs" ino=189 res=0 errno=0
[  151.773148][ T6915] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  152.099810][ T6962] loop6: detected capacity change from 0 to 256
[  152.199181][ T6962] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  152.241863][ T6964] loop2: detected capacity change from 0 to 1024
[  152.294156][   T13] logitech-djreceiver 0003:046D:C71B.000D: hidraw0: USB HID vff.fa Device [HID 046d:c71b] on usb-dummy_hcd.3-1/input0
[  152.467299][    T9] hfsplus: b-tree write err: -5, ino 4
[  152.486834][   T13] usb 4-1: USB disconnect, device number 11
[  152.597757][ T6969] fido_id[6969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  152.668283][ T6974] device vlan2 entered promiscuous mode
[  152.709774][ T6974] device bridge0 entered promiscuous mode
[  152.761901][ T6953] loop5: detected capacity change from 0 to 32768
[  152.920469][ T6986] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.961'.
[  153.044222][ T6982] loop2: detected capacity change from 0 to 4096
[  153.109861][ T6994] netlink: 144 bytes leftover after parsing attributes in process `syz.6.964'.
[  153.141879][ T6982] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  153.207559][ T6982] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  153.298991][ T6982] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  153.355676][ T6982] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  153.462806][ T6982] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  153.527917][ T7011] loop1: detected capacity change from 0 to 256
[  153.541316][ T6982] ntfs: volume version 3.1.
[  153.571861][ T6982] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use!
[  153.618453][ T6982] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  153.686045][ T6982] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  153.689823][ T7011] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d)
[  153.719627][ T7017] loop5: detected capacity change from 0 to 512
[  153.827414][ T7017] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  153.871974][ T7017] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  153.965233][ T7017] EXT4-fs (loop5): 1 truncate cleaned up
[  153.971559][ T7017] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback.
[  154.028110][ T7004] loop3: detected capacity change from 0 to 32768
[  154.149801][ T7032] loop1: detected capacity change from 0 to 256
[  154.181711][ T7004] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  154.238283][ T7032] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  154.636384][ T4193] ocfs2: Unmounting device (7,3) on (node local)
[  154.988026][ T7060] loop6: detected capacity change from 0 to 1024
[  155.150313][ T7068] loop2: detected capacity change from 0 to 64
[  155.188990][ T7060] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  155.250107][ T7060] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.404686][  T155] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  155.456819][  T155] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  155.477073][  T155] EXT4-fs (loop6): This should not happen!! Data will be lost
[  155.477073][  T155] 
[  155.522505][  T155] EXT4-fs (loop6): Total free blocks count 0
[  155.532792][   T13] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  155.547405][  T155] EXT4-fs (loop6): Free/Dirty block details
[  155.560819][  T155] EXT4-fs (loop6): free_blocks=4293918720
[  155.577294][  T155] EXT4-fs (loop6): dirty_blocks=16
[  155.582554][  T155] EXT4-fs (loop6): Block reservation details
[  155.602803][  T155] EXT4-fs (loop6): i_reserved_data_blocks=1
[  155.690394][ T7086] loop5: detected capacity change from 0 to 64
[  155.723516][ T7054] loop1: detected capacity change from 0 to 32768
[  155.771954][ T7054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.987 (7054)
[  155.900537][ T7054] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  155.913457][   T13] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00
[  155.932395][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.941023][ T7054] BTRFS info (device loop1): setting nodatasum
[  155.948475][ T7054] BTRFS info (device loop1): force zlib compression, level 3
[  155.957030][   T13] usb 4-1: config 0 descriptor??
[  155.963451][ T7054] BTRFS info (device loop1): enabling ssd optimizations
[  155.989498][ T7054] BTRFS info (device loop1): allowing degraded mounts
[  156.037800][ T7054] BTRFS info (device loop1): using free space tree
[  156.050394][ T7095] loop6: detected capacity change from 0 to 8
[  156.068506][ T7093] netem: change failed
[  156.073112][ T7054] BTRFS info (device loop1): has skinny extents
[  156.114657][ T7095] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  156.138149][ T4335] udevd[4335]: incorrect cramfs checksum on /dev/loop6
[  156.236516][ T4335] udevd[4335]: incorrect cramfs checksum on /dev/loop6
[  156.408505][ T7084] loop2: detected capacity change from 0 to 32768
[  156.446513][   T13] saitek 0003:06A3:0CFA.000E: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.3-1/input0
[  156.478452][ T7084] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.998 (7084)
[  156.538048][ T7123] loop6: detected capacity change from 0 to 512
[  156.611221][ T7123] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,barrier,quota,,errors=continue. Quota mode: writeback.
[  156.640462][   T13] usb 4-1: USB disconnect, device number 12
[  156.661667][ T7123] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.704088][ T7123] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #2: block 3: comm syz.6.1007: lblock 8 mapped to illegal pblock 3 (length 26)
[  156.790784][ T7124] fido_id[7124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  156.797634][ T7127] netlink: 'syz.5.1009': attribute type 5 has an invalid length.
[  156.901979][ T7084] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  156.945177][ T7084] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  156.967457][ T7084] BTRFS info (device loop2): use zstd compression, level 3
[  156.983343][ T7084] BTRFS info (device loop2): using free space tree
[  156.998643][ T7084] BTRFS info (device loop2): has skinny extents
[  157.349512][ T7166] tipc: Started in network mode
[  157.355220][ T7166] tipc: Node identity ., cluster identity 4711
[  157.361446][ T7166] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  157.379299][ T7084] BTRFS info (device loop2): enabling ssd optimizations
[  157.488608][ T7175] loop1: detected capacity change from 0 to 256
[  157.503000][ T4223] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  157.751633][   T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  157.793020][ T4223] usb 4-1: Using ep0 maxpacket: 32
[  157.913185][ T4223] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.931645][ T4223] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  157.970498][ T4223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.995165][ T4223] usb 4-1: config 0 descriptor??
[  158.022797][   T13] usb 6-1: Using ep0 maxpacket: 32
[  158.035760][ T4223] dw2102: su3000_identify_state
[  158.040710][ T4223] dvb-usb: found a 'TeVii S662' in warm state.
[  158.072780][ T4223] dw2102: su3000_power_ctrl: 1, initialized 0
[  158.087887][ T7190] loop6: detected capacity change from 0 to 2048
[  158.104830][ T4223] dvb-usb: bulk message failed: -22 (2/0)
[  158.120503][ T4223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  158.143050][   T13] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  158.151722][ T4223] dvbdev: DVB: registering new adapter (TeVii S662)
[  158.171741][   T13] usb 6-1: config 0 has no interface number 0
[  158.180104][ T4223] usb 4-1: media controller created
[  158.195938][ T7195] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.216895][   T13] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  158.232746][ T4223] dvb-usb: bulk message failed: -22 (6/0)
[  158.261922][ T4223] dw2102: i2c transfer failed.
[  158.264331][ T7194] loop1: detected capacity change from 0 to 1024
[  158.272317][ T7160] dvb-usb: bulk message failed: -22 (4/0)
[  158.279487][ T7160] dw2102: i2c transfer failed.
[  158.307433][ T4223] dvb-usb: bulk message failed: -22 (6/0)
[  158.313596][ T4223] dw2102: i2c transfer failed.
[  158.334523][ T4223] dvb-usb: bulk message failed: -22 (6/0)
[  158.340399][ T4223] dw2102: i2c transfer failed.
[  158.383973][ T4223] dvb-usb: bulk message failed: -22 (6/0)
[  158.399038][ T4223] dw2102: i2c transfer failed.
[  158.405040][ T4223] dvb-usb: bulk message failed: -22 (6/0)
[  158.410915][ T4223] dw2102: i2c transfer failed.
[  158.416608][ T4223] dvb-usb: bulk message failed: -22 (6/0)
[  158.422474][ T4223] dw2102: i2c transfer failed.
