last executing test programs:

3m0.687882561s ago: executing program 1 (id=521):
openat$fuse(0xffffffffffffff9c, &(0x7f0000001580), 0x42, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

3m0.687574811s ago: executing program 1 (id=522):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4)
fcntl$setsig(r1, 0xa, 0x13)
fcntl$setlease(r1, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0x0)

2m59.71491988s ago: executing program 1 (id=532):
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x4000080)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x4000, 0x8000})

2m57.996136076s ago: executing program 1 (id=544):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

2m57.097207655s ago: executing program 1 (id=550):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bind$netrom(r0, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)

2m56.197231003s ago: executing program 1 (id=553):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001980)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x2}}}}}}}, 0x0)

2m56.027230216s ago: executing program 32 (id=553):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001980)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x2}}}}}}}, 0x0)

2m15.311637836s ago: executing program 2 (id=964):
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000100)={[{@check_strict}, {@eas_no}, {@chkdsk_errors}, {@check_none}]}, 0x1, 0x9e22, &(0x7f0000013e80)="$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")
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3f})

2m14.966390789s ago: executing program 2 (id=968):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x144}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)

2m14.813261282s ago: executing program 2 (id=972):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0)
fchmod(r0, 0x20049549e2a2d659)
pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)='g', 0x1}], 0x1, 0x7, 0xfffffffd)

2m14.728836408s ago: executing program 2 (id=974):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000840)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fcc15fc6eeae6dd85887fec609d9df9eb63c1eb27e9a7e7c87e551a878ce3db471a5a29b9509986d21054cc6d2e9be1e16b9e2e6e9df5b4b95e1b", @ANYRESHEX, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b383c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bde666812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aafdfda02823a69030b19126f82a4", @ANYRES8, @ANYRESOCT], 0x21, 0x1502, &(0x7f0000002180)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

2m13.674303087s ago: executing program 2 (id=978):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum, @enum={0x7}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x8}, 0x28)

2m13.362364375s ago: executing program 2 (id=983):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x428d833ca3d28399, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)

2m13.179861906s ago: executing program 33 (id=983):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x428d833ca3d28399, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)

2.190332006s ago: executing program 0 (id=2345):
socket$kcm(0x2, 0xa, 0x73)
socket$inet(0x2, 0xa, 0x400)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.929214685s ago: executing program 0 (id=2352):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b60901000000000065000c000000000018010000646c6c2500000000002020207b9af8ff000000002d9a00000000000037090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0)

1.836026423s ago: executing program 0 (id=2355):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000740)={0x34, r0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0)

1.779866661s ago: executing program 0 (id=2358):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x36, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x20, 0xa, 0x10, {0x10, 0x24, "7b60dc86fe066b529740ae13b132"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.333584476s ago: executing program 3 (id=2369):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

810.480271ms ago: executing program 4 (id=2372):
r0 = inotify_init()
r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001)
inotify_rm_watch(r0, r1)

730.78741ms ago: executing program 4 (id=2373):
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

730.499002ms ago: executing program 4 (id=2374):
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19f)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

550.509831ms ago: executing program 4 (id=2375):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000005, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8000)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x8)

480.014226ms ago: executing program 4 (id=2376):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000001ff6943b80000000800000014f20000000086070000", 0x4000, r0)

428.299101ms ago: executing program 4 (id=2377):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
syz_clone3(0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x100000, 0x9}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)

425.975093ms ago: executing program 3 (id=2378):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000515e0000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)

396.956164ms ago: executing program 3 (id=2379):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x20008004)

350.727206ms ago: executing program 3 (id=2380):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

140.536375ms ago: executing program 3 (id=2381):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0xb, 0x2}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x807f}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

70.534676ms ago: executing program 0 (id=2382):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x3)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x289, 0x4)

2.334721ms ago: executing program 0 (id=2383):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]})

0s ago: executing program 3 (id=2384):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x1, 0x3e, 0xe9, 0xad}, {0x4, 0x1, 0x1, 0x5, 0x101, 0x9}, 0x2, 0x1, 0x21ae}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

kernel console output (not intermixed with test programs):

usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.382720][  T791] usb 5-1: config 0 descriptor??
[  186.391016][ T5852] Bluetooth: hci2: command tx timeout
[  186.554494][ T8748] netlink: 'syz.0.1015': attribute type 2 has an invalid length.
[  186.557583][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'.
[  186.567204][ T8748] netlink: 'syz.0.1015': attribute type 2 has an invalid length.
[  186.570314][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'.
[  186.729819][ T8756] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1019'.
[  186.845993][  T791] ath6kl: Failed to submit usb control message: -71
[  186.848579][  T791] ath6kl: unable to send the bmi data to the device: -71
[  186.864986][  T791] ath6kl: Unable to send get target info: -71
[  186.914129][  T791] ath6kl: Failed to init ath6kl core: -71
[  186.917441][  T791] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  186.928011][  T791] usb 5-1: USB disconnect, device number 2
[  187.437358][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1021'.
[  187.442288][ T8771] netlink: 'syz.0.1021': attribute type 1 has an invalid length.
[  187.445379][ T8771] netlink: 'syz.0.1021': attribute type 2 has an invalid length.
[  188.158062][ T8791] ALSA: mixer_oss: invalid OSS volume ''
[  188.315173][ T6317] IPVS: starting estimator thread 0...
[  188.421151][ T8796] IPVS: using max 46 ests per chain, 110400 per kthread
[  188.474267][ T5852] Bluetooth: hci2: command tx timeout
[  188.601268][ T8803] loop3: detected capacity change from 0 to 4096
[  188.608820][ T8803] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  188.656491][ T8803] ntfs3(loop3): Failed to initialize $Secure::$SDH (-22).
[  188.659575][ T8803] ntfs3(loop3): Failed to initialize $Secure (-22).
[  188.828888][ T8817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.868226][ T8819] loop4: detected capacity change from 0 to 512
[  188.884566][ T6317] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  188.891646][ T8819] EXT4-fs: Ignoring removed orlov option
[  188.899477][ T8819] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  188.923667][ T8819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  188.933497][ T8819] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1042: corrupted in-inode xattr: e_value size too large
[  188.947188][ T8819] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1042: couldn't read orphan inode 15 (err -117)
[  188.968727][ T8819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.033438][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.043307][ T8825] loop3: detected capacity change from 0 to 4096
[  189.053345][ T8825] ntfs3(loop3): ino=3, Correct links count -> 2.
[  189.066927][ T6317] usb 1-1: Using ep0 maxpacket: 8
[  189.083910][ T6317] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  189.086826][ T6317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.101178][ T6317] usb 1-1: Product: syz
[  189.102594][ T6317] usb 1-1: Manufacturer: syz
[  189.109979][ T6317] usb 1-1: SerialNumber: syz
[  189.119267][ T6317] usb 1-1: config 0 descriptor??
[  189.127601][ T6317] gspca_main: se401-2.14.0 probing 047d:5003
[  189.543485][ T6317] gspca_se401: Frame size: 2x0 bayer
[  189.545211][ T6317] gspca_se401: Frame size: 0x0 1/16th janggu
[  189.756070][ T6317] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  189.787290][ T6317] usb 1-1: USB disconnect, device number 14
[  190.000738][ T8826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.030984][ T5240] Bluetooth: hci0: command 0x0406 tx timeout
[  191.109687][ T8833] loop0: detected capacity change from 0 to 131072
[  191.113429][ T8833] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  191.116514][ T8833] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  191.163546][ T8833] F2FS-fs (loop0): invalid crc value
[  191.236769][ T8833] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  191.242772][ T8833] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  191.245044][ T8833] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  191.297889][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'.
[  191.600188][ T8868] syz.4.1060 (8868): /proc/8867/oom_adj is deprecated, please use /proc/8867/oom_score_adj instead.
[  191.845444][ T8874] loop4: detected capacity change from 0 to 736
[  191.916369][ T8874] ISOFS: Logical zone size(0) < hardware blocksize(1024)
[  192.273779][ T8888] loop0: detected capacity change from 0 to 4096
[  192.329773][ T8888] ntfs3(loop0): ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  192.603002][ T5883] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  192.752356][ T5883] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  192.759590][ T5883] usb 5-1: config 0 has no interface number 0
[  192.772999][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d
[  192.777467][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.781182][ T5883] usb 5-1: Product: syz
[  192.782683][ T5883] usb 5-1: Manufacturer: syz
[  192.784323][ T5883] usb 5-1: SerialNumber: syz
[  192.787686][ T5883] usb 5-1: config 0 descriptor??
[  192.792823][ T5883] usbtest 5-1:0.85: Linux gadget zero
[  192.794944][ T5883] usbtest 5-1:0.85: high-speed {control in/out int-out} tests (+alt)
[  192.891090][ T8918] loop0: detected capacity change from 0 to 64
[  192.969090][ T8920] loop0: detected capacity change from 0 to 1024
[  193.011752][ T6317] usb 5-1: USB disconnect, device number 3
[  193.035120][ T1237] hfsplus: b-tree write err: -5, ino 4
[  193.291111][ T8924] loop0: detected capacity change from 0 to 32768
[  193.303709][ T8924] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  193.320915][ T8924] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  193.377106][ T5851] ocfs2: Unmounting device (7,0) on (node local)
[  193.605319][ T8935] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1089'.
[  193.654653][ T8938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.825678][ T8930] loop3: detected capacity change from 0 to 32768
[  193.859718][ T8930] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  193.899947][ T8930] XFS (loop3): Ending clean mount
[  193.909409][ T8930] XFS (loop3): Quotacheck needed: Please wait.
[  193.933194][ T8958] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1096'.
[  193.939106][ T8958] 0: renamed from hsr_slave_1 (while UP)
[  193.964693][ T8930] XFS (loop3): Quotacheck: Done.
[  193.966082][ T8958] 0: entered allmulticast mode
[  193.970300][ T8958] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  194.074761][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.077377][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.120067][ T7466] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  194.425588][ T8974] loop3: detected capacity change from 0 to 256
[  194.429146][ T8974] exfat: Deprecated parameter 'namecase'
[  194.450313][ T8974] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d)
[  194.469728][ T8974] exFAT-fs (loop3): error, in sector 160, dentry 5 should be unused, but 0xc1
[  194.785071][ T8987] loop0: detected capacity change from 0 to 128
[  194.819037][ T8987] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.829715][ T8987] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.847754][ T8987] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 3 (only 1 groups)
[  194.901688][ T5851] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.404659][ T9018] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  195.635955][ T9006] loop3: detected capacity change from 0 to 32768
[  196.662495][ T9066] loop0: detected capacity change from 0 to 32768
[  196.692171][ T9066] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  196.713739][ T9066] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  196.727513][ T9069] loop3: detected capacity change from 0 to 40427
[  196.746591][ T9069] F2FS-fs: heap/no_heap options were deprecated
[  196.753948][ T9069] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (4285726721, 24)
[  196.759596][ T9069] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  196.767974][ T9069] F2FS-fs (loop3): invalid crc value
[  196.780066][ T9066] (syz.0.1132,9066,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  196.866984][ T9069] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  196.877953][ T5851] ocfs2: Unmounting device (7,0) on (node local)
[  196.898564][ T9069] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  196.902446][ T9069] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  196.913161][ T9069] F2FS-fs (loop3): Corrupted max_depth of 3: 127
[  197.035904][ T9080] loop0: detected capacity change from 0 to 256
[  197.069817][ T9080] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.093648][ T9080] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  197.119972][ T9080] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d)
[  197.570770][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  197.722857][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  197.727141][   T10] usb 4-1: config 1 has no interface number 0
[  197.729585][   T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.736292][   T10] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  197.739802][   T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  197.751948][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  197.755382][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.758643][   T10] usb 4-1: Product: syz
[  197.760353][   T10] usb 4-1: Manufacturer: syz
[  197.763161][   T10] usb 4-1: SerialNumber: syz
[  198.610278][   T10] cdc_ncm 4-1:1.1: bind() failure
[  198.816246][   T10] usb 4-1: USB disconnect, device number 8
[  198.961698][ T9099] loop0: detected capacity change from 0 to 32768
[  199.736413][ T9105] loop4: detected capacity change from 0 to 32768
[  199.794739][ T9105] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1146 (9105)
[  199.869125][ T9105] BTRFS error: invalid seeding and uuid-changed device detected
[  200.167447][ T9116] netlink: 'syz.3.1149': attribute type 11 has an invalid length.
[  200.854858][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  200.918174][ T9123] loop4: detected capacity change from 0 to 32768
[  200.924057][ T9123] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1154 (9123)
[  200.966493][ T9123] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  200.970822][ T9123] BTRFS info (device loop4 state S): using crc32c (crc32c-lib) checksum algorithm
[  201.012616][   T10] usb 4-1: too many configurations: 151, using maximum allowed: 8
[  201.027382][   T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  201.035140][ T1090] BTRFS warning (device loop4 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  201.041551][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  201.045090][   T10] usb 4-1: Product: syz
[  201.046709][   T10] usb 4-1: Manufacturer: syz
[  201.048587][   T10] usb 4-1: SerialNumber: syz
[  201.054117][   T40] BTRFS warning (device loop4 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  201.063631][   T10] usb 4-1: config 0 descriptor??
[  201.068232][ T1090] BTRFS warning (device loop4 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  201.082879][ T1090] BTRFS warning (device loop4 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  201.121585][ T9123] BTRFS error (device loop4 state S): logical 6881280 len 1638400 found bg but no related chunk
[  201.171062][ T9123] BTRFS info (device loop4 state S): enabling ssd optimizations
[  201.174299][ T9123] BTRFS info (device loop4 state S): force clearing of disk cache
[  201.177412][ T9123] BTRFS info (device loop4 state S): ignoring bad roots
[  201.190781][ T9123] BTRFS info (device loop4 state S): ignoring meta csums
[  201.193568][ T9123] BTRFS info (device loop4 state S): force lzo compression, level 0
[  201.304089][   T10] usb 4-1: USB disconnect, device number 9
[  201.315855][ T8612] BTRFS info (device loop4 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  201.406187][ T9155] loop0: detected capacity change from 0 to 512
[  201.421648][ T9155] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.424213][ T9155] EXT4-fs: Ignoring removed bh option
[  201.459773][ T9155] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  201.530291][ T9155] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.1161: corrupted inode contents
[  201.665980][ T9155] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #11: comm syz.0.1161: mark_inode_dirty error
[  201.676678][ T9155] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1161: invalid indirect mapped block 1 (level 1)
[  201.691023][ T9155] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.1161: corrupted inode contents
[  201.747155][ T9155] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  201.757167][ T9155] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.1161: corrupted inode contents
[  201.767644][ T9155] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.1161: mark_inode_dirty error
[  201.819043][ T9155] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  201.864299][ T9155] EXT4-fs (loop0): 1 truncate cleaned up
[  202.076727][ T9155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.132610][ T9155] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.1161: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  202.184474][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.440918][ T5883] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  202.480924][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  202.601922][ T5883] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  202.605544][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.623256][ T5883] usb 4-1: config 0 descriptor??
[  202.633931][ T5883] cp210x 4-1:0.0: cp210x converter detected
[  202.641371][   T10] usb 1-1: Using ep0 maxpacket: 16
[  202.665654][   T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  202.669383][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.673290][   T10] usb 1-1: Product: syz
[  202.680949][   T10] usb 1-1: Manufacturer: syz
[  202.682857][   T10] usb 1-1: SerialNumber: syz
[  202.701945][   T10] usb 1-1: config 0 descriptor??
[  202.714257][   T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  202.720019][   T10] usb 1-1: Detected FT232H
[  202.926482][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  203.044620][ T5883] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  203.279541][ T5883] usb 4-1: cp210x converter now attached to ttyUSB1
[  203.350037][   T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  203.457210][   T10] usb 4-1: USB disconnect, device number 10
[  203.472654][   T10] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  203.477391][   T10] cp210x 4-1:0.0: device disconnected
[  203.540043][ T9191] loop4: detected capacity change from 0 to 32768
[  203.540253][ T6317] usb 1-1: USB disconnect, device number 15
[  203.544032][ T9191] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1174 (9191)
[  203.552582][ T9191] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.556702][ T9191] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  203.575012][ T6317] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  203.587939][ T6317] ftdi_sio 1-1:0.0: device disconnected
[  203.642794][ T9191] BTRFS info (device loop4): enabling ssd optimizations
[  203.645578][ T9191] BTRFS info (device loop4): enabling free space tree
[  203.995664][ T9210] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1175'.
[  204.246842][ T8612] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.313969][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  204.315463][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'.
[  204.319551][ T9222] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1182'.
[  204.476254][   T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  204.479652][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.491889][   T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  204.495603][   T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  204.510729][   T10] usb 4-1: Manufacturer: syz
[  204.527740][   T10] usb 4-1: config 0 descriptor??
[  204.632076][   T10] rc_core: IR keymap rc-hauppauge not found
[  204.634686][   T10] Registered IR keymap rc-empty
[  204.637849][   T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  204.644307][   T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11
[  204.794142][ T9240] loop4: detected capacity change from 0 to 8
[  204.814215][ T9240] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  204.859580][ T9240] cramfs: Error -3 while decompressing!
[  204.863581][ T9240] cramfs: ffffffff99bf2668(26)->ffff888128115000(4096)
[  204.866335][ T9240] cramfs: Error -3 while decompressing!
[  204.868759][ T9240] cramfs: ffffffff99bf2682(26)->ffff888128123000(4096)
[  204.875405][ T9240] cramfs: Error -3 while decompressing!
[  204.877691][ T9240] cramfs: ffffffff99bf269c(16)->ffff88812811c000(4096)
[  204.881590][ T9240] cramfs: Error -3 while decompressing!
[  204.883815][ T9240] cramfs: ffffffff99bf2668(26)->ffff888128115000(4096)
[  204.899420][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1190'.
[  204.939151][    C0] igorplugusb 4-1:0.0: receive overflow, at least 8 lost
[  205.145652][ T5318] usb 4-1: USB disconnect, device number 11
[  205.364606][ T9264] netlink: 'syz.0.1200': attribute type 29 has an invalid length.
[  205.626475][ T9273] loop0: detected capacity change from 0 to 4096
[  205.634207][ T9273] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  205.676832][ T9273] ntfs3(loop0): ino=1a, mi_enum_attr
[  205.678996][ T9273] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  205.725294][ T9273] ntfs3(loop0): ino=1e, "file1" ntfs_sync_inode failed, -22.
[  205.760885][   T27] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22.
[  205.790866][ T9277] loop3: detected capacity change from 0 to 256
[  205.821483][ T9279] loop0: detected capacity change from 0 to 128
[  205.933903][ T9281] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  207.314683][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.314683][ T1090] loop0: rw=1, sector=145, nr_sectors = 8 limit=128
[  207.324409][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.324409][ T1090] loop0: rw=1, sector=161, nr_sectors = 8 limit=128
[  207.337490][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.337490][ T1090] loop0: rw=1, sector=177, nr_sectors = 8 limit=128
[  207.348925][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.348925][ T1090] loop0: rw=1, sector=193, nr_sectors = 8 limit=128
[  207.367618][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.367618][ T1090] loop0: rw=1, sector=209, nr_sectors = 8 limit=128
[  207.380922][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.380922][ T1090] loop0: rw=1, sector=225, nr_sectors = 8 limit=128
[  207.386185][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.386185][ T1090] loop0: rw=1, sector=241, nr_sectors = 8 limit=128
[  207.398820][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.398820][ T1090] loop0: rw=1, sector=257, nr_sectors = 8 limit=128
[  207.412575][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.412575][ T1090] loop0: rw=1, sector=273, nr_sectors = 8 limit=128
[  207.423514][ T1090] kworker/u10:5: attempt to access beyond end of device
[  207.423514][ T1090] loop0: rw=1, sector=289, nr_sectors = 8 limit=128
[  207.436132][ T9297] loop4: detected capacity change from 0 to 1024
[  207.548238][ T9304] loop4: detected capacity change from 0 to 128
[  207.591492][ T9304] adfs: Bad value for 'ftsuffix'
[  208.853245][ T9315] loop0: detected capacity change from 0 to 32768
[  208.912195][ T9315] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  208.982379][ T9315] XFS (loop0): Ending clean mount
[  208.985045][ T9345] dummy0: entered allmulticast mode
[  209.209075][ T9347] loop4: detected capacity change from 0 to 32768
[  209.244705][ T9347] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  209.248153][ T9347] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  209.278348][ T9347] XFS (loop4): Ending clean mount
[  209.285349][ T9347] XFS (loop4): Quotacheck needed: Please wait.
[  209.316474][ T9347] XFS (loop4): Quotacheck: Done.
[  209.344732][ T5851] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.092173][ T8612] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  210.539575][ T9381] loop0: detected capacity change from 0 to 32768
[  210.545887][ T9381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1238 (9381)
[  210.560227][ T9381] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  210.564682][ T9381] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  210.595706][ T9381] BTRFS info (device loop0): enabling ssd optimizations
[  210.597918][ T9381] BTRFS info (device loop0): enabling free space tree
[  210.627515][ T5851] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  210.807268][ T9399] loop0: detected capacity change from 0 to 4096
[  210.863349][ T9399] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  210.992297][ T9402] loop0: detected capacity change from 0 to 4096
[  211.018970][ T9402] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  211.026652][ T9402] ntfs3(loop0): Failed to load $Extend (-22).
[  211.029348][ T9402] ntfs3(loop0): Failed to initialize $Extend.
[  211.072256][ T9402] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB
[  211.285674][ T9410] loop0: detected capacity change from 0 to 512
[  211.644295][ T9414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12
[  211.883904][ T9420] netlink: 'syz.0.1248': attribute type 1 has an invalid length.
[  212.113480][ T9424] loop0: detected capacity change from 0 to 128
[  212.137607][ T9424] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  212.146508][ T9424] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.411337][ T9430] loop4: detected capacity change from 0 to 512
[  212.453635][ T9430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.475377][ T9430] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  212.478479][ T5851] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  212.534255][ T9430] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1252: corrupted inode contents
[  212.576344][ T9430] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1252: mark_inode_dirty error
[  212.586388][ T9430] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1252: corrupted inode contents
[  212.597496][ T9438] loop0: detected capacity change from 0 to 2048
[  212.611695][ T9438] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.643123][ T9438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.663719][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.723595][ T9438] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1255: bg 0: block 234: padding at end of block bitmap is not set
[  212.766805][ T9438] EXT4-fs (loop0): Remounting filesystem read-only
[  212.829247][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.997434][ T9453] input: syz1 as /devices/virtual/input/input13
[  213.897421][ T9460] loop0: detected capacity change from 0 to 40427
[  213.910305][ T9460] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  213.914388][ T9460] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  213.925586][ T9460] F2FS-fs (loop0): invalid crc value
[  214.281333][ T9486] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1272'.
[  214.368837][ T9460] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  214.380695][ T9460] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  214.383525][ T9460] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  214.599393][ T9496] netlink: 'syz.3.1277': attribute type 1 has an invalid length.
[  214.607301][ T9496] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1277'.
[  214.765977][ T9498] loop3: detected capacity change from 0 to 256
[  214.816352][ T9505] loop4: detected capacity change from 0 to 1024
[  214.822404][ T9505] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  215.049742][ T9509] loop4: detected capacity change from 0 to 32768
[  215.054032][ T9509] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section replicas: bad nr_required in entry (unknown data_type 155): 239/36 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 8 26 41 44 51 70 73 87 93 102 106 112 120 128 144 184 203 237 245]
[  215.054032][ T9509] replicas (size 64):
[  215.054032][ T9509] (unknown data_type 155): 239/36 [237 106 112 73 203 144 87 44 70 41 26 120 93 128 0 0 0 0 0 0 0 0 0 0 1 8 0 0 0 184 245 51 102 0 0 0]
[  215.054032][ T9509] 
[  215.068381][ T9509] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  215.601832][ T9517] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  215.605810][ T9517] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  215.873397][ T9520] random: crng reseeded on system resumption
[  215.892437][ T9520] Restarting kernel threads ...
[  215.895767][ T9520] Done restarting kernel threads.
[  216.327916][ T9544] loop3: detected capacity change from 0 to 24
[  216.336789][ T9544] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  216.361789][ T9544] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  216.553051][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'.
[  216.988097][ T9571] netlink: 'syz.3.1309': attribute type 1 has an invalid length.
[  217.017176][ T9573] loop4: detected capacity change from 0 to 256
[  217.031468][ T9573] exfat: Deprecated parameter 'namecase'
[  217.068449][ T9573] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2b52634e, utbl_chksum : 0xe619d30d)
[  217.594712][ T9594] netlink: 'syz.3.1318': attribute type 10 has an invalid length.
[  217.597935][ T9594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1318'.
[  217.606276][ T9594] batman_adv: batadv0: Adding interface: virt_wifi0
[  217.609061][ T9594] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.618808][ T9594] batman_adv: batadv0: Interface activated: virt_wifi0
[  217.746232][ T9598] loop3: detected capacity change from 0 to 256
[  217.750072][ T9598] FAT-fs (loop3): bogus sectors per cluster 30
[  217.757414][ T9598] FAT-fs (loop3): Can't find a valid FAT filesystem
[  218.063465][ T9592] loop4: detected capacity change from 0 to 131072
[  218.086641][ T9592] F2FS-fs (loop4): invalid crc value
[  218.132987][ T9592] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  218.143169][ T9592] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  218.422961][ T9622] loop3: detected capacity change from 0 to 4096
[  218.441903][ T9622] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  218.444930][ T9622] ntfs3(loop3): Failed to load $LogFile (-22).
[  218.541706][ T9627] loop3: detected capacity change from 0 to 512
[  218.551834][ T9627] EXT4-fs: inline encryption not supported
[  218.553685][ T9627] EXT4-fs: Ignoring removed mblk_io_submit option
[  218.566979][ T9627] EXT4-fs (loop3): Test dummy encryption mode enabled
[  218.578058][ T9627] EXT4-fs (loop3): orphan cleanup on readonly fs
[  218.582904][ T9627] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.1334: inode #13: comm syz.3.1334: iget: illegal inode #
[  218.588270][ T9627] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1334: couldn't read orphan inode 13 (err -117)
[  218.595583][ T9627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  218.604806][ T9627] EXT4-fs (loop3): shut down requested (2)
[  218.650734][ T7466] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.000408][ T9631] loop0: detected capacity change from 0 to 32768
[  219.037350][ T9631] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  219.062550][ T9631] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  219.091275][ T5318] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  219.125001][ T5851] ocfs2: Unmounting device (7,0) on (node local)
[  219.242805][ T5318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.246738][ T5318] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  219.260001][ T5318] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  219.264626][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.274381][ T5318] usb 4-1: config 0 descriptor??
[  219.344189][ T9646] netlink: 'syz.0.1340': attribute type 29 has an invalid length.
[  219.354241][ T9646] netlink: 'syz.0.1340': attribute type 29 has an invalid length.
[  219.385541][ T9640] loop4: detected capacity change from 0 to 40427
[  219.410724][ T9640] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  219.413830][ T9640] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  219.438527][ T9640] F2FS-fs (loop4): invalid crc value
[  219.509536][ T5318] usb 4-1: USB disconnect, device number 12
[  219.543319][ T9640] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  219.548591][ T9640] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  219.551618][ T9640] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  219.617605][ T9640] bio_check_eod: 92 callbacks suppressed
[  219.617629][ T9640] syz.4.1338: attempt to access beyond end of device
[  219.617629][ T9640] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  219.628354][ T9640] CPU: 1 UID: 0 PID: 9640 Comm: syz.4.1338 Not tainted syzkaller #0 PREEMPT(full) 
[  219.628377][ T9640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.628388][ T9640] Call Trace:
[  219.628396][ T9640]  <TASK>
[  219.628403][ T9640]  dump_stack_lvl+0x189/0x250
[  219.628430][ T9640]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.628450][ T9640]  ? __pfx_queue_work_on+0x10/0x10
[  219.628467][ T9640]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  219.628492][ T9640]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.628528][ T9640]  f2fs_handle_critical_error+0x37c/0x540
[  219.628558][ T9640]  f2fs_write_end_io+0x886/0xb60
[  219.628593][ T9640]  __submit_merged_bio+0x27a/0x6a0
[  219.628614][ T9640]  ? up_write+0x1c4/0x420
[  219.628637][ T9640]  __submit_merged_write_cond+0x44c/0x530
[  219.628668][ T9640]  f2fs_sync_node_pages+0x1479/0x15e0
[  219.628710][ T9640]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  219.628762][ T9640]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  219.628784][ T9640]  ? up_write+0x1c4/0x420
[  219.628798][ T9640]  ? do_raw_spin_unlock+0x4d/0x240
[  219.628823][ T9640]  f2fs_write_checkpoint+0xe6f/0x1df0
[  219.628865][ T9640]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  219.628922][ T9640]  ? down_write+0x162/0x1f0
[  219.628957][ T9640]  ? __pfx_down_write+0x10/0x10
[  219.628973][ T9640]  ? do_sys_openat2+0x121/0x1c0
[  219.628988][ T9640]  ? do_syscall_64+0xfa/0x3b0
[  219.629003][ T9640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.629027][ T9640]  f2fs_issue_checkpoint+0x3ac/0x570
[  219.629048][ T9640]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  219.629075][ T9640]  ? do_raw_spin_lock+0x121/0x290
[  219.629134][ T9640]  ? __pfx_wake_up_var+0x10/0x10
[  219.629168][ T9640]  ? f2fs_sync_fs+0x200/0x3d0
[  219.629194][ T9640]  f2fs_create+0x44b/0x5c0
[  219.629223][ T9640]  ? __pfx_f2fs_create+0x10/0x10
[  219.629256][ T9640]  path_openat+0x14f4/0x3830
[  219.629273][ T9640]  ? arch_stack_walk+0xfc/0x150
[  219.629331][ T9640]  ? __pfx_path_openat+0x10/0x10
[  219.629346][ T9640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.629384][ T9640]  do_filp_open+0x1fa/0x410
[  219.629401][ T9640]  ? __lock_acquire+0xab9/0xd20
[  219.629425][ T9640]  ? __pfx_do_filp_open+0x10/0x10
[  219.629469][ T9640]  ? _raw_spin_unlock+0x28/0x50
[  219.629490][ T9640]  ? alloc_fd+0x64c/0x6c0
[  219.629525][ T9640]  do_sys_openat2+0x121/0x1c0
[  219.629541][ T9640]  ? __se_sys_futex+0x36f/0x400
[  219.629562][ T9640]  ? __pfx_do_sys_openat2+0x10/0x10
[  219.629580][ T9640]  ? __fget_files+0x2a/0x420
[  219.629597][ T9640]  ? rcu_is_watching+0x15/0xb0
[  219.629617][ T9640]  __x64_sys_openat+0x138/0x170
[  219.629641][ T9640]  do_syscall_64+0xfa/0x3b0
[  219.629656][ T9640]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.629671][ T9640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.629686][ T9640]  ? exc_page_fault+0x9f/0xf0
[  219.629704][ T9640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.629718][ T9640] RIP: 0033:0x7fa5ab78eba9
[  219.629733][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.629746][ T9640] RSP: 002b:00007fa5a99f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  219.629763][ T9640] RAX: ffffffffffffffda RBX: 00007fa5ab9d5fa0 RCX: 00007fa5ab78eba9
[  219.629774][ T9640] RDX: 000000000000275a RSI: 0000200000000200 RDI: ffffffffffffff9c
[  219.629785][ T9640] RBP: 00007fa5ab811e19 R08: 0000000000000000 R09: 0000000000000000