[  158.427908][   T13] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  158.438111][ T4223] dvb-usb: MAC address: 02:02:02:02:02:02
[  158.444268][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.453277][ T7194] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  158.462768][   T13] usb 6-1: Product: syz
[  158.468537][   T13] usb 6-1: Manufacturer: syz
[  158.478123][ T4223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  158.486839][   T13] usb 6-1: SerialNumber: syz
[  158.494719][   T13] usb 6-1: config 0 descriptor??
[  158.527547][ T4223] dvb-usb: bulk message failed: -22 (3/0)
[  158.536331][   T13] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  158.547073][ T4223] dw2102: command 0x0e transfer failed.
[  158.566621][   T13] em28xx 6-1:0.132: Video interface 132 found:
[  158.577039][ T4223] dvb-usb: bulk message failed: -22 (3/0)
[  158.592474][ T4223] dw2102: command 0x0e transfer failed.
[  158.614649][ T7194] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  158.656103][ T7194] EXT4-fs (loop1): re-mounted. Opts: journal_async_commit,journal_ioprio=0x0000000000000002,stripe=0x000000000000009d,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback.
[  158.926552][ T4223] dvb-usb: bulk message failed: -22 (3/0)
[  158.932538][ T4223] dw2102: command 0x0e transfer failed.
[  158.959118][ T4223] dvb-usb: bulk message failed: -22 (3/0)
[  158.965561][   T13] em28xx 6-1:0.132: unknown em28xx chip ID (39)
[  159.002532][ T4223] dw2102: command 0x0e transfer failed.
[  159.008797][ T4223] dvb-usb: bulk message failed: -22 (1/0)
[  159.045276][ T4223] dw2102: command 0x51 transfer failed.
[  159.050927][ T4223] dvb-usb: bulk message failed: -22 (5/0)
[  159.083341][ T4223] dw2102: i2c probe for address 0x68 failed.
[  159.100462][ T4223] dvb-usb: bulk message failed: -22 (5/0)
[  159.110442][ T4223] dw2102: i2c probe for address 0x69 failed.
[  159.127169][ T4223] dvb-usb: bulk message failed: -22 (5/0)
[  159.137301][ T4223] dw2102: i2c probe for address 0x6a failed.
[  159.152270][ T4223] dw2102: probing for demodulator failed. Is the external power switched on?
[  159.191671][ T4223] dvb-usb: no frontend was attached by 'TeVii S662'
[  159.238551][ T7227] loop6: detected capacity change from 0 to 8192
[  159.273418][   T13] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  159.298087][   T13] em28xx 6-1:0.132: board has no eeprom
[  159.326484][ T7227] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  159.366583][ T7227] REISERFS (device loop6): using ordered data mode
[  159.382886][ T4223] rc_core: IR keymap rc-tt-1500 not found
[  159.388760][ T6783] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  159.399394][ T4223] Registered IR keymap rc-empty
[  159.422814][   T13] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  159.422841][ T7227] reiserfs: using flush barriers
[  159.430705][   T13] em28xx 6-1:0.132: analog set to bulk mode.
[  159.460052][ T7227] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  159.477874][ T7227] REISERFS (device loop6): checking transaction log (loop6)
[  159.484702][   T13] usb 6-1: USB disconnect, device number 2
[  159.491746][ T4223] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  159.501283][   T13] em28xx 6-1:0.132: Disconnecting em28xx
[  159.509719][ T7227] REISERFS (device loop6): Using r5 hash to sort names
[  159.528804][ T7227] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  159.560570][ T4223] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17
[  159.629961][ T4286] em28xx 6-1:0.132: Registering V4L2 extension
[  159.638499][ T4223] dvb-usb: schedule remote query interval to 250 msecs.
[  159.655874][ T4223] dw2102: su3000_power_ctrl: 0, initialized 1
[  159.711876][ T4223] dvb-usb: TeVii S662 successfully initialized and connected.
[  159.782995][ T4223] usb 4-1: USB disconnect, device number 13
[  159.803020][ T6783] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.853808][ T6783] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  159.909238][ T6783] usb 2-1: config 1 has no interface number 0
[  159.937459][ T6783] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  159.957393][ T7256] ptrace attach of "./syz-executor exec"[5645] was attempted by ""[7256]
[  160.042845][ T4286] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  160.050963][ T4286] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  160.085711][ T4223] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  160.102898][ T4286] em28xx 6-1:0.132: No AC97 audio processor
[  160.138811][ T4286] usb 6-1: Decoder not found
[  160.147834][ T7262] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  160.153281][ T6783] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  160.189886][ T4286] em28xx 6-1:0.132: failed to create media graph
[  160.209082][ T7224] loop2: detected capacity change from 0 to 32768
[  160.216753][ T4286] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  160.224172][ T6783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.232195][ T6783] usb 2-1: Product: syz
[  160.276208][ T4286] em28xx 6-1:0.132: Remote control support is not available for this card.
[  160.289830][ T6783] usb 2-1: Manufacturer: syz
[  160.308851][ T6783] usb 2-1: SerialNumber: syz
[  160.342292][   T13] em28xx 6-1:0.132: Closing input extension
[  160.431703][ T7224] XFS (loop2): Mounting V5 Filesystem
[  160.443870][ T6783] usb 2-1: selecting invalid altsetting 1
[  160.453464][   T13] em28xx 6-1:0.132: Freeing device
[  160.510594][ T7282] loop5: detected capacity change from 0 to 128
[  160.622510][ T7224] XFS (loop2): Ending clean mount
[  160.883133][ T6783] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS
[  160.889263][ T6783] cdc_ncm 2-1:1.1: bind() failure
[  160.929305][ T6783] usb 2-1: USB disconnect, device number 10
[  161.000648][ T4196] XFS (loop2): Unmounting Filesystem
[  161.170137][ T7308] loop5: detected capacity change from 0 to 1764
[  161.261731][ T7308] iso9660: Corrupted directory entry in block 0 of inode 1792
[  161.525069][ T7327] loop6: detected capacity change from 0 to 256
[  161.832236][ T7341] loop6: detected capacity change from 0 to 128
[  161.936651][ T7341] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  161.987078][ T7341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.213851][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1081'.
[  162.296062][ T7362] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1083'.
[  162.726234][ T7379] loop5: detected capacity change from 0 to 4096
[  162.799233][ T7379] NILFS (loop5): invalid segment: Checksum error in segment payload
[  162.842926][ T7379] NILFS (loop5): trying rollback from an earlier position
[  162.911043][ T7379] NILFS (loop5): recovery complete
[  162.977848][ T7393] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.190870][ T7404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  163.252007][ T7409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1099'.
[  163.361875][ T7370] loop3: detected capacity change from 0 to 32768
[  163.431835][ T7416] loop1: detected capacity change from 0 to 164
[  163.440624][ T7370] JBD2: Invalid start block of journal: 2
[  163.475429][ T7370] (syz.3.1086,7370,0):ocfs2_journal_wipe:1154 ERROR: status = -22
[  163.531133][ T7370] (syz.3.1086,7370,1):ocfs2_check_volume:2424 ERROR: status = -22
[  163.545028][ T7370] (syz.3.1086,7370,0):ocfs2_check_volume:2493 ERROR: status = -22
[  163.553131][ T7370] (syz.3.1086,7370,0):ocfs2_mount_volume:1824 ERROR: status = -22
[  163.592989][ T7370] (syz.3.1086,7370,0):ocfs2_fill_super:1177 ERROR: status = -22
[  163.728341][ T6922] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  163.939889][ T7426] loop2: detected capacity change from 0 to 8192
[  164.002778][ T6922] usb 6-1: Using ep0 maxpacket: 16
[  164.135951][ T7433] loop1: detected capacity change from 0 to 8192
[  164.143068][ T6922] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  164.163398][ T7436] loop3: detected capacity change from 0 to 4096
[  164.183569][ T6922] usb 6-1: config 0 interface 0 has no altsetting 0
[  164.325570][ T7433] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  164.393252][ T6922] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  164.402505][ T7433] REISERFS (device loop1): using journaled data mode
[  164.402521][ T7433] reiserfs: using flush barriers
[  164.415489][ T6922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.423637][ T6922] usb 6-1: Product: syz
[  164.428013][ T6922] usb 6-1: Manufacturer: syz
[  164.432637][ T6922] usb 6-1: SerialNumber: syz
[  164.440976][ T6922] usb 6-1: config 0 descriptor??
[  164.454531][ T7433] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  164.471764][ T7433] REISERFS (device loop1): checking transaction log (loop1)
[  164.489159][ T7433] REISERFS (device loop1): Using r5 hash to sort names
[  164.508761][ T7433] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  164.552556][ T7433] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  164.641755][ T6920] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  164.756754][ T6922] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input18
[  164.895294][ T6922] imon:send_packet: packet tx failed (-71)
[  164.901766][ T7467] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  164.943125][ T6922] imon 6-1:0.0: panel buttons/knobs setup failed
[  165.063141][ T6920] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  165.087210][ T6920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.132862][ T6922] rc_core: IR keymap rc-imon-pad not found
[  165.138819][ T6922] Registered IR keymap rc-empty
[  165.150537][ T6920] usb 7-1: config 0 descriptor??
[  165.159381][ T6922] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  165.180212][ T6922] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  165.203372][ T6922] imon:send_packet: packet tx failed (-71)
[  165.212243][ T7481] loop3: detected capacity change from 0 to 256
[  165.224180][ T6920] cp210x 7-1:0.0: cp210x converter detected
[  165.231850][ T7481] exfat: Deprecated parameter 'namecase'
[  165.241435][ T6922] imon 6-1:0.0: remote input dev register failed
[  165.254536][ T6922] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[  165.303780][ T7481] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  165.317959][ T7477] loop1: detected capacity change from 0 to 4096
[  165.353465][ T6907] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  165.383811][ T6922] imon 6-1:0.0: unable to initialize intf0, err 0
[  165.399911][ T7477] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  165.401763][ T6922] imon:imon_probe: failed to initialize context!
[  165.452048][ T6920] usb 7-1: cp210x converter now attached to ttyUSB0
[  165.549014][ T7477] ntfs: volume version 3.1.
[  165.574495][ T6922] imon 6-1:0.0: unable to register, err -19
[  165.624190][ T6922] usb 6-1: USB disconnect, device number 3
[  165.667918][ T6908] usb 7-1: USB disconnect, device number 3
[  165.745855][ T6908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  165.767857][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1123'.
[  165.797431][ T6908] cp210x 7-1:0.0: device disconnected
[  165.808823][ T6907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  165.842385][ T6907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.910566][ T6907] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  165.952656][ T6907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.974937][ T6907] usb 3-1: config 0 descriptor??
[  166.327271][ T7528] loop6: detected capacity change from 0 to 164
[  166.405873][ T7528] rock: directory entry would overflow storage
[  166.419603][ T7530] loop3: detected capacity change from 0 to 1024
[  166.428382][ T7528] rock: sig=0x4d4e, size=5, remaining=4
[  166.455313][ T6907] elan 0003:04F3:0755.000F: failed to start in urb: -90
[  166.478332][ T6907] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  166.511881][ T7530] hfsplus: bad catalog entry type
[  166.603730][  T155] hfsplus: b-tree write err: -5, ino 4
[  166.707211][ T6912] usb 3-1: USB disconnect, device number 8
[  166.744198][ T7542] loop6: detected capacity change from 0 to 1024
[  166.862654][ T7540] fido_id[7540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  166.913857][ T7542] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,user_xattr,. Quota mode: none.
[  166.979314][ T7542] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.040713][ T7563] loop5: detected capacity change from 0 to 1024
[  167.275339][  T144] hfsplus: b-tree write err: -5, ino 4
[  167.698080][ T7595] loop3: detected capacity change from 0 to 512
[  167.770745][ T7598] netlink: 'syz.5.1160': attribute type 1 has an invalid length.
[  167.785084][ T7598] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  167.865366][ T7602] loop6: detected capacity change from 0 to 512
[  167.928826][ T7602] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1161: casefold flag without casefold feature
[  167.939213][ T7595] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #12: comm syz.3.1159: corrupted in-inode xattr
[  167.963840][ T7602] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1161: couldn't read orphan inode 15 (err -117)
[  168.041916][ T7558] loop1: detected capacity change from 0 to 32768
[  168.047152][ T7602] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  168.078872][ T7595] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1159: couldn't read orphan inode 12 (err -117)
[  168.104020][ T7595] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  168.143789][ T7558] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  168.189957][ T7558] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  168.708092][ T4183] ocfs2: Unmounting device (7,1) on (node local)
[  168.850760][ T7651] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1176'.
[  169.052570][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1178'.
[  169.096856][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1178'.
[  169.267005][ T7662] loop3: detected capacity change from 0 to 4096
[  169.411358][ T7662] ntfs: volume version 3.1.
[  169.842783][ T6908] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  169.954594][ T6783] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  170.123233][ T6908] usb 2-1: Using ep0 maxpacket: 16
[  170.202999][ T6783] usb 4-1: Using ep0 maxpacket: 16
[  170.209660][ T7679] loop2: detected capacity change from 0 to 32768
[  170.277699][ T6908] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  170.296437][ T6908] usb 2-1: config 0 has no interface number 0
[  170.308608][ T6908] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  170.329576][ T6783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.341569][ T6908] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  170.371370][ T6783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.404189][ T6783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  170.406678][ T7679] JFS: metapage_get_blocks failed
[  170.423148][ T6908] usb 2-1: config 0 interface 41 has no altsetting 0
[  170.465691][ T7679] ERROR: (device loop2): release_metapage: write_one_page() failed
[  170.465691][ T7679] 
[  170.467981][ T6783] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  170.509221][ T7679] ERROR: (device loop2): remounting filesystem as read-only
[  170.540590][ T7700] loop5: detected capacity change from 0 to 32768
[  170.542840][ T6783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.605412][ T6783] usb 4-1: config 0 descriptor??
[  170.613031][ T6908] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  170.632397][ T6908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.661147][ T6908] usb 2-1: Product: syz
[  170.670489][  T278] blkno = 8ed2c, nblocks = 1
[  170.675542][  T278] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  170.675542][  T278] 
[  170.694693][ T6908] usb 2-1: Manufacturer: syz
[  170.712825][ T6908] usb 2-1: SerialNumber: syz
[  170.732596][ T7706] loop6: detected capacity change from 0 to 32768
[  170.733613][ T7700] XFS (loop5): Mounting V5 Filesystem
[  170.746069][ T6908] usb 2-1: config 0 descriptor??
[  170.773200][ T7689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  170.780318][ T7689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  170.854246][ T7700] XFS (loop5): Ending clean mount
[  170.870835][ T7706] XFS (loop6): Mounting V5 Filesystem
[  170.878314][ T7700] XFS (loop5): Quotacheck needed: Please wait.
[  170.954785][ T7706] XFS (loop6): Ending clean mount
[  170.978130][ T7706] XFS (loop6): Quotacheck needed: Please wait.
[  170.991453][ T7700] XFS (loop5): Quotacheck: Done.
[  171.044474][ T6908] CoreChips: probe of 2-1:0.41 failed with error -71
[  171.055694][ T6908] usb 2-1: USB disconnect, device number 11
[  171.063801][ T7706] XFS (loop6): Quotacheck: Done.
[  171.074294][ T6783] microsoft 0003:045E:07DA.0010: unknown main item tag 0x2
[  171.081826][ T6783] microsoft 0003:045E:07DA.0010: unknown main item tag 0xe
[  171.095543][ T6783] microsoft 0003:045E:07DA.0010: unknown main item tag 0xd
[  171.112225][ T6783] microsoft 0003:045E:07DA.0010: item fetching failed at offset 32/34
[  171.164314][ T5645] XFS (loop5): Unmounting Filesystem
[  171.182614][ T5980] XFS (loop6): Unmounting Filesystem
[  171.193332][ T6783] microsoft 0003:045E:07DA.0010: parse failed
[  171.199561][ T6783] microsoft: probe of 0003:045E:07DA.0010 failed with error -22
[  171.300219][ T6908] usb 4-1: USB disconnect, device number 14
[  172.156356][ T7769] Zero length message leads to an empty skb
[  172.222995][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1201'.