[  219.629795][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.629804][ T9640] R13: 00007fa5ab9d6038 R14: 00007fa5ab9d5fa0 R15: 00007fff087f4268
[  219.629833][ T9640]  </TASK>
[  219.629840][ T9640] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  219.770101][ T9640] CPU: 0 UID: 0 PID: 9640 Comm: syz.4.1338 Not tainted syzkaller #0 PREEMPT(full) 
[  219.770127][ T9640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.770138][ T9640] Call Trace:
[  219.770145][ T9640]  <TASK>
[  219.770152][ T9640]  dump_stack_lvl+0x189/0x250
[  219.770180][ T9640]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.770200][ T9640]  ? __pfx_queue_work_on+0x10/0x10
[  219.770216][ T9640]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  219.770241][ T9640]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.770274][ T9640]  f2fs_handle_critical_error+0x37c/0x540
[  219.770301][ T9640]  f2fs_write_end_io+0x886/0xb60
[  219.770333][ T9640]  __submit_merged_bio+0x27a/0x6a0
[  219.770354][ T9640]  ? up_write+0x1c4/0x420
[  219.770393][ T9640]  __submit_merged_write_cond+0x44c/0x530
[  219.770424][ T9640]  f2fs_sync_node_pages+0x1479/0x15e0
[  219.770463][ T9640]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  219.770508][ T9640]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  219.770530][ T9640]  ? up_write+0x1c4/0x420
[  219.770543][ T9640]  ? do_raw_spin_unlock+0x4d/0x240
[  219.770566][ T9640]  f2fs_write_checkpoint+0xe6f/0x1df0
[  219.770619][ T9640]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  219.770670][ T9640]  ? down_write+0x162/0x1f0
[  219.770687][ T9640]  ? __pfx_down_write+0x10/0x10
[  219.770702][ T9640]  ? do_sys_openat2+0x121/0x1c0
[  219.770717][ T9640]  ? do_syscall_64+0xfa/0x3b0
[  219.770732][ T9640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.770756][ T9640]  f2fs_issue_checkpoint+0x3ac/0x570
[  219.770777][ T9640]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  219.770803][ T9640]  ? do_raw_spin_lock+0x121/0x290
[  219.770829][ T9640]  ? __pfx_wake_up_var+0x10/0x10
[  219.770859][ T9640]  ? f2fs_sync_fs+0x200/0x3d0
[  219.770881][ T9640]  f2fs_create+0x44b/0x5c0
[  219.770910][ T9640]  ? __pfx_f2fs_create+0x10/0x10
[  219.770955][ T9640]  path_openat+0x14f4/0x3830
[  219.770974][ T9640]  ? arch_stack_walk+0xfc/0x150
[  219.771024][ T9640]  ? __pfx_path_openat+0x10/0x10
[  219.771040][ T9640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.771075][ T9640]  do_filp_open+0x1fa/0x410
[  219.771115][ T9640]  ? __lock_acquire+0xab9/0xd20
[  219.771138][ T9640]  ? __pfx_do_filp_open+0x10/0x10
[  219.771177][ T9640]  ? _raw_spin_unlock+0x28/0x50
[  219.771197][ T9640]  ? alloc_fd+0x64c/0x6c0
[  219.771230][ T9640]  do_sys_openat2+0x121/0x1c0
[  219.771246][ T9640]  ? __se_sys_futex+0x36f/0x400
[  219.771266][ T9640]  ? __pfx_do_sys_openat2+0x10/0x10
[  219.771283][ T9640]  ? __fget_files+0x2a/0x420
[  219.771300][ T9640]  ? rcu_is_watching+0x15/0xb0
[  219.771318][ T9640]  __x64_sys_openat+0x138/0x170
[  219.771340][ T9640]  do_syscall_64+0xfa/0x3b0
[  219.771355][ T9640]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.771370][ T9640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.771384][ T9640]  ? exc_page_fault+0x9f/0xf0
[  219.771400][ T9640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.771414][ T9640] RIP: 0033:0x7fa5ab78eba9
[  219.771428][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.771441][ T9640] RSP: 002b:00007fa5a99f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  219.771458][ T9640] RAX: ffffffffffffffda RBX: 00007fa5ab9d5fa0 RCX: 00007fa5ab78eba9
[  219.771470][ T9640] RDX: 000000000000275a RSI: 0000200000000200 RDI: ffffffffffffff9c
[  219.771482][ T9640] RBP: 00007fa5ab811e19 R08: 0000000000000000 R09: 0000000000000000
[  219.771492][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.771500][ T9640] R13: 00007fa5ab9d6038 R14: 00007fa5ab9d5fa0 R15: 00007fff087f4268
[  219.771525][ T9640]  </TASK>
[  219.915393][ T9640] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  220.728801][ T9681] loop0: detected capacity change from 0 to 1024
[  221.485265][ T9694] loop3: detected capacity change from 0 to 128
[  221.507695][ T9694] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed)
[  221.849711][ T9714] loop0: detected capacity change from 0 to 64
[  221.866581][ T9714] MINIX-fs: deleted inode referenced: 6
[  221.895422][ T9714] MINIX-fs: deleted inode referenced: 6
[  221.899604][ T9714] MINIX-fs: deleted inode referenced: 6
[  221.905917][ T9714] MINIX-fs: deleted inode referenced: 6
[  222.449213][ T9711] loop3: detected capacity change from 0 to 131072
[  222.453422][ T9711] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  222.456113][ T9711] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  222.484206][ T9711] F2FS-fs (loop3): invalid crc value
[  222.524863][ T9726] loop4: detected capacity change from 0 to 4096
[  222.534460][ T9711] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  222.539890][ T9711] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  222.542151][ T9711] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  222.646790][ T9718] loop0: detected capacity change from 0 to 32768
[  222.646995][ T9726] ntfs3(loop4): Failed to initialize $Secure (-22).
[  222.656269][ T9718] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1371 (9718)
[  222.720661][ T9718] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  222.723996][ T9718] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  222.777118][ T9718] BTRFS info (device loop0): enabling ssd optimizations
[  222.779736][ T9718] BTRFS info (device loop0): enabling free space tree
[  222.869718][ T5851] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.049036][ T9753] loop0: detected capacity change from 0 to 1024
[  223.124415][ T9753] EXT4-fs: Ignoring removed bh option
[  223.126659][ T9753] EXT4-fs: inline encryption not supported
[  223.134802][ T9753] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  223.155499][ T9753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  223.196246][ T9753] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1378: lblock 2 mapped to illegal pblock 2 (length 1)
[  223.209551][ T9753] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  223.219355][ T9753] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1378: lblock 0 mapped to illegal pblock 48 (length 1)
[  223.227687][ T9753] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  223.236228][ T9753] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1378: Failed to acquire dquot type 0
[  223.257986][ T9753] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  223.262553][ T9753] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1378: mark_inode_dirty error
[  223.268992][ T9753] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  223.290101][ T9753] EXT4-fs (loop0): 1 orphan inode deleted
[  223.294298][ T9753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.320806][  T986] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  223.367803][ T9757] loop4: detected capacity change from 0 to 1024
[  223.375209][  T986] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  223.381408][ T9757] EXT4-fs: inline encryption not supported
[  223.383394][ T9757] EXT4-fs: Ignoring removed bh option
[  223.391019][  T986] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u10:3: Failed to release dquot type 0
[  223.430371][ T9757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.470847][ T9753] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  223.544554][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.628747][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.634879][ T9761] loop0: detected capacity change from 0 to 128
[  223.671602][ T9761] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  223.714784][ T9761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.784082][ T9767] loop3: detected capacity change from 0 to 128
[  223.797772][ T9767] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  223.804098][ T9767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.841122][ T9769] loop0: detected capacity change from 0 to 2048
[  223.845397][ T9769] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576
[  223.855349][ T9769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.388365][   T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  224.531133][   T10] usb 1-1: device descriptor read/64, error -71
[  224.790889][   T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  224.960308][   T10] usb 1-1: device descriptor read/64, error -71
[  225.076367][   T10] usb usb1-port1: attempt power cycle
[  225.156223][ T9782] input: syz0 as /devices/virtual/input/input15
[  225.158281][ T9782] input: failed to attach handler leds to device input15, error: -6
[  225.213479][ T9786] loop3: detected capacity change from 0 to 128
[  225.217862][ T9786] FAT-fs (loop3): invalid media value (0x01)
[  225.220282][ T9786] FAT-fs (loop3): Can't find a valid FAT filesystem
[  225.337366][   T33] audit: type=1326 audit(1757603623.684:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.4.1394" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab78eba9 code=0x7ffc0000
[  225.373823][   T33] audit: type=1326 audit(1757603623.684:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.4.1394" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab78eba9 code=0x7ffc0000
[  225.389083][   T33] audit: type=1326 audit(1757603623.684:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.4.1394" exe="/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa5ab78eba9 code=0x7ffc0000
[  225.406664][   T33] audit: type=1326 audit(1757603623.684:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.4.1394" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab78eba9 code=0x7ffc0000
[  225.417997][   T33] audit: type=1326 audit(1757603623.684:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9794 comm="syz.4.1394" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab78eba9 code=0x7ffc0000
[  225.462394][   T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  225.493070][   T10] usb 1-1: device descriptor read/8, error -71
[  225.575464][ T9809] loop4: detected capacity change from 0 to 8
[  225.726060][   T33] audit: type=1800 audit(1757603624.054:35): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1400" name="file1" dev="loop4" ino=5 res=0 errno=0
[  225.735450][   T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  225.763033][   T10] usb 1-1: device descriptor read/8, error -71
[  225.881017][   T10] usb usb1-port1: unable to enumerate USB device
[  226.296567][ T9822] loop3: detected capacity change from 0 to 40427
[  226.311093][ T9822] F2FS-fs (loop3): Image doesn't support compression
[  226.325774][ T9822] F2FS-fs (loop3): build fault injection rate: 690
[  226.337920][ T9822] F2FS-fs (loop3): build fault injection type: 0x35f7
[  226.354083][ T9822] F2FS-fs (loop3): invalid crc value
[  226.464362][ T9822] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  226.468030][ T9822] F2FS-fs (loop3): Start checkpoint disabled!
[  226.473485][ T9822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  226.563787][   T36] kworker/u10:1: attempt to access beyond end of device
[  226.563787][   T36] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  226.569090][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  226.569103][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.569109][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  226.569126][   T36] Call Trace:
[  226.569129][   T36]  <TASK>
[  226.569133][   T36]  dump_stack_lvl+0x189/0x250
[  226.569149][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.569158][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  226.569168][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  226.569180][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  226.569197][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  226.569214][   T36]  f2fs_write_end_io+0x886/0xb60
[  226.569232][   T36]  __submit_merged_bio+0x27a/0x6a0
[  226.569246][   T36]  __submit_merged_write_cond+0x255/0x530
[  226.569261][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  226.569287][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  226.569303][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  226.569332][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  226.569350][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  226.569362][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  226.569375][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  226.569384][   T36]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  226.569402][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  226.569410][   T36]  do_writepages+0x32e/0x550
[  226.569448][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  226.569461][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  226.569484][   T36]  __writeback_single_inode+0x145/0xff0
[  226.569501][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  226.569516][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  226.569558][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  226.569597][   T36]  ? rcu_is_watching+0x15/0xb0
[  226.569611][   T36]  wb_writeback+0x43b/0xaf0
[  226.569642][   T36]  ? queue_io+0x341/0x590
[  226.569664][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  226.569689][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.569703][   T36]  wb_workfn+0x409/0xef0
[  226.569720][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  226.569732][   T36]  ? __lock_acquire+0xab9/0xd20
[  226.569749][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  226.569761][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.569776][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  226.569790][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  226.569805][   T36]  process_scheduled_works+0xae1/0x17b0
[  226.569848][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  226.569879][   T36]  worker_thread+0x8a0/0xda0
[  226.569920][   T36]  kthread+0x711/0x8a0
[  226.569941][   T36]  ? __pfx_worker_thread+0x10/0x10
[  226.569955][   T36]  ? __pfx_kthread+0x10/0x10
[  226.569974][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.569994][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.570006][   T36]  ? __pfx_kthread+0x10/0x10
[  226.570025][   T36]  ret_from_fork+0x3fc/0x770
[  226.570043][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  226.570064][   T36]  ? __switch_to_asm+0x39/0x70
[  226.570080][   T36]  ? __switch_to_asm+0x33/0x70
[  226.570096][   T36]  ? __pfx_kthread+0x10/0x10
[  226.570115][   T36]  ret_from_fork_asm+0x1a/0x30
[  226.570147][   T36]  </TASK>
[  226.571513][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  226.701953][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  226.701973][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.701983][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  226.702007][   T36] Call Trace:
[  226.702014][   T36]  <TASK>
[  226.702023][   T36]  dump_stack_lvl+0x189/0x250
[  226.702045][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.702061][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  226.702074][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  226.702096][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  226.702129][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  226.702157][   T36]  f2fs_write_end_io+0x886/0xb60
[  226.702189][   T36]  __submit_merged_bio+0x27a/0x6a0
[  226.702216][   T36]  __submit_merged_write_cond+0x255/0x530
[  226.702242][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  226.702287][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  226.702315][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  226.702371][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  226.702403][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  226.702449][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  226.702473][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  226.702488][   T36]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  226.702516][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  226.702533][   T36]  do_writepages+0x32e/0x550