[  172.260791][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1201'.
[  172.303170][ T7777] netlink: 'syz.6.1201': attribute type 14 has an invalid length.
[  172.515355][ T7798] loop6: detected capacity change from 0 to 24
[  172.571665][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1220'.
[  172.581896][ T7798] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  172.616766][ T7798] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  172.855288][ T7818] loop5: detected capacity change from 0 to 2048
[  172.877300][ T7825] loop2: detected capacity change from 0 to 16
[  172.967039][ T7825] erofs: (device loop2): mounted with root inode @ nid 36.
[  173.029579][ T7825] overlayfs: upper fs is r/o, try multi-lower layers mount
[  173.747662][ T7879] loop3: detected capacity change from 0 to 256
[  173.758005][ T7881] loop2: detected capacity change from 0 to 64
[  173.904152][ T7879] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  173.931804][ T7879] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  173.994622][ T7829] loop1: detected capacity change from 0 to 32768
[  174.047027][ T7829] XFS: attr2 mount option is deprecated.
[  174.078915][ T7888] loop5: detected capacity change from 0 to 1024
[  174.153793][ T7888] hfsplus: bad catalog entry type
[  174.169643][ T7829] XFS (loop1): Mounting V5 Filesystem
[  174.392201][ T7829] XFS (loop1): Ending clean mount
[  174.418999][ T7829] XFS (loop1): Quotacheck needed: Please wait.
[  174.444210][  T144] hfsplus: b-tree write err: -5, ino 4
[  174.454430][ T7907] loop3: detected capacity change from 0 to 2048
[  174.487960][ T7909] loop6: detected capacity change from 0 to 512
[  174.593671][ T7907] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,noblock_validity,errors=remount-ro,. Quota mode: none.
[  174.618814][ T7829] XFS (loop1): Quotacheck: Done.
[  174.624749][ T7909] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33349!=33292)
[  174.719927][ T7909] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x00000000000000a7,abort,noblock_validity,,errors=continue. Quota mode: none.
[  174.798279][ T4183] XFS (loop1): Unmounting Filesystem
[  174.872952][ T7909] EXT4-fs warning (device loop6): dx_probe:869: inode #2: comm syz.6.1258: Unimplemented hash flags: 0x0001
[  174.998094][ T7909] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1258: Corrupt directory, running e2fsck is recommended
[  175.788041][ T7913] loop2: detected capacity change from 0 to 32768
[  175.828739][ T7913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1259 (7913)
[  175.937633][ T7948] loop6: detected capacity change from 0 to 4096
[  175.943729][ T7913] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  175.998525][ T7913] BTRFS info (device loop2): using free space tree
[  176.013402][ T7913] BTRFS info (device loop2): has skinny extents
[  176.122725][ T7960] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.181836][ T7948] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  176.252787][ T7948] Remounting filesystem read-only
[  176.302227][ T7913] BTRFS info (device loop2): enabling ssd optimizations
[  176.422503][ T7981] loop3: detected capacity change from 0 to 2048
[  176.900225][ T7992] loop6: detected capacity change from 0 to 8192
[  177.079873][ T7992] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  177.121530][ T7992] REISERFS (device loop6): using ordered data mode
[  177.202778][ T7992] reiserfs: using flush barriers
[  177.271309][ T7992] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  177.329330][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1294'.
[  177.362502][ T8004] loop5: detected capacity change from 0 to 4096
[  177.369537][ T7992] REISERFS (device loop6): checking transaction log (loop6)
[  177.385895][ T8013] loop1: detected capacity change from 0 to 4096
[  177.404849][ T7992] REISERFS (device loop6): Using r5 hash to sort names
[  177.412105][ T7992] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  177.466989][ T8004] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  177.588611][ T7992] REISERFS warning (device loop6): super-6502 reiserfs_getopt: unknown mount option "noload"
[  177.608606][ T8004] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  177.729767][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  177.746680][ T4183] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  178.034399][ T1325] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  178.124850][ T8032] loop2: detected capacity change from 0 to 1024
[  178.272760][ T1325] usb 4-1: Using ep0 maxpacket: 16
[  178.384181][ T8036] loop2: detected capacity change from 0 to 1024
[  178.392993][ T1325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  178.413976][ T8036] EXT4-fs (loop2): Ignoring removed orlov option
[  178.424140][ T1325] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  178.469498][ T8036] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[  178.618222][ T1325] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  178.647797][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.670847][ T8034] loop1: detected capacity change from 0 to 32768
[  178.685738][ T1325] usb 4-1: Product: syz
[  178.704466][ T1325] usb 4-1: Manufacturer: syz
[  178.727446][ T8034] (syz.1.1302,8034,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  178.728339][ T1325] usb 4-1: SerialNumber: syz
[  178.791181][ T8034] (syz.1.1302,8034,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  178.872566][ T8030] loop6: detected capacity change from 0 to 40427
[  178.888334][ T8030] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  178.919663][ T8034] JBD2: Ignoring recovery information on journal
[  178.936586][ T8030] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  179.097266][ T8030] F2FS-fs (loop6): Found nat_bits in checkpoint
[  179.101822][ T8059] loop2: detected capacity change from 0 to 128
[  179.110458][ T4223] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  179.121100][ T8034] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  179.140208][ T1325] usb 4-1: 0:2 : does not exist
[  179.145583][ T1325] usb 4-1: unit 9 not found!
[  179.184252][ T1325] usb 4-1: USB disconnect, device number 15
[  179.279209][ T8030] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  179.293054][ T8030] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  179.320969][ T4196] sysv_free_block: flc_count > flc_size
[  179.343170][ T4196] sysv_free_block: flc_count > flc_size
[  179.367562][ T4196] sysv_free_block: flc_count > flc_size
[  179.379319][ T4196] sysv_free_block: flc_count > flc_size
[  179.391451][ T4196] sysv_free_block: flc_count > flc_size
[  179.398327][ T4196] sysv_free_block: flc_count > flc_size
[  179.407543][ T4183] ocfs2: Unmounting device (7,1) on (node local)
[  179.411018][ T4196] sysv_free_block: flc_count > flc_size
[  179.431789][ T4196] sysv_free_block: flc_count > flc_size
[  179.438764][ T4196] sysv_free_block: flc_count > flc_size
[  179.447078][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.476106][ T4196] sysv_free_block: flc_count > flc_size
[  179.484911][ T4223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  179.511038][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1313'.
[  179.513747][ T4223] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  179.533450][ T4196] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  179.562842][ T4223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 7724, setting to 1024
[  179.585311][ T4223] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  179.713261][ T8065] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  179.747679][ T4223] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  179.767183][ T4223] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  179.801208][ T4223] usb 6-1: Manufacturer: syz
[  179.826591][ T8068] loop1: detected capacity change from 0 to 4096
[  179.831804][ T4223] usb 6-1: config 0 descriptor??
[  179.874750][ T8045] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  179.894882][ T4223] smsusb:smsusb_probe: board id=9, interface number 0
[  179.953870][ T4223] smsusb:siano_media_device_register: media controller created
[  179.975010][ T4223] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  179.991193][ T4223] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  179.998791][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.000474][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.000543][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.000598][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.000654][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.000709][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.000764][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.000829][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.000884][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.000938][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  180.027549][ T8068] ntfs: volume version 3.1.
[  180.041069][ T4223] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  180.209027][ T4223] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  180.280582][ T4223] smsusb:smsusb_probe: Device initialized with return code -22
[  180.291624][ T8081] loop3: detected capacity change from 0 to 512
[  180.311617][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.396039][ T4223] smsusb: probe of 6-1:0.0 failed with error -22
[  180.441841][ T4223] usb 6-1: USB disconnect, device number 4
[  180.470443][ T8081] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  180.532977][ T8081] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  180.558157][ T8081] EXT4-fs (loop3): 1 truncate cleaned up
[  180.564824][ T8081] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback.