[  226.702558][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  226.702572][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  226.702598][   T36]  __writeback_single_inode+0x145/0xff0
[  226.702617][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  226.702640][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  226.702683][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  226.702739][   T36]  ? rcu_is_watching+0x15/0xb0
[  226.702764][   T36]  wb_writeback+0x43b/0xaf0
[  226.702790][   T36]  ? queue_io+0x341/0x590
[  226.702812][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  226.702856][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.702882][   T36]  wb_workfn+0x409/0xef0
[  226.702912][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  226.702933][   T36]  ? __lock_acquire+0xab9/0xd20
[  226.702963][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  226.702984][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.703003][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  226.703016][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  226.703032][   T36]  process_scheduled_works+0xae1/0x17b0
[  226.703074][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  226.703104][   T36]  worker_thread+0x8a0/0xda0
[  226.703145][   T36]  kthread+0x711/0x8a0
[  226.703166][   T36]  ? __pfx_worker_thread+0x10/0x10
[  226.703181][   T36]  ? __pfx_kthread+0x10/0x10
[  226.703200][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.703218][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.703230][   T36]  ? __pfx_kthread+0x10/0x10
[  226.703249][   T36]  ret_from_fork+0x3fc/0x770
[  226.703267][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  226.703289][   T36]  ? __switch_to_asm+0x39/0x70
[  226.703305][   T36]  ? __switch_to_asm+0x33/0x70
[  226.703326][   T36]  ? __pfx_kthread+0x10/0x10
[  226.703344][   T36]  ret_from_fork_asm+0x1a/0x30
[  226.703379][   T36]  </TASK>
[  226.706291][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  226.964788][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1414'.
[  227.105264][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'.
[  227.202570][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'.
[  228.262852][ T9857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1421'.
[  228.324089][ T9857] veth3: entered promiscuous mode
[  228.666060][ T9866] loop4: detected capacity change from 0 to 32768
[  228.669434][ T9866] XFS: ikeep mount option is deprecated.
[  228.779135][ T9866] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.974978][ T9866] XFS (loop4): Ending clean mount
[  229.250669][ T9866] XFS (loop4): Quotacheck needed: Please wait.
[  229.294808][ T9866] XFS (loop4): Quotacheck: Done.
[  229.616359][ T9886] loop3: detected capacity change from 0 to 128
[  230.131177][ T8612] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  230.342309][ T5318] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  230.864463][ T5318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.868108][ T5318] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  230.875074][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.885706][ T5318] usb 1-1: config 0 descriptor??
[  230.951377][ T5852] Bluetooth: hci1: command tx timeout
[  231.013975][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'.
[  231.324272][ T9923] loop4: detected capacity change from 0 to 1024
[  231.332054][ T9923] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  231.344614][ T9923] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  231.350219][ T9923] EXT4-fs (loop4): orphan cleanup on readonly fs
[  231.355254][ T9923] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.1444: Invalid inode table block 0 in block_group 0
[  231.361677][ T9923] EXT4-fs (loop4): Remounting filesystem read-only
[  231.363740][ T9923] Quota error (device loop4): write_blk: dquota write failed
[  231.365999][ T9923] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  231.369265][ T9923] EXT4-fs (loop4): 1 truncate cleaned up
[  231.382473][ T9923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  231.420849][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.718625][ T5318] razer 0003:1532:010E.000A: failed to enable macro keys: -71
[  232.037774][ T5318] razer 0003:1532:010E.000A: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0
[  232.089656][ T5318] usb 1-1: USB disconnect, device number 20
[  232.824487][ T9939] loop0: detected capacity change from 0 to 8192
[  233.444830][ T9947] loop4: detected capacity change from 0 to 4096
[  233.469559][ T9950] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.554050][ T8612] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  233.571094][ T8612] Remounting filesystem read-only
[  233.573144][ T8612] NILFS error (device loop4): nilfs_readdir: bad page in #2
[  233.603229][ T8612] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=8192, inode=0, rec_len=0, name_len=0
[  233.609292][ T8612] NILFS error (device loop4): nilfs_readdir: bad page in #2
[  233.999844][ T9966] gfs2: not a GFS2 filesystem
[  234.659164][ T9977] loop0: detected capacity change from 0 to 512
[  234.687620][ T9977] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  234.704340][ T9977] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1462: bad orphan inode 15
[  234.709374][ T9977] ext4_test_bit(bit=14, block=18) = 1
[  234.713049][ T9977] is_bad_inode(inode)=0
[  234.714622][ T9977] NEXT_ORPHAN(inode)=1023
[  234.716338][ T9977] max_ino=32
[  234.717669][ T9977] i_nlink=0
[  234.724235][ T9977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  234.728987][ T9977] ext2 filesystem being mounted at /464/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  234.775182][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  234.924191][ T9986] IPVS: length: 153 != 24
[  235.971479][T10011] loop0: detected capacity change from 0 to 512
[  235.977041][T10011] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  235.985960][T10011] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  236.010456][T10011] EXT4-fs (loop0): orphan cleanup on readonly fs
[  236.020233][T10011] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1474: bad orphan inode 11
[  236.025264][T10011] ext4_test_bit(bit=10, block=2) = 0
[  236.033197][T10011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  236.047181][T10011] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  236.074344][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.380862][ T6055] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  236.532853][ T6055] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04
[  236.537348][ T6055] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.544330][ T6055] usb 1-1: config 0 descriptor??
[  236.549718][ T6055] go7007 1-1:0.0: probe with driver go7007 failed with error -12
[  236.756380][ T6055] usb 1-1: USB disconnect, device number 21
[  237.379948][T10025] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1481'.
[  237.396524][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'.
[  237.978466][T10058] netlink: 'syz.0.1494': attribute type 7 has an invalid length.
[  237.984562][T10058] netlink: 'syz.0.1494': attribute type 8 has an invalid length.
[  239.146479][T10081] netlink: 'syz.4.1503': attribute type 1 has an invalid length.
[  239.149493][T10081] netlink: 'syz.4.1503': attribute type 1 has an invalid length.
[  239.153741][T10081] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1503'.
[  239.157733][T10081] netlink: 'syz.4.1503': attribute type 1 has an invalid length.
[  239.161742][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'.
[  239.228433][T10083] cgroup: noprefix used incorrectly
[  239.475486][T10091] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1508'.
[  239.534641][T10099] loop0: detected capacity change from 0 to 64
[  239.970282][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'.
[  239.976235][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1522'.
[  239.979621][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'.
[  239.987736][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1522'.
[  239.991306][T10119] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1522'.
[  240.751044][   T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  240.764150][T10131] netlink: 'syz.3.1527': attribute type 10 has an invalid length.
[  240.770464][T10131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.775915][T10131] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  240.815544][T10133] overlayfs: failed to clone upperpath
[  240.911901][   T10] usb 1-1: Using ep0 maxpacket: 32
[  240.917443][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  240.927077][   T10] usb 1-1: language id specifier not provided by device, defaulting to English
[  241.018133][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40
[  241.022155][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.025266][   T10] usb 1-1: Product: syz
[  241.026903][   T10] usb 1-1: Manufacturer: 剩ꗨ㌌谮㞔畺魶๊≱還뛌큭⡋≣ᆓෟ劚썵췚眃赺漉ꋋㄐ鸒씀芆栯혁煮薂酒ꄙ╚둥შ볚酔⏓䣣ᛖ齗䔟顱ﬠ㎵稃ն䍳
[  241.033996][   T10] usb 1-1: SerialNumber: syz
[  241.042966][   T10] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  241.247483][ T6317] usb 1-1: USB disconnect, device number 22
[  242.630907][ T5883] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  242.943632][ T5883] usb 1-1: Using ep0 maxpacket: 32
[  242.951987][ T5883] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  242.954541][ T5883] usb 1-1: config 0 has no interface number 0
[  242.956581][ T5883] usb 1-1: config 0 interface 12 has no altsetting 0
[  242.972982][ T5883] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  242.975821][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.978348][ T5883] usb 1-1: Product: syz
[  242.989510][ T5883] usb 1-1: Manufacturer: syz
[  242.994529][ T5883] usb 1-1: SerialNumber: syz
[  243.000386][T10167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1543'.
[  243.058013][ T5883] usb 1-1: config 0 descriptor??
[  243.073547][T10167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.118160][ T5882] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.124550][ T5882] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.127973][ T5882] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.717496][T10175] trusted_key: encrypted_key: insufficient parameters specified
[  244.486394][T10167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.491897][T10167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.572606][T10167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.576748][T10167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.672490][T10167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.676574][T10167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.699600][ T5883] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  244.704656][ T5883] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  244.707561][ T5883] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  244.711018][ T5883] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  244.721487][ T5883] usb 1-1: USB disconnect, device number 23
[  244.764335][T10185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  244.804505][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  244.807793][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.826164][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  244.834344][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.875597][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  244.879073][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.889242][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  244.910921][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.033444][T10196] netlink: 'syz.4.1555': attribute type 1 has an invalid length.
[  245.062785][T10196] 8021q: adding VLAN 0 to HW filter on device bond1
[  245.091744][T10196] bond1: (slave ip6erspan0): making interface the new active one
[  245.096808][T10196] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  245.190485][T10205] loop4: detected capacity change from 0 to 256
[  245.378596][T10217] loop0: detected capacity change from 0 to 164
[  245.436555][T10219] loop4: detected capacity change from 0 to 512
[  245.478167][T10219] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  245.496432][T10219] EXT4-fs (loop4): mount failed
[  245.593122][T10225] loop0: detected capacity change from 0 to 4096
[  245.614278][T10225] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  246.782511][T10251] loop0: detected capacity change from 0 to 2048
[  246.810592][T10251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  247.244932][T10255] loop4: detected capacity change from 0 to 32768
[  247.332193][T10255] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  247.416000][T10255] XFS (loop4): Ending clean mount
[  247.442623][T10255] XFS (loop4): Quotacheck needed: Please wait.
[  247.525532][T10255] XFS (loop4): Quotacheck: Done.
[  247.669962][ T8612] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  248.160964][T10274] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1582' sets config #8
[  248.914071][T10286] loop4: detected capacity change from 0 to 32768
[  248.955142][   T33] audit: type=1326 audit(1757603647.304:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9218eba9 code=0x7ffc0000
[  248.980952][T10286] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  248.983174][   T33] audit: type=1326 audit(1757603647.334:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9218eba9 code=0x7ffc0000
[  249.032440][   T33] audit: type=1326 audit(1757603647.344:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f0e9218eba9 code=0x7ffc0000
[  249.069628][T10286] XFS (loop4): Ending clean mount
[  249.074295][   T33] audit: type=1326 audit(1757603647.344:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9218eba9 code=0x7ffc0000
[  249.087001][   T33] audit: type=1326 audit(1757603647.344:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9218eba9 code=0x7ffc0000
[  249.088175][T10286] XFS (loop4): Quotacheck needed: Please wait.
[  249.153287][T10286] XFS (loop4): Quotacheck: Done.
[  249.199136][ T8612] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  249.710707][ T7609] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  249.734644][T10329] loop0: detected capacity change from 0 to 128
[  249.862462][ T7609] usb 5-1: config 0 has an invalid interface number: 112 but max is 0
[  249.865313][ T7609] usb 5-1: config 0 has no interface number 0
[  249.867356][ T7609] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0xF has invalid maxpacket 1007, setting to 64
[  249.880626][ T7609] usb 5-1: New USB device found, idVendor=3154, idProduct=721e, bcdDevice= 9.c6
[  249.890605][ T7609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.894688][ T7609] usb 5-1: config 0 descriptor??
[  249.898083][ T7609] usb-storage 5-1:0.112: USB Mass Storage device detected
[  250.115621][ T7609] usb 5-1: USB disconnect, device number 4
[  251.235587][T10376] loop4: detected capacity change from 0 to 4096
[  251.557419][   T33] audit: type=1326 audit(1757603649.904:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10393 comm="syz.3.1634" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a858eba9 code=0x0
[  251.679983][T10391] loop4: detected capacity change from 0 to 40427
[  251.695201][T10391] F2FS-fs (loop4): invalid crc value
[  251.765928][T10391] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  251.771539][T10391] F2FS-fs (loop4): Start checkpoint disabled!
[  251.777426][T10391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  251.948578][T10403] loop0: detected capacity change from 0 to 128
[  251.971031][T10403] FAT-fs (loop0): bogus number of reserved sectors
[  251.973649][T10403] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  251.977312][T10403] FAT-fs (loop0): Can't find a valid FAT filesystem
[  252.719560][T10420] loop4: detected capacity change from 0 to 8
[  252.770031][T10420] atomic_op ffff88811004d198 conn xmit_atomic 0000000000000000
[  252.816806][ T3588] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2
[  252.820430][ T3588] Bluetooth: hci3: Frame reassembly failed (-84)
[  253.062742][T10428] loop0: detected capacity change from 0 to 40427
[  253.065613][T10428] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  253.068013][T10428] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  253.076159][T10428] F2FS-fs (loop0): invalid crc value
[  253.150734][T10428] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  253.154836][T10428] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  253.157189][T10428] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  253.215999][T10428] syz.0.1648: attempt to access beyond end of device
[  253.215999][T10428] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  253.417484][ T3588] kworker/u9:7: attempt to access beyond end of device
[  253.417484][ T3588] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  253.867325][T10442] loop0: detected capacity change from 0 to 1024
[  253.925386][ T3588] hfsplus: b-tree write err: -5, ino 4
[  254.514572][T10464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1662'.
[  254.871323][ T5852] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  255.499047][T10501] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1679'.
[  255.503694][T10501] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1679'.
[  255.515499][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.518072][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.591472][T10503] loop0: detected capacity change from 0 to 1024
[  255.639010][ T3580] hfsplus: b-tree write err: -5, ino 4
[  257.091087][ T6317] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  257.253355][ T6317] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  257.260585][ T6317] usb 5-1: config 0 has no interface number 0
[  257.264646][ T6317] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  257.267437][ T6317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.269861][ T6317] usb 5-1: Product: syz
[  257.271762][ T6317] usb 5-1: Manufacturer: syz
[  257.273212][ T6317] usb 5-1: SerialNumber: syz
[  257.277434][ T6317] usb 5-1: config 0 descriptor??
[  258.026948][T10539] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1694'.
[  258.101051][ T6317] asix 5-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xd7
[  258.195108][T10550] loop0: detected capacity change from 0 to 1024
[  258.303578][ T6317] usb 5-1: USB disconnect, device number 5
[  258.900014][T10581] loop4: detected capacity change from 0 to 1764
[  258.905906][T10581] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  258.914350][T10581] isofs_fill_super: root inode is not a directory. Corrupted media?
[  258.921705][   T33] audit: type=1326 audit(1757603657.274:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10582 comm="syz.0.1716" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e9218eba9 code=0x0
[  259.001238][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'.
[  259.007152][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'.
[  259.016511][T10588] netlink: 'syz.4.1718': attribute type 18 has an invalid length.
[  259.307043][T10606] netlink: 'syz.4.1727': attribute type 32 has an invalid length.
[  259.466541][T10611] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  259.470166][T10611] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  260.274006][T10622] input: syz1 as /devices/virtual/input/input17
[  260.276020][T10622] input: failed to attach handler leds to device input17, error: -6
[  260.291785][   T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  260.482269][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  260.491822][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.502266][   T10] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  260.519579][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.613664][   T10] usb 1-1: config 0 descriptor??
[  260.624992][   T10] usbhid 1-1:0.0: can't add hid device: -22
[  260.627231][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  260.713613][T10629] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1737'.
[  260.836647][ T6055] usb 1-1: USB disconnect, device number 24
[  260.865190][T10633] loop4: detected capacity change from 0 to 4096
[  260.877970][T10633] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  260.885229][T10633] ntfs3(loop4): ino=3, mi_enum_attr
[  260.887696][T10633] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  260.896197][T10633] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  261.027006][T10635] loop4: detected capacity change from 0 to 1024
[  261.073592][ T3580] hfsplus: b-tree write err: -5, ino 4
[  262.793355][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  263.185154][T10696] loop4: detected capacity change from 0 to 256
[  263.205556][T10696] FAT-fs (loop4): Directory bread(block 64) failed
[  263.208132][T10696] FAT-fs (loop4): Directory bread(block 65) failed
[  263.214411][T10696] FAT-fs (loop4): Directory bread(block 66) failed
[  263.217052][T10696] FAT-fs (loop4): Directory bread(block 67) failed
[  263.219139][T10696] FAT-fs (loop4): Directory bread(block 68) failed
[  263.221733][T10696] FAT-fs (loop4): Directory bread(block 69) failed
[  263.224224][T10696] FAT-fs (loop4): Directory bread(block 70) failed
[  263.226980][T10696] FAT-fs (loop4): Directory bread(block 71) failed
[  263.229183][T10696] FAT-fs (loop4): Directory bread(block 72) failed
[  263.231935][T10696] FAT-fs (loop4): Directory bread(block 73) failed
[  263.314649][  T986] kworker/u10:3: attempt to access beyond end of device
[  263.314649][  T986] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256
[  263.568725][   T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1)
[  263.990457][T10719] loop0: detected capacity change from 0 to 128
[  264.006611][T10719] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  264.012935][T10719] ext4 filesystem being mounted at /574/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  264.034481][ T5851] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  264.425390][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'.
[  264.686386][T10758] lo: entered allmulticast mode
[  264.696525][T10757] lo: left allmulticast mode
[  264.814698][T10765] loop0: detected capacity change from 0 to 2048
[  264.854183][T10765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.857953][T10765] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  264.903155][T10748] loop4: detected capacity change from 0 to 40427
[  264.907621][T10748] F2FS-fs (loop4): Image doesn't support compression
[  264.914172][T10748] F2FS-fs (loop4): invalid crc value
[  264.969362][T10748] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  264.973583][T10748] F2FS-fs (loop4): Start checkpoint disabled!
[  264.981643][T10748] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  264.994699][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.995868][T10748] F2FS-fs (loop4): disabling checkpoint not compatible with read-only
[  265.252599][   T33] audit: type=1326 audit(1757603663.617:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.3.1801" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a858eba9 code=0x0
[  265.340041][T10790] loop0: detected capacity change from 0 to 4096
[  265.454604][T10800] binder: 10799:10800 ioctl 4018620d 0 returned -22
[  265.463348][T10800] binder: 10799:10800 ioctl c0306201 0 returned -14
[  266.083756][T10790] loop0: detected capacity change from 0 to 32768
[  266.095989][T10790] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1802 (10790)
[  266.153274][T10790] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  266.161631][T10790] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  266.271646][T10790] BTRFS info (device loop0): enabling ssd optimizations
[  266.275112][T10790] BTRFS info (device loop0): enabling free space tree
[  266.289797][T10790] BTRFS info (device loop0): use lzo compression, level 0
[  266.492238][ T5851] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  266.710167][T10829] syz.3.1812 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  267.594221][T10842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.926056][T10853] loop0: detected capacity change from 0 to 4096
[  267.932903][T10853] ntfs3(loop0): Primary boot: invalid bytes per sector 0.
[  267.935471][T10853] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[  268.267094][T10873] loop0: detected capacity change from 0 to 4096
[  268.309838][T10873] ntfs3(loop0): failed to convert "0080" to koi8-ru
[  268.320135][T10873] ntfs3(loop0): failed to convert name for inode 1e.
[  268.322995][T10873] ntfs3(loop0): ino=1f, mi_enum_attr
[  268.325303][T10873] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  268.594673][T10895] input: syz0 as /devices/virtual/input/input18
[  268.705449][ T5894] IPVS: starting estimator thread 0...
[  268.820639][T10900] IPVS: using max 61 ests per chain, 146400 per kthread
[  269.083119][T10919] loop0: detected capacity change from 0 to 256
[  269.089943][T10919] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  269.147719][T10902] loop4: detected capacity change from 0 to 40427
[  269.165530][T10902] F2FS-fs (loop4): build fault injection rate: 46
[  269.167604][T10902] F2FS-fs (loop4): build fault injection type: 0xeffa
[  269.178450][T10921] overlayfs: failed to clone upperpath
[  269.182564][T10902] F2FS-fs (loop4): invalid crc value
[  269.187656][T10902] F2FS-fs (loop4): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4462/0x6ff0
[  269.199679][T10902] F2FS-fs (loop4): Failed to initialize F2FS node manager (-12)
[  269.792787][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'.
[  269.801949][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'.
[  269.958648][T10937] loop4: detected capacity change from 0 to 512
[  269.976898][T10937] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13
[  269.982457][T10937] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.1856: iget: bad i_size value: 12154757448730
[  269.988619][T10937] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1856: couldn't read orphan inode 13 (err -117)
[  269.995747][T10937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.010455][T10937] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  270.042628][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.176955][T10945] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1859'.
[  270.246183][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'.
[  270.422086][ T6055] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  270.589876][ T6055] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.594358][ T6055] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.598099][ T6055] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  270.610928][ T6055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.625034][ T6055] usb 5-1: config 0 descriptor??
[  271.083009][ T6055] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  271.264898][ T6055] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00
[  271.405537][T10965] block nbd0: Attempted send on invalid socket
[  271.422870][T10965] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  271.753384][T10969] loop0: detected capacity change from 0 to 32768
[  271.765862][T10969] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  271.776647][T10969] XFS (loop0): Ending clean mount
[  271.827437][ T5851] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  272.093336][ T5318] usb 5-1: USB disconnect, device number 6
[  273.942632][T11014] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  274.771217][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'.
[  274.779256][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'.
[  275.014159][T11028] loop4: detected capacity change from 0 to 32768
[  275.018152][T11028] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1891 (11028)
[  275.043946][T11028] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.047850][T11028] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  275.122010][T11028] BTRFS info (device loop4): enabling ssd optimizations
[  275.124841][T11028] BTRFS info (device loop4): enabling free space tree
[  275.176646][ T8612] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.181562][ T5318] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  275.341418][ T5318] usb 1-1: Using ep0 maxpacket: 16
[  275.368481][ T5318] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  275.401774][ T5318] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  275.417768][ T5318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.421450][ T5318] usb 1-1: Product: syz
[  275.423192][ T5318] usb 1-1: Manufacturer: syz
[  275.425089][ T5318] usb 1-1: SerialNumber: syz
[  275.434410][ T5318] usb 1-1: config 0 descriptor??
[  275.438880][ T5318] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  275.461109][ T5318] usb 1-1: Detected FT232R
[  275.594346][T11063] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[  275.643746][ T5318] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  275.893051][ T5318] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  276.168410][ T5318] usb 1-1: USB disconnect, device number 25
[  276.340302][ T5318] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  276.349221][ T5318] ftdi_sio 1-1:0.0: device disconnected
[  277.010881][ T5318] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  277.087582][T11091] trusted_key: encrypted_key: insufficient parameters specified
[  277.093408][T11089] loop0: detected capacity change from 0 to 40427
[  277.097210][T11089] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  277.100002][T11089] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  277.103212][T11089] F2FS-fs (loop0): build fault injection rate: 1
[  277.105383][T11089] F2FS-fs (loop0): build fault injection type: 0x1f6
[  277.109030][T11089] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x3deb/0x6ff0
[  277.114277][T11089] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  277.282064][ T5318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.285293][ T5318] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  277.288220][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.294104][ T5318] usb 5-1: config 0 descriptor??
[  277.301606][ T5318] pwc: Askey VC010 type 2 USB webcam detected.
[  277.765774][T11099] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1916'.
[  277.850138][ T5318] pwc: recv_control_msg error -32 req 02 val 2b00
[  277.854296][ T5318] pwc: recv_control_msg error -32 req 02 val 2700
[  277.858208][ T5318] pwc: recv_control_msg error -32 req 02 val 2c00
[  277.862523][ T5318] pwc: recv_control_msg error -32 req 04 val 1000
[  277.865862][ T5318] pwc: recv_control_msg error -32 req 04 val 1300
[  277.869118][ T5318] pwc: recv_control_msg error -32 req 04 val 1400
[  277.872907][ T5318] pwc: recv_control_msg error -32 req 02 val 2000
[  277.876248][ T5318] pwc: recv_control_msg error -32 req 02 val 2100
[  277.879580][ T5318] pwc: recv_control_msg error -32 req 04 val 1500
[  277.883658][ T5318] pwc: recv_control_msg error -32 req 02 val 2500
[  277.886832][ T5318] pwc: recv_control_msg error -32 req 02 val 2400
[  277.890107][ T5318] pwc: recv_control_msg error -32 req 02 val 2600
[  277.896844][ T5318] pwc: recv_control_msg error -32 req 02 val 2900
[  277.900285][ T5318] pwc: recv_control_msg error -32 req 02 val 2800
[  277.905310][ T5318] pwc: recv_control_msg error -32 req 04 val 1100
[  277.922823][ T5318] pwc: Registered as video103.
[  277.930299][ T5318] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19
[  278.047772][T11108] loop0: detected capacity change from 0 to 164
[  278.120415][ T6055] usb 5-1: USB disconnect, device number 7
[  279.009750][T11142] loop4: detected capacity change from 0 to 8192
[  279.026171][T11142] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  279.161596][T11120] loop0: detected capacity change from 0 to 131072
[  279.166037][T11120] F2FS-fs (loop0): Image doesn't support compression
[  279.168799][T11120] F2FS-fs (loop0): Test dummy encryption mode enabled
[  279.176201][T11120] F2FS-fs (loop0): invalid crc value
[  279.205730][T11142] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  279.214897][T11142] ntfs3(loop4): Failed to load $Extend (-2).
[  279.216812][T11142] ntfs3(loop4): Failed to initialize $Extend.
[  279.267786][T11120] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  279.272438][T11120] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  279.521195][ T5240] Bluetooth: hci1: command 0x0406 tx timeout