[  180.876748][ T8104] loop3: detected capacity change from 0 to 512
[  180.876790][ T8103] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 8103 comm: syz.6.1331)
[  180.953792][ T8096] loop1: detected capacity change from 0 to 4096
[  181.007810][ T8104] EXT4-fs (loop3): Ignoring removed oldalloc option
[  181.053552][ T8104] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1328: dx entry: limit 1024 != root limit 124
[  181.101035][ T8104] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1328: Corrupt directory, running e2fsck is recommended
[  181.152196][ T8104] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  181.219740][ T8104] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.1328: corrupted in-inode xattr
[  181.240788][ T8104] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1328: couldn't read orphan inode 15 (err -117)
[  181.276391][ T8104] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback.
[  181.358159][ T8118] loop2: detected capacity change from 0 to 8192
[  181.421762][ T8118] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  181.515795][ T8118] REISERFS (device loop2): using ordered data mode
[  181.522367][ T8118] reiserfs: using flush barriers
[  181.629255][ T8118] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  181.648234][ T8118] REISERFS (device loop2): checking transaction log (loop2)
[  181.730289][ T8118] REISERFS (device loop2): Using r5 hash to sort names
[  181.768285][ T8118] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  182.362316][ T8121] loop6: detected capacity change from 0 to 32768
[  182.506850][ T8127] loop5: detected capacity change from 0 to 131072
[  182.608700][ T8127] F2FS-fs (loop5): Test dummy encryption mode enabled
[  182.616503][ T8127] F2FS-fs (loop5): Test dummy encryption mode enabled
[  182.634004][ T8127] F2FS-fs (loop5): invalid crc value
[  182.671528][ T8127] F2FS-fs (loop5): Found nat_bits in checkpoint
[  182.698854][ T6909] Bluetooth: hci0: command 0x0c1a tx timeout
[  182.713428][ T8127] F2FS-fs (loop5): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  182.722790][ T8127] F2FS-fs (loop5): Failed to read root inode
[  182.777385][ T8152] loop3: detected capacity change from 0 to 1024
[  182.790686][ T8121] XFS (loop6): Mounting V5 Filesystem
[  182.891309][ T8162] loop1: detected capacity change from 0 to 64
[  182.943177][ T8121] XFS (loop6): Ending clean mount
[  183.081820][  T144] hfsplus: b-tree write err: -5, ino 4
[  183.131229][ T8169] loop2: detected capacity change from 0 to 736
[  183.276756][ T5980] XFS (loop6): Unmounting Filesystem
[  183.779491][ T8186] loop1: detected capacity change from 0 to 4096
[  183.798287][ T8192] loop3: detected capacity change from 0 to 2048
[  183.844033][ T8186] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  183.894731][ T8192] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  183.977976][ T8186] ntfs: volume version 3.1.
[  183.986796][ T8197] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.987094][ T8192] attempt to access beyond end of device
[  183.987094][ T8192] loop3: rw=524288, want=33554432, limit=2048
[  184.019159][ T8196] loop2: detected capacity change from 0 to 512
[  184.094992][ T8196] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  184.381888][ T8205] loop3: detected capacity change from 0 to 1024
[  184.388590][ T8206] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1355'.
[  184.707031][    T9] hfsplus: b-tree write err: -5, ino 4
[  184.804106][ T6905] Bluetooth: hci0: command 0x0406 tx timeout
[  185.148482][ T6905] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  185.286499][ T8243] loop6: detected capacity change from 0 to 64
[  185.322204][ T8245] loop2: detected capacity change from 0 to 512
[  185.350177][ T8218] loop5: detected capacity change from 0 to 32768
[  185.369321][ T8243] hfs: bad catalog entry type 65535
[  185.436528][ T8245] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  185.460912][ T8218] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  185.470149][ T8245] EXT4-fs (loop2): 1 truncate cleaned up
[  185.484929][ T8245] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,dax=never,. Quota mode: writeback.
[  185.530235][ T8218] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  185.568885][   T26] audit: type=1326 audit(1760359417.497:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.6.1389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcda7a4cec9 code=0x0
[  185.603106][ T6905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  185.623699][ T6905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.640080][ T6905] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  185.650839][ T6905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.665292][ T6905] usb 2-1: config 0 descriptor??
[  185.754125][ T5645] ocfs2: Unmounting device (7,5) on (node local)
[  185.914667][ T8267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1395'.
[  186.032848][ T6912] Bluetooth: hci2: command 0x0406 tx timeout
[  186.066120][ T8271] loop3: detected capacity change from 0 to 512
[  186.083094][ T8273] loop2: detected capacity change from 0 to 256
[  186.147578][ T8273] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  186.169193][ T6905] uclogic 0003:2179:0077.0011: No inputs registered, leaving
[  186.198154][ T8271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022]
[  186.213064][ T8271] System zones: 1-12
[  186.213997][ T6905] uclogic 0003:2179:0077.0011: hidraw0: USB HID v3.0e Device [HID 2179:0077] on usb-dummy_hcd.1-1/input0
[  186.223516][ T8271] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1397: Directory hole found for htree index block 0
[  186.298001][ T8271] EXT4-fs (loop3): Remounting filesystem read-only
[  186.326208][ T8271] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  186.368717][ T6905] usb 2-1: USB disconnect, device number 12
[  186.375536][ T8271] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1397: Directory hole found for htree index block 0
[  186.478268][ T8285] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1403'.
[  186.494824][ T8281] fido_id[8281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  186.513088][ T8271] EXT4-fs (loop3): Remounting filesystem read-only
[  186.519687][ T8271] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  186.545837][ T8271] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback.
[  186.643607][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4
[  186.651354][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2
[  186.664764][ T8271] EXT4-fs (loop3): user quota file already specified
[  186.690918][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.699547][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.713687][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.721397][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.731792][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.740505][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.748279][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.762874][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.770583][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.783293][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.791356][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.799657][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.807445][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.815192][ T6783] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0
[  186.841619][ T6783] hid-generic 0000:3000000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  187.002201][ T8298] fido_id[8298]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  187.036503][ T8303] UBIFS error (pid: 8303): cannot open "c:::", error -22
[  187.153288][ T6905] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  187.169416][   T26] audit: type=1326 audit(1760359419.097:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.3.1413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1261cd2ec9 code=0x0
[  187.259673][ T8313] loop6: detected capacity change from 0 to 512
[  187.342197][ T8313] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  187.450435][ T8313] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  187.462889][ T6905] usb 6-1: Using ep0 maxpacket: 16
[  187.552512][ T8313] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  187.602887][ T6905] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.630457][ T6905] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.832895][ T6905] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.845498][ T6905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.855726][ T6905] usb 6-1: Product: syz
[  187.860264][ T6905] usb 6-1: Manufacturer: syz
[  187.866337][ T6905] usb 6-1: SerialNumber: syz
[  188.064444][ T8350] netlink: 'syz.3.1433': attribute type 2 has an invalid length.
[  188.096823][ T8350] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1433'.
[  188.100902][ T8352] loop2: detected capacity change from 0 to 256
[  188.200522][ T8352] exfat: Deprecated parameter 'utf8'
[  188.245916][ T8352] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  188.353187][ T6905] usb 6-1: cannot find UAC_HEADER
[  188.412212][ T6905] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  188.449115][ T8360] loop1: detected capacity change from 0 to 4096
[  188.496684][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.551598][ T8339] loop6: detected capacity change from 0 to 32768
[  188.557526][ T6905] usb 6-1: USB disconnect, device number 5
[  188.572758][ T8360] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  188.695332][ T8339] XFS (loop6): Mounting V5 Filesystem
[  188.711532][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1442'.
[  188.782001][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1442'.
[  188.810499][ T8339] XFS (loop6): Ending clean mount
[  188.845199][ T8339] XFS (loop6): Quotacheck needed: Please wait.
[  188.905644][ T8381] loop2: detected capacity change from 0 to 8
[  189.133117][ T8384] damon: kdamond (8384) starts
[  189.173308][ T8339] XFS (loop6): Quotacheck: Done.
[  189.254680][ T5980] XFS (loop6): Unmounting Filesystem
[  189.292487][ T8390] loop3: detected capacity change from 0 to 1024
[  189.341208][ T8386] loop5: detected capacity change from 0 to 4096
[  189.368459][ T8390] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  189.380685][ T8386] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  189.447999][ T8386] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  189.498175][ T8390] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  189.527850][    C0] vkms_vblank_simulate: vblank timer overrun
[  189.649833][ T8390] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  189.952305][ T8414] loop3: detected capacity change from 0 to 16
[  190.057659][ T8414] erofs: (device loop3): mounted with root inode @ nid 36.
[  190.068590][ T8416] loop2: detected capacity change from 0 to 4096
[  190.108374][ T8414] erofs: (device loop3): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36
[  190.142948][ T8414] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  190.151244][ T8416] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  190.166277][ T4286] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  190.174243][ T8416] NILFS (loop2): invalid segment: Checksum error in segment payload
[  190.182473][ T8416] NILFS (loop2): unable to fall back to spare super block
[  190.189733][ T8416] NILFS (loop2): error -22 while searching super root
[  190.466438][ T8428] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.476286][ T8428] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.485091][ T8428] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.493862][ T8428] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.502812][ T4286] usb 6-1: Using ep0 maxpacket: 8
[  190.623104][ T4286] usb 6-1: config 0 has an invalid interface number: 65 but max is 5
[  190.642737][ T4286] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 6
[  190.662867][ T4223] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  190.682246][ T4286] usb 6-1: config 0 has no interface number 0
[  190.703152][ T4286] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  190.742615][ T4286] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  190.763130][ T4286] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  190.771786][ T8434] loop3: detected capacity change from 0 to 1024
[  190.783142][ T4286] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  190.816901][ T4286] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  190.833118][ T4286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.886940][ T4286] usb 6-1: config 0 descriptor??
[  190.924850][ T4296] hfsplus: b-tree write err: -5, ino 4
[  190.969186][ T8420] loop6: detected capacity change from 0 to 32768
[  191.022854][ T4223] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  191.065124][ T4223] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.150455][ T1325] usb 6-1: USB disconnect, device number 6
[  191.193476][ T8430] loop2: detected capacity change from 0 to 32768
[  191.222982][ T4223] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  191.233620][ T4223] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  191.243188][ T4223] usb 2-1: Product: syz
[  191.247391][ T4223] usb 2-1: Manufacturer: syz
[  191.267129][ T8430] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1466 (8430)
[  191.294491][ T4223] hub 2-1:4.0: USB hub found
[  191.300506][ T8430] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  191.310403][ T8430] BTRFS info (device loop2): enabling auto defrag
[  191.318293][ T8430] BTRFS info (device loop2): force clearing of disk cache
[  191.328709][ T8430] BTRFS info (device loop2): max_inline at 0
[  191.346172][ T8430] BTRFS info (device loop2): turning on sync discard
[  191.353352][ T8430] BTRFS info (device loop2): using free space tree
[  191.362509][ T8430] BTRFS info (device loop2): has skinny extents
[  191.512977][ T4223] hub 2-1:4.0: config failed, hub has too many ports! (err -19)
[  191.658582][ T8430] BTRFS info (device loop2): enabling ssd optimizations
[  191.678784][ T8430] BTRFS info (device loop2): clearing free space tree
[  191.687929][ T8430] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  191.702276][ T8430] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  191.873341][ T6905] usb 2-1: USB disconnect, device number 13
[  191.887192][ T8430] BTRFS info (device loop2): creating free space tree
[  191.907392][ T8430] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  191.920893][ T8477] loop5: detected capacity change from 0 to 8192
[  191.927703][ T8430] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  191.992273][ T8477] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  192.033060][ T8477] REISERFS (device loop5): using ordered data mode
[  192.039619][ T8477] reiserfs: using flush barriers
[  192.068018][ T8477] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  192.183196][ T8477] REISERFS (device loop5): checking transaction log (loop5)
[  192.201572][ T8477] REISERFS (device loop5): Using rupasov hash to sort names
[  192.207073][ T8483] loop6: detected capacity change from 0 to 2048
[  192.212449][ T8477] REISERFS (device loop5): using 3.5.x disk format
[  192.235668][ T8477] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  192.249097][ T8477] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  192.290615][ T8483] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  192.324714][ T8483] NILFS (loop6): mounting unchecked fs
[  192.411138][ T8477] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  192.486714][ T8477] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  192.515765][ T8483] NILFS (loop6): recovery complete
[  192.549578][ T8492] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.559709][ T8477] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  192.708698][ T8477] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  192.760269][ T8477] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  192.833324][ T8497] netlink: 'syz.3.1491': attribute type 1 has an invalid length.
[  192.857526][ T8499] loop1: detected capacity change from 0 to 512
[  192.864176][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'.
[  192.972981][ T8499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  193.174232][ T8499] EXT4-fs (loop1): 1 orphan inode deleted
[  193.180037][ T8499] EXT4-fs (loop1): 1 truncate cleaned up
[  193.269044][ T8499] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback.
[  193.321279][ T8515] loop5: detected capacity change from 0 to 512
[  193.370260][ T8499] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1447: inode #12: block 7: comm syz.1.1487: path /292/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  193.446291][ T8515] EXT4-fs (loop5): inline encryption not supported
[  193.469055][ T8499] EXT4-fs (loop1): Remounting filesystem read-only
[  193.541817][ T8515] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,sysvgroups,i_version,,errors=continue. Quota mode: writeback.
[  193.583061][ T8515] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  193.765127][ T8508] loop3: detected capacity change from 0 to 32768
[  193.855497][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'.
[  193.873561][ T8508] (syz.3.1493,8508,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  193.956780][ T8508] (syz.3.1493,8508,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  194.055938][ T8508] JBD2: Ignoring recovery information on journal
[  194.176417][ T8508] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  194.195660][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  194.202000][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  194.350153][ T8508] 
[  194.352579][ T8508] ======================================================
[  194.359715][ T8508] WARNING: possible circular locking dependency detected
[  194.366779][ T8508] syzkaller #0 Not tainted
[  194.371226][ T8508] ------------------------------------------------------
[  194.377556][ T8544] 8021q: adding VLAN 0 to HW filter on device bond1
[  194.378274][ T8508] syz.3.1493/8508 is trying to acquire lock:
[  194.378287][ T8508] ffff88805ff83488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270
[  194.403521][ T8508] 
[  194.403521][ T8508] but task is already holding lock:
[  194.411004][ T8508] ffff88806a5220a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x290/0xaf0
[  194.420623][ T8508] 
[  194.420623][ T8508] which lock already depends on the new lock.