[  279.634772][ T5240] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1
[  279.694919][T11155] loop4: detected capacity change from 0 to 4096
[  279.710082][T11155] EXT4-fs: Conflicting test_dummy_encryption options
[  280.482581][T11181] input: syz0 as /devices/virtual/input/input20
[  280.702170][T11188] loop4: detected capacity change from 0 to 1024
[  280.724756][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'.
[  280.770990][ T7609] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  280.781594][ T1090] hfsplus: b-tree write err: -5, ino 4
[  281.014041][T11203] loop4: detected capacity change from 0 to 512
[  281.022546][T11203] EXT4-fs: Ignoring removed oldalloc option
[  281.119429][T11203] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1958: Parent and EA inode have the same ino 15
[  281.156582][T11212] netlink: 'syz.3.1960': attribute type 10 has an invalid length.
[  281.223355][T11212] bond0: entered promiscuous mode
[  281.224974][T11212] bond_slave_0: entered promiscuous mode
[  281.226849][T11212] bond_slave_1: entered promiscuous mode
[  281.228712][T11212] batadv0: entered promiscuous mode
[  281.460957][   T33] audit: type=1107 audit(1757603679.727:44): pid=11205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  281.558352][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1961'.
[  281.604670][T11203] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  281.613606][T11203] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1958: Parent and EA inode have the same ino 15
[  281.622049][T11203] EXT4-fs (loop4): 1 orphan inode deleted
[  281.625000][T11203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.657650][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.891337][T11205] delete_channel: no stack
[  282.846646][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1988'.
[  282.850590][ T5894] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  282.870873][ T7609] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  282.873306][ T7609] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  282.880836][ T5240] Bluetooth: hci0: command 0x0406 tx timeout
[  282.940893][ T6055] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  283.020772][ T5894] usb 5-1: Using ep0 maxpacket: 32
[  283.026248][ T5894] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  283.029200][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.034493][ T5894] usb 5-1: Product: syz
[  283.036111][ T5894] usb 5-1: Manufacturer: syz
[  283.038139][ T5894] usb 5-1: SerialNumber: syz
[  283.041743][ T5894] usb 5-1: config 0 descriptor??
[  283.048783][ T5894] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  283.371262][ T6055] usb 1-1: Using ep0 maxpacket: 16
[  283.378154][ T6055] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.382973][ T6055] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.386202][ T6055] usb 1-1: config 0 interface 0 has no altsetting 0
[  283.388491][ T6055] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  283.392596][ T6055] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.396999][ T6055] usb 1-1: config 0 descriptor??
[  283.673950][ T5240] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  283.678888][ T5240] Bluetooth: hci2: Injecting HCI hardware error event
[  283.685001][ T5852] Bluetooth: hci2: hardware error 0x00
[  283.806007][ T6055] apple 0003:05AC:0247.000C: unexpected long global item
[  283.811451][ T6055] apple 0003:05AC:0247.000C: parse failed
[  283.813917][ T6055] apple 0003:05AC:0247.000C: probe with driver apple failed with error -22
[  284.005738][ T6055] usb 1-1: USB disconnect, device number 26
[  284.145403][T11322] fuse: Bad value for 'fd'
[  284.844309][ T5894] gspca_ov534_9: reg_r err -71
[  285.031249][ T5240] Bluetooth: hci1: command 0x0406 tx timeout
[  285.037234][ T7609] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  285.040001][ T7609] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  285.132510][ T5894] gspca_ov534_9: Unknown sensor 0000
[  285.132581][ T5894] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  285.146663][ T5894] usb 5-1: USB disconnect, device number 8
[  285.217704][T11334] gre1: entered promiscuous mode
[  285.694908][T11347] loop4: detected capacity change from 0 to 32768
[  285.733475][T11347] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[  285.754401][ T5852] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  285.979213][T11366] fuse: Bad value for 'fd'
[  286.063732][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'.
[  286.197542][T11360] loop0: detected capacity change from 0 to 32768
[  286.379440][T11384] loop4: detected capacity change from 0 to 512
[  286.414272][T11360] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  286.414272][T11360] 
[  286.416989][T11384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  286.430127][T11360] ERROR: (device loop0): remounting filesystem as read-only
[  286.435850][T11360] ialloc: diAlloc returned -5!
[  286.447327][T11384] EXT4-fs (loop4): 1 truncate cleaned up
[  286.457725][T11384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.505783][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.676579][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'.
[  286.680022][T11401] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2034'.
[  286.687702][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'.
[  287.327599][T11407] loop4: detected capacity change from 0 to 40427
[  287.339723][T11407] F2FS-fs (loop4): build fault injection rate: 14
[  287.342799][T11407] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  287.349204][T11407] F2FS-fs (loop4): invalid crc value
[  287.354868][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  287.365210][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  287.414638][T11407] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  287.418299][T11407] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  287.424520][T11407] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  287.446031][T11407] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  287.452468][T11407] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[  287.469563][ T8612] syz-executor: attempt to access beyond end of device
[  287.469563][ T8612] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  287.475336][ T8612] CPU: 0 UID: 0 PID: 8612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  287.475349][ T8612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.475355][ T8612] Call Trace:
[  287.475359][ T8612]  <TASK>
[  287.475371][ T8612]  dump_stack_lvl+0x189/0x250
[  287.475387][ T8612]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.475397][ T8612]  ? __pfx_queue_work_on+0x10/0x10
[  287.475406][ T8612]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  287.475419][ T8612]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  287.475436][ T8612]  f2fs_handle_critical_error+0x37c/0x540
[  287.475452][ T8612]  f2fs_write_end_io+0x886/0xb60
[  287.475470][ T8612]  __submit_merged_bio+0x27a/0x6a0
[  287.475484][ T8612]  __submit_merged_write_cond+0x255/0x530
[  287.475499][ T8612]  f2fs_write_data_pages+0x261d/0x3000
[  287.475525][ T8612]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  287.475565][ T8612]  ? is_bpf_text_address+0x26/0x2b0
[  287.475591][ T8612]  ? kernel_text_address+0xa5/0xe0
[  287.475603][ T8612]  ? __kernel_text_address+0xd/0x40
[  287.475614][ T8612]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  287.475634][ T8612]  ? stack_trace_save+0x9c/0xe0
[  287.475648][ T8612]  ? __lock_acquire+0xab9/0xd20
[  287.475668][ T8612]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  287.475676][ T8612]  do_writepages+0x32e/0x550
[  287.475694][ T8612]  ? do_raw_spin_unlock+0x4d/0x240
[  287.475707][ T8612]  filemap_fdatawrite+0x199/0x240
[  287.475718][ T8612]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  287.475753][ T8612]  ? do_raw_spin_unlock+0x4d/0x240
[  287.475765][ T8612]  f2fs_sync_dirty_inodes+0x31f/0x830
[  287.475782][ T8612]  f2fs_write_checkpoint+0x95a/0x1df0
[  287.475804][ T8612]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  287.475853][ T8612]  ? kill_f2fs_super+0x298/0x6c0
[  287.475874][ T8612]  kill_f2fs_super+0x2c3/0x6c0
[  287.475894][ T8612]  ? __pfx_kill_f2fs_super+0x10/0x10
[  287.475906][ T8612]  ? radix_tree_delete_item+0x2b6/0x400
[  287.475934][ T8612]  ? shrinker_free+0x2ce/0x3e0
[  287.475953][ T8612]  deactivate_locked_super+0xbc/0x130
[  287.475971][ T8612]  cleanup_mnt+0x425/0x4c0
[  287.475981][ T8612]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.475991][ T8612]  task_work_run+0x1d4/0x260
[  287.476003][ T8612]  ? __pfx_task_work_run+0x10/0x10
[  287.476012][ T8612]  ? __x64_sys_umount+0x122/0x160
[  287.476025][ T8612]  ? exit_to_user_mode_loop+0x40/0x110
[  287.476038][ T8612]  exit_to_user_mode_loop+0xec/0x110
[  287.476050][ T8612]  do_syscall_64+0x2bd/0x3b0
[  287.476058][ T8612]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.476065][ T8612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.476073][ T8612]  ? exc_page_fault+0x9f/0xf0
[  287.476082][ T8612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.476090][ T8612] RIP: 0033:0x7fa5ab78fed7
[  287.476099][ T8612] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  287.476107][ T8612] RSP: 002b:00007fff087f34f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  287.476117][ T8612] RAX: 0000000000000000 RBX: 00007fa5ab811c05 RCX: 00007fa5ab78fed7
[  287.476122][ T8612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff087f35b0
[  287.476127][ T8612] RBP: 00007fff087f35b0 R08: 0000000000000000 R09: 0000000000000000
[  287.476132][ T8612] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff087f4640
[  287.476138][ T8612] R13: 00007fa5ab811c05 R14: 000000000004626e R15: 00007fff087f4680
[  287.476153][ T8612]  </TASK>
[  287.476157][ T8612] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  287.594230][ T5894] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  287.751985][ T5894] usb 1-1: Using ep0 maxpacket: 8
[  287.774360][ T5894] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  287.778977][ T5894] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  287.782388][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.785404][ T5894] usb 1-1: Product: syz
[  287.787074][ T5894] usb 1-1: Manufacturer: syz
[  287.788922][ T5894] usb 1-1: SerialNumber: syz
[  287.813672][ T5894] usb 1-1: config 0 descriptor??
[  287.819031][ T5894] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  287.830707][ T5894] usb 1-1: setting power ON
[  287.833079][ T5894] dvb-usb: bulk message failed: -22 (2/0)
[  287.855198][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  287.861207][ T5894] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  287.864828][ T5894] usb 1-1: media controller created
[  287.907668][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  287.926410][T11425] tipc: Trying to set illegal importance in message
[  287.943741][ T5894] usb 1-1: selecting invalid altsetting 6
[  287.946335][ T5894] usb 1-1: digital interface selection failed (-22)
[  287.948861][ T5894] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  287.959830][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2043'.
[  287.963557][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'.
[  287.972976][ T5894] usb 1-1: setting power OFF
[  287.975077][ T5894] dvb-usb: bulk message failed: -22 (2/0)
[  287.977435][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  287.981874][ T5894] (NULL device *): no alternate interface
[  288.056726][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  288.076611][ T5894] usb 1-1: USB disconnect, device number 27
[  288.568132][T11440] netlink: 'syz.4.2048': attribute type 2 has an invalid length.
[  288.596605][T11440] sctp: [Deprecated]: syz.4.2048 (pid 11440) Use of struct sctp_assoc_value in delayed_ack socket option.
[  288.596605][T11440] Use struct sctp_sack_info instead
[  288.884125][T11442] loop0: detected capacity change from 0 to 128
[  288.890650][T11442] EXT4-fs (loop0): Test dummy encryption mode enabled
[  288.903968][T11442] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  288.912448][T11442] ext4 filesystem being mounted at /657/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  289.397267][ T5851] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  289.573624][T11457] No source specified
[  289.775878][ T5883] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  289.946505][ T5883] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[  289.949919][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.955338][ T5883] usb 1-1: config 0 has no interface number 0
[  289.963849][ T5883] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  289.987743][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.991106][ T5883] usb 1-1: Product: syz
[  289.992745][ T5883] usb 1-1: Manufacturer: syz
[  289.994544][ T5883] usb 1-1: SerialNumber: syz
[  290.006783][ T5883] usb 1-1: config 0 descriptor??
[  290.027069][T11473] netlink: 'syz.3.2063': attribute type 7 has an invalid length.
[  290.243705][ T5883] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22
[  290.262610][ T5883] usb 1-1: USB disconnect, device number 28
[  291.383963][T11507] mmap: syz.3.2078 (11507): VmData 37507072 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data.
[  294.387324][T11559] usb usb9: usbfs: process 11559 (syz.4.2098) did not claim interface 6 before use
[  294.488298][T11546] loop0: detected capacity change from 0 to 32768
[  294.509616][T11546] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  294.556919][ T5851] ocfs2: Unmounting device (7,0) on (node local)
[  294.772296][T11574] loop0: detected capacity change from 0 to 1024
[  294.844061][T11574] hfsplus: b-tree write err: -5, ino 3
[  295.090699][ T6055] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  295.244993][ T6055] usb 5-1: Using ep0 maxpacket: 8
[  295.256523][ T6055] usb 5-1: unable to get BOS descriptor or descriptor too short
[  295.265211][ T6055] usb 5-1: config 4 interface 0 has no altsetting 0
[  295.271872][ T6055] usb 5-1: string descriptor 0 read error: -22
[  295.274499][ T6055] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  295.278025][ T6055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.296591][ T6055] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  295.335511][ T6055] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  295.379320][ T6055] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  295.389002][ T6055] usb 5-1: media controller created
[  295.478887][ T6055] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  295.529217][ T6055] zl10353_read_register: readreg error (reg=127, ret==0)
[  295.602562][ T6055] usb 5-1: USB disconnect, device number 9
[  296.972699][T11626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2127'.
[  297.146838][T11643] loop4: detected capacity change from 0 to 1024
[  297.149784][T11643] EXT4-fs: inline encryption not supported
[  297.153050][T11643] EXT4-fs: Ignoring removed i_version option
[  297.155414][T11643] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  297.174413][T11643] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2135: lblock 2 mapped to illegal pblock 2 (length 1)
[  297.179127][T11643] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  297.184521][T11643] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2135: lblock 0 mapped to illegal pblock 48 (length 1)
[  297.194047][T11643] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  297.200736][T11643] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2135: Failed to acquire dquot type 0
[  297.205013][T11643] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  297.212802][T11643] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2135: mark_inode_dirty error
[  297.217363][T11643] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  297.227369][T11643] EXT4-fs (loop4): 1 orphan inode deleted
[  297.230454][T11643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.241954][  T986] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  297.252619][  T986] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  297.258701][  T986] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u10:3: Failed to release dquot type 0