[  194.420623][ T8508] 
[  194.431052][ T8508] 
[  194.431052][ T8508] the existing dependency chain (in reverse order) is:
[  194.440092][ T8508] 
[  194.440092][ T8508] -> #6 (&dquot->dq_lock){+.+.}-{3:3}:
[  194.447778][ T8508]        __mutex_lock_common+0x1eb/0x2390
[  194.453541][ T8508]        mutex_lock_nested+0x17/0x20
[  194.458979][ T8508]        dquot_commit+0x5a/0x410
[  194.463952][ T8508]        ext4_write_dquot+0x1f0/0x360
[  194.469366][ T8508]        mark_all_dquot_dirty+0xf9/0x400
[  194.475034][ T8508]        __dquot_alloc_space+0x5d0/0xe20
[  194.480812][ T8508]        ext4_mb_new_blocks+0xf68/0x4940
[  194.486495][ T8508]        ext4_ext_map_blocks+0x146f/0x64e0
[  194.492344][ T8508]        ext4_map_blocks+0x981/0x1b30
[  194.497879][ T8508]        ext4_getblk+0x16d/0x630
[  194.502861][ T8508]        ext4_bread+0x26/0x180
[  194.507694][ T8508]        ext4_append+0x2c3/0x560
[  194.512674][ T8508]        ext4_init_new_dir+0x2a2/0x940
[  194.518181][ T8508]        ext4_mkdir+0x47d/0xc50
[  194.523238][ T8508]        vfs_mkdir+0x387/0x570
[  194.528053][ T8508]        do_mkdirat+0x1d7/0x5a0
[  194.532933][ T8508]        __x64_sys_mkdirat+0x85/0x90
[  194.538245][ T8508]        do_syscall_64+0x4c/0xa0
[  194.543216][ T8508]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  194.548663][ T8528] loop1: detected capacity change from 0 to 40427
[  194.549680][ T8508] 
[  194.549680][ T8508] -> #5 (&ei->i_data_sem){++++}-{3:3}:
[  194.563764][ T8508]        down_write+0x38/0x60
[  194.568453][ T8508]        ext4_truncate+0x96d/0x10d0
[  194.573659][ T8508]        ext4_setattr+0xffe/0x19e0
[  194.574089][ T8547] loop5: detected capacity change from 0 to 512
[  194.578796][ T8508]        notify_change+0xbcd/0xee0
[  194.578824][ T8508]        do_truncate+0x197/0x220
[  194.595260][ T8508]        do_sys_ftruncate+0x31b/0x3d0
[  194.600668][ T8508]        do_syscall_64+0x4c/0xa0
[  194.605674][ T8508]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  194.612135][ T8508] 
[  194.612135][ T8508] -> #4 (jbd2_handle){++++}-{0:0}:
[  194.619453][ T8508]        start_this_handle+0x1338/0x15a0
[  194.625127][ T8508]        jbd2__journal_start+0x2b7/0x5a0
[  194.630781][ T8508]        jbd2_journal_start+0x26/0x30
[  194.636166][ T8508]        ocfs2_start_trans+0x374/0x6c0
[  194.641677][ T8508]        ocfs2_shutdown_local_alloc+0x1fd/0xa10
[  194.647930][ T8508]        ocfs2_dismount_volume+0x1de/0x880
[  194.653856][ T8508]        generic_shutdown_super+0x130/0x300
[  194.659757][ T8508]        kill_block_super+0x7c/0xe0
[  194.664962][ T8508]        deactivate_locked_super+0x93/0xf0
[  194.670872][ T8508]        cleanup_mnt+0x418/0x4d0
[  194.675815][ T8508]        task_work_run+0x125/0x1a0
[  194.680975][ T8508]        exit_to_user_mode_loop+0x10f/0x130
[  194.686874][ T8508]        exit_to_user_mode_prepare+0xee/0x180
[  194.692951][ T8508]        syscall_exit_to_user_mode+0x16/0x40
[  194.698952][ T8508]        do_syscall_64+0x58/0xa0
[  194.703899][ T8508]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  194.710340][ T8508] 
[  194.710340][ T8508] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  194.718860][ T8508]        down_read+0x44/0x2e0
[  194.723544][ T8508]        ocfs2_start_trans+0x368/0x6c0
[  194.729020][ T8508]        ocfs2_shutdown_local_alloc+0x1fd/0xa10
[  194.735262][ T8508]        ocfs2_dismount_volume+0x1de/0x880
[  194.741079][ T8508]        generic_shutdown_super+0x130/0x300
[  194.746979][ T8508]        kill_block_super+0x7c/0xe0
[  194.752183][ T8508]        deactivate_locked_super+0x93/0xf0
[  194.757994][ T8508]        cleanup_mnt+0x418/0x4d0
[  194.762945][ T8508]        task_work_run+0x125/0x1a0
[  194.768060][ T8508]        exit_to_user_mode_loop+0x10f/0x130
[  194.773962][ T8508]        exit_to_user_mode_prepare+0xee/0x180
[  194.780034][ T8508]        syscall_exit_to_user_mode+0x16/0x40
[  194.786037][ T8508]        do_syscall_64+0x58/0xa0
[  194.790978][ T8508]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  194.797399][ T8508] 
[  194.797399][ T8508] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  194.804879][ T8508]        ocfs2_start_trans+0x269/0x6c0
[  194.810346][ T8508]        ocfs2_write_info+0x117/0x350
[  194.815731][ T8508]        dquot_set_dqinfo+0x459/0x6c0
[  194.821215][ T8508]        quota_setinfo+0x2a4/0x2b0
[  194.826349][ T8508]        __se_sys_quotactl+0x295/0x6c0
[  194.831819][ T8508]        do_syscall_64+0x4c/0xa0
[  194.836771][ T8508]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  194.843198][ T8508] 
[  194.843198][ T8508] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  194.852091][ T8508]        down_write+0x38/0x60
[  194.856788][ T8508]        ocfs2_lock_global_qf+0x1e5/0x270
[  194.862519][ T8508]        ocfs2_write_info+0xd0/0x350
[  194.867813][ T8508]        dquot_set_dqinfo+0x459/0x6c0
[  194.873194][ T8508]        quota_setinfo+0x2a4/0x2b0
[  194.878307][ T8508]        __se_sys_quotactl+0x295/0x6c0
[  194.883768][ T8508]        do_syscall_64+0x4c/0xa0
[  194.888713][ T8508]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  194.895130][ T8508] 
[  194.895130][ T8508] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}:
[  194.905648][ T8508]        __lock_acquire+0x2c33/0x7c60
[  194.911028][ T8508]        lock_acquire+0x197/0x3f0
[  194.916055][ T8508]        down_write+0x38/0x60
[  194.920737][ T8508]        ocfs2_lock_global_qf+0x1c7/0x270
[  194.926460][ T8508]        ocfs2_acquire_dquot+0x29d/0xaf0
[  194.932102][ T8508]        dqget+0x778/0xeb0
[  194.936519][ T8508]        __dquot_initialize+0x3b6/0xcb0
[  194.942066][ T8508]        ocfs2_get_init_inode+0x138/0x1b0
[  194.947787][ T8508]        ocfs2_mknod+0x8aa/0x22b0
[  194.952950][ T8508]        ocfs2_create+0x192/0x410
[  194.957990][ T8508]        path_openat+0x11e1/0x2f30
[  194.963110][ T8508]        do_filp_open+0x1b3/0x3e0
[  194.968145][ T8508]        do_sys_openat2+0x142/0x4a0
[  194.973351][ T8508]        __x64_sys_openat+0x135/0x160
[  194.978743][ T8508]        do_syscall_64+0x4c/0xa0
[  194.983685][ T8508]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  194.990113][ T8508] 
[  194.990113][ T8508] other info that might help us debug this:
[  194.990113][ T8508] 
[  195.000360][ T8508] Chain exists of:
[  195.000360][ T8508]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ei->i_data_sem --> &dquot->dq_lock
[  195.000360][ T8508] 
[  195.016440][ T8508]  Possible unsafe locking scenario:
[  195.016440][ T8508] 
[  195.023888][ T8508]        CPU0                    CPU1
[  195.029255][ T8508]        ----                    ----
[  195.034616][ T8508]   lock(&dquot->dq_lock);
[  195.039033][ T8508]                                lock(&ei->i_data_sem);
[  195.045965][ T8508]                                lock(&dquot->dq_lock);
[  195.052902][ T8508]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7);
[  195.060194][ T8508] 
[  195.060194][ T8508]  *** DEADLOCK ***
[  195.060194][ T8508] 
[  195.068335][ T8508] 4 locks held by syz.3.1493/8508:
[  195.073439][ T8508]  #0: ffff8880575fa460 (sb_writers#35){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  195.082679][ T8508]  #1: ffff88805fd36d88 (&type->i_mutex_dir_key#26){+.+.}-{3:3}, at: path_openat+0x7f3/0x2f30
[  195.092958][ T8508]  #2: ffff88806a4089c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x161/0x4350
[  195.106622][ T8508]  #3: ffff88806a5220a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x290/0xaf0
[  195.116636][ T8508] 
[  195.116636][ T8508] stack backtrace:
[  195.122525][ T8508] CPU: 0 PID: 8508 Comm: syz.3.1493 Not tainted syzkaller #0
[  195.129897][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  195.139998][ T8508] Call Trace:
[  195.143281][ T8508]  <TASK>
[  195.146215][ T8508]  dump_stack_lvl+0x168/0x230
[  195.150913][ T8508]  ? load_image+0x3b0/0x3b0
[  195.155420][ T8508]  ? show_regs_print_info+0x20/0x20
[  195.160627][ T8508]  ? print_circular_bug+0x12b/0x1a0
[  195.165831][ T8508]  check_noncircular+0x274/0x310
[  195.170773][ T8508]  ? add_chain_block+0x940/0x940
[  195.175709][ T8508]  ? lockdep_lock+0xdc/0x1e0
[  195.180322][ T8508]  ? lockdep_unlock+0x134/0x2d0
[  195.185175][ T8508]  ? lockdep_lock+0x1e0/0x1e0
[  195.189856][ T8508]  ? mark_lock+0x94/0x320
[  195.194452][ T8508]  __lock_acquire+0x2c33/0x7c60
[  195.199407][ T8508]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  195.205835][ T8508]  ? verify_lock_unused+0x140/0x140
[  195.211042][ T8508]  ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20
[  195.217202][ T8508]  ? __lock_acquire+0x13ad/0x7c60
[  195.222235][ T8508]  lock_acquire+0x197/0x3f0
[  195.226751][ T8508]  ? ocfs2_lock_global_qf+0x1c7/0x270
[  195.232131][ T8508]  ? __might_sleep+0xf0/0xf0
[  195.236726][ T8508]  ? read_lock_is_recursive+0x10/0x10
[  195.242118][ T8508]  ? do_raw_spin_lock+0x11d/0x280
[  195.247172][ T8508]  ? __rwlock_init+0x140/0x140
[  195.251942][ T8508]  down_write+0x38/0x60
[  195.256105][ T8508]  ? ocfs2_lock_global_qf+0x1c7/0x270
[  195.261478][ T8508]  ocfs2_lock_global_qf+0x1c7/0x270
[  195.266766][ T8508]  ? dqget+0x6f8/0xeb0
[  195.270843][ T8508]  ? lock_buffer+0x80/0x80
[  195.275278][ T8508]  ocfs2_acquire_dquot+0x29d/0xaf0
[  195.280395][ T8508]  ? slab_post_alloc_hook+0x68/0x380
[  195.285684][ T8508]  ? ocfs2_destroy_dquot+0x40/0x40
[  195.290989][ T8508]  ? percpu_counter_add_batch+0x13b/0x160
[  195.296733][ T8508]  dqget+0x778/0xeb0
[  195.300665][ T8508]  __dquot_initialize+0x3b6/0xcb0
[  195.305707][ T8508]  ? dquot_initialize+0x20/0x20
[  195.310566][ T8508]  ? do_raw_spin_unlock+0x11d/0x230
[  195.315781][ T8508]  ocfs2_get_init_inode+0x138/0x1b0
[  195.320987][ T8508]  ? ocfs2_create_inode_in_orphan+0x1080/0x1080
[  195.327235][ T8508]  ? __lock_acquire+0x13ad/0x7c60
[  195.332357][ T8508]  ocfs2_mknod+0x8aa/0x22b0
[  195.336873][ T8508]  ? ocfs2_mkdir+0x410/0x410
[  195.341473][ T8508]  ? _raw_spin_lock_irqsave+0x7f/0xf0
[  195.346848][ T8508]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  195.352980][ T8508]  ? __wake_up_common+0x5b/0x4e0
[  195.357952][ T8508]  ? ocfs2_inode_unlock+0xa1/0x140
[  195.363072][ T8508]  ? __lock_acquire+0x7c60/0x7c60
[  195.368108][ T8508]  ? __rwlock_init+0x140/0x140
[  195.372878][ T8508]  ? _raw_spin_unlock+0x24/0x40
[  195.377993][ T8508]  ? __d_add+0x4e0/0x7f0
[  195.382271][ T8508]  ? do_raw_spin_unlock+0x11d/0x230
[  195.387482][ T8508]  ? rcu_is_watching+0x11/0xa0
[  195.392248][ T8508]  ? ocfs2_lookup+0x491/0x930
[  195.396934][ T8508]  ocfs2_create+0x192/0x410
[  195.401452][ T8508]  ? ocfs2_update_inode_fsync_trans+0x200/0x200
[  195.407723][ T8508]  ? ocfs2_lookup+0x930/0x930
[  195.412410][ T8508]  ? inode_permission+0xef/0x480
[  195.417353][ T8508]  ? bpf_lsm_inode_create+0x5/0x10
[  195.422582][ T8508]  ? security_inode_create+0xb3/0x100
[  195.427960][ T8508]  ? ocfs2_lookup+0x930/0x930
[  195.432644][ T8508]  path_openat+0x11e1/0x2f30
[  195.437263][ T8508]  ? do_filp_open+0x3e0/0x3e0
[  195.441952][ T8508]  do_filp_open+0x1b3/0x3e0
[  195.446460][ T8508]  ? vfs_tmpfile+0x300/0x300
[  195.451089][ T8508]  ? _raw_spin_unlock+0x24/0x40
[  195.455940][ T8508]  ? alloc_fd+0x598/0x630
[  195.460279][ T8508]  do_sys_openat2+0x142/0x4a0
[  195.464967][ T8508]  ? __lock_acquire+0x7c60/0x7c60
[  195.470003][ T8508]  ? do_sys_open+0xe0/0xe0
[  195.474424][ T8508]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  195.480416][ T8508]  ? lock_chain_count+0x20/0x20
[  195.485314][ T8508]  ? vtime_user_exit+0x2dc/0x400
[  195.490261][ T8508]  __x64_sys_openat+0x135/0x160
[  195.495124][ T8508]  do_syscall_64+0x4c/0xa0
[  195.499559][ T8508]  ? clear_bhb_loop+0x30/0x80
[  195.504324][ T8508]  ? clear_bhb_loop+0x30/0x80
[  195.509012][ T8508]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  195.514922][ T8508] RIP: 0033:0x7f1261cd2ec9
[  195.519353][ T8508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.538978][ T8508] RSP: 002b:00007f125ff3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  195.547401][ T8508] RAX: ffffffffffffffda RBX: 00007f1261f29fa0 RCX: 00007f1261cd2ec9
[  195.555377][ T8508] RDX: 0000000000008042 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  195.563356][ T8508] RBP: 00007f1261d55f91 R08: 0000000000000000 R09: 0000000000000000
[  195.571341][ T8508] R10: 000000000000010c R11: 0000000000000246 R12: 0000000000000000
[  195.579311][ T8508] R13: 00007f1261f2a038 R14: 00007f1261f29fa0 R15: 00007ffc8035d838
[  195.587291][ T8508]  </TASK>
[  195.604684][ T8547] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  195.605936][ T8528] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  195.636508][ T8528] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  195.675782][ T8528] F2FS-fs (loop1): invalid crc_offset: 33558524
[  195.710831][ T4193] ocfs2: Unmounting device (7,3) on (node local)
[  195.729439][ T8528] F2FS-fs (loop1): Found nat_bits in checkpoint
[  195.740690][ T8547] EXT4-fs (loop5): 1 orphan inode deleted
[  195.748403][ T8547] EXT4-fs (loop5): 1 truncate cleaned up
[  195.802333][ T8547] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback.
[  195.826933][ T8528] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  195.834111][ T8528] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  195.892730][ T6783] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  195.901108][ T8547] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1447: inode #12: block 7: comm syz.5.1509: path /198/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  195.926388][ T8547] EXT4-fs (loop5): Remounting filesystem read-only
[  196.282836][ T6783] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  196.291950][ T6783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.307350][ T6783] usb 3-1: config 0 descriptor??
[  196.344731][ T6783] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  196.351465][ T6783] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22
[  196.545430][ T6783] usb 3-1: USB disconnect, device number 9