[  297.291719][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.299372][ T1237] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  297.305872][ T1237] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  297.309276][ T1237] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u9:3: Failed to release dquot type 0
[  297.318376][ T8612] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  297.332850][ T8612] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  297.336289][ T8612] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  297.653181][T11678] loop4: detected capacity change from 0 to 128
[  297.914765][T11690] loop4: detected capacity change from 0 to 128
[  297.918656][T11690] EXT4-fs (loop4): Test dummy encryption mode enabled
[  297.925284][T11690] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  297.930408][T11690] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  297.952364][T11690] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.2157: checksumming directory block 0
[  297.996935][ T8612] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  298.248130][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  298.412123][   T10] usb 1-1: config 0 has an invalid interface number: 174 but max is 1
[  298.420721][   T10] usb 1-1: config 0 has an invalid interface number: 66 but max is 1
[  298.429436][   T10] usb 1-1: config 0 has no interface number 0
[  298.448027][   T10] usb 1-1: config 0 has no interface number 1
[  298.450890][   T10] usb 1-1: config 0 interface 174 has no altsetting 0
[  298.453248][   T10] usb 1-1: config 0 interface 66 has no altsetting 0
[  298.455625][   T10] usb 1-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=d2.d0
[  298.458489][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.470934][   T10] usb 1-1: config 0 descriptor??
[  298.698663][   T10] usb 1-1: string descriptor 0 read error: -71
[  298.731654][   T10] usb 1-1: USB disconnect, device number 29
[  299.314071][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'.
[  299.335176][T11720] loop4: detected capacity change from 0 to 128
[  299.499124][T11728] loop0: detected capacity change from 0 to 16
[  299.521041][T11728] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  299.525861][T11728] erofs (device loop0): mounted with root inode @ nid 36.
[  299.554964][T11728] erofs (device loop0): corrupted dir block 0 @ nid 36
[  299.598768][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'.
[  299.616510][T11730] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  299.686158][T11726] loop4: detected capacity change from 0 to 32768
[  299.692055][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'.
[  299.695708][T11734] netlink: 'syz.3.2177': attribute type 2 has an invalid length.
[  299.724617][T11726] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  299.764854][T11726] XFS (loop4): Ending clean mount
[  299.779837][T11726] XFS (loop4): Quotacheck needed: Please wait.
[  299.814256][T11748] loop0: detected capacity change from 0 to 512
[  299.822435][T11748] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  299.825289][T11748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  299.828496][T11748] EXT4-fs (loop0): orphan cleanup on readonly fs
[  299.837179][T11748] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.2180: iget: bad i_size value: 12154761577498
[  299.847192][T11748] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2180: couldn't read orphan inode 13 (err -117)
[  299.847235][T11726] XFS (loop4): Quotacheck: Done.
[  299.852067][T11748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  299.867273][T11748] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.2180: dx entry: limit 65535 != root limit 120
[  299.872522][T11748] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2180: Corrupt directory, running e2fsck is recommended
[  299.877528][T11748] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.2180: path /690/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  299.895856][ T8612] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  299.954692][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.434596][T11758] loop4: detected capacity change from 0 to 32768
[  300.454981][T11758] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  300.467201][T11758] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  300.528586][ T8612] ocfs2: Unmounting device (7,4) on (node local)
[  300.812721][T11783] syz.4.2195 (11783) used obsolete PPPIOCDETACH ioctl
[  300.909119][T11787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  301.006170][T11799] loop0: detected capacity change from 0 to 512
[  301.034026][T11799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  301.068293][T11799] EXT4-fs (loop0): 1 truncate cleaned up
[  301.072812][T11799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.116443][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.139315][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'.
[  301.194489][T11815] mmap: syz.4.2209 (11815) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  301.354025][ T7609] kernel read not supported for file /vcs (pid: 7609 comm: kworker/1:5)
[  301.407165][T11825] netlink: 'syz.0.2212': attribute type 6 has an invalid length.
[  301.410272][T11825] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2212'.
[  301.461880][T11827] netlink: 'syz.0.2213': attribute type 5 has an invalid length.
[  301.472716][T11827] ip6erspan0: entered promiscuous mode
[  303.797602][T11889] netlink: 'syz.3.2238': attribute type 1 has an invalid length.
[  303.867053][T11889] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  303.872883][T11889] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  303.928582][T11896] gretap2: entered promiscuous mode
[  303.947580][T11896] bond1: (slave gretap2): making interface the new active one
[  303.958710][T11896] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  304.303395][T11910] loop4: detected capacity change from 0 to 32768
[  304.321724][T11910] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  304.327066][T11910] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  304.354321][ T8612] ocfs2: Unmounting device (7,4) on (node local)
[  304.466626][   T10] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[  304.829802][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  304.833838][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.837423][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  304.842185][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.847276][   T10] usb 1-1: config 0 descriptor??
[  305.043061][T11944] netem: unknown loss type 0
[  305.045707][T11944] netem: change failed
[  305.100280][T11946] unknown channel width for channel at 909000KHz?
[  305.210765][ T5894] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  305.274098][   T10] logitech-djreceiver 0003:046D:C52F.000D: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.0-1/input0
[  305.382608][ T5894] usb 5-1: Using ep0 maxpacket: 8
[  305.386921][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short
[  305.391836][ T5894] usb 5-1: config 7 has an invalid descriptor of length 48, skipping remainder of the config
[  305.396032][ T5894] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 12408, setting to 64
[  305.400313][ T5894] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  305.416621][ T5894] usb 5-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  305.420459][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.427268][ T5894] usb 5-1: Product: syz
[  305.429054][ T5894] usb 5-1: Manufacturer: syz
[  305.432262][ T5894] usb 5-1: SerialNumber: syz
[  305.438163][T11962] tmpfs: Bad value for 'nr_blocks'
[  305.476080][ T5883] usb 1-1: USB disconnect, device number 30
[  305.660944][ T5894] usb 5-1: USB disconnect, device number 10
[  306.632337][T12009] loop4: detected capacity change from 0 to 512
[  306.647781][T12009] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  306.651816][T12009] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  306.664288][T12009] EXT4-fs (loop4): 1 truncate cleaned up
[  306.668023][T12009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.681195][T12009] EXT4-fs: group quota file already specified
[  306.710382][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.224422][T12016] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2292'.
[  307.280011][T12020] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2295'.
[  307.554818][T12030] trusted_key: encrypted_key: insufficient parameters specified
[  307.942937][T12024] loop4: detected capacity change from 0 to 32768
[  308.290804][ T5894] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  308.454124][ T5894] usb 1-1: config 9 has an invalid interface number: 252 but max is 0
[  308.457425][ T5894] usb 1-1: config 9 has no interface number 0
[  308.459883][ T5894] usb 1-1: config 9 interface 252 has no altsetting 0
[  308.468254][ T5894] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c
[  308.472523][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.478807][ T5894] usb 1-1: Product: syz
[  308.481604][ T5894] usb 1-1: Manufacturer: syz
[  308.485589][ T5894] usb 1-1: SerialNumber: syz
[  308.711129][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.252/input/input21
[  308.746390][ T5285] bcm5974 1-1:9.252: could not read from device
[  308.749855][T12051] loop4: detected capacity change from 0 to 8192
[  308.777750][T12051] syz.4.2308: attempt to access beyond end of device
[  308.777750][T12051] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  308.787507][ T5285] bcm5974 1-1:9.252: could not read from device
[  308.792266][ T5894] usb 1-1: USB disconnect, device number 31
[  308.794254][   T33] audit: type=1800 audit(1757603707.137:45): pid=12051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2308" name="file2" dev="loop4" ino=1048655 res=0 errno=0
[  308.798012][T12051] Buffer I/O error on dev loop4, logical block 57847, async page read
[  308.828585][T12051] syz.4.2308: attempt to access beyond end of device
[  308.828585][T12051] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  308.833839][T12051] Buffer I/O error on dev loop4, logical block 57847, async page read
[  309.571697][ T5894] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  309.732465][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.738206][ T5894] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  309.743757][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.746341][ T5894] usb 5-1: Product: syz
[  309.752726][ T5894] usb 5-1: Manufacturer: syz
[  309.754396][ T5894] usb 5-1: SerialNumber: syz
[  309.759936][ T5894] usb 5-1: config 0 descriptor??
[  309.771436][ T5894] yurex 5-1:0.0: Could not find endpoints
[  309.978311][ T5894] usb 5-1: USB disconnect, device number 11
[  311.093415][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2352'.
[  311.486146][T12174] loop4: detected capacity change from 0 to 1024
[  311.493316][ T5883] usb 1-1: new low-speed USB device number 32 using dummy_hcd
[  311.504257][T12174] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  311.518705][T12174] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  311.522798][T12174] EXT4-fs (loop4): orphan cleanup on readonly fs
[  311.526507][T12174] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.2364: Freeing blocks not in datazone - block = 0, count = 4096
[  311.536352][T12174] EXT4-fs (loop4): 1 orphan inode deleted
[  311.540105][T12174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  311.664164][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  311.667903][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.672591][ T5883] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  311.676158][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.683008][ T5883] usb 1-1: config 0 descriptor??
[  311.701769][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.101624][ T5883] hid_parser_main: 7 callbacks suppressed
[  312.101643][ T5883] glorious 0003:258A:0036.000E: unknown main item tag 0x1
[  312.108904][ T5883] glorious 0003:258A:0036.000E: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.0-1/input0
[  312.279352][T12200] loop4: detected capacity change from 0 to 512
[  312.285862][T12200] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  312.293351][T12200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  312.296800][T12200] System zones: 1-12
[  312.301686][ T5883] usb 1-1: USB disconnect, device number 32
[  312.309674][T12200] 
[  312.317636][T12200] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2374: corrupted in-inode xattr: e_value size too large
[  312.330946][T12200] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2374: couldn't read orphan inode 15 (err -117)
[  312.337313][T12200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.357324][T12200] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2374: Unrecognised inode hash code 4
[  312.363619][T12200] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2374: Corrupt directory, running e2fsck is recommended
[  312.368944][T12200] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2374: Unrecognised inode hash code 4
[  312.373349][T12200] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2374: Corrupt directory, running e2fsck is recommended
[  312.400306][ T8612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.824264][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2381'.
[  312.863000][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2381'.
[  312.867511][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  312.873246][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  312.877907][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  312.886585][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  312.980345][T12223] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  313.062216][T12224] comedi comedi3: pcl818: I/O port conflict (0x4f27,16)
[  313.065216][T12224] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  313.069845][T12224] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  313.073410][T12224] CPU: 0 UID: 0 PID: 12224 Comm: syz.0.2383 Not tainted syzkaller #0 PREEMPT(full) 
[  313.077786][T12224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  313.081772][T12224] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  313.083908][T12224] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 d8 35 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 d8 35 f9 4d 8b 24 24 48 83 c3
[  313.091311][T12224] RSP: 0018:ffffc90006e679f8 EFLAGS: 00010206
[  313.093592][T12224] RAX: 0000000000000005 RBX: ffff888034304a80 RCX: 0000000000080000
[  313.096589][T12224] RDX: ffffc90003e11000 RSI: 000000000000098d RDI: 000000000000098e
[  313.099688][T12224] RBP: 0000000000000001 R08: ffff8881063dc12f R09: 1ffff11020c7b825
[  313.102702][T12224] R10: dffffc0000000000 R11: ffffffff88ed23d0 R12: 0000000000000028
[  313.105741][T12224] R13: dffffc0000000000 R14: ffff8881063dc000 R15: dffffc0000000000
[  313.108729][T12224] FS:  00007f0e9300d6c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  313.112212][T12224] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  313.114770][T12224] CR2: 0000001b32a21ff8 CR3: 0000000122122000 CR4: 00000000000006f0
[  313.117908][T12224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  313.120897][T12224] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  313.123894][T12224] Call Trace:
[  313.125173][T12224]  <TASK>
[  313.126308][T12224]  pcl818_detach+0x66/0xd0
[  313.128041][T12224]  comedi_device_detach_locked+0x178/0x750
[  313.130356][T12224]  comedi_device_attach+0x5d4/0x720
[  313.132403][T12224]  comedi_unlocked_ioctl+0x5ff/0x1020
[  313.134516][T12224]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  313.136883][T12224]  ? __lock_acquire+0xab9/0xd20
[  313.138783][T12224]  ? __fget_files+0x2a/0x420
[  313.140678][T12224]  ? __fget_files+0x2a/0x420
[  313.142503][T12224]  ? __fget_files+0x3a0/0x420
[  313.144298][T12224]  ? __fget_files+0x2a/0x420
[  313.146182][T12224]  ? bpf_lsm_file_ioctl+0x9/0x20
[  313.148211][T12224]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  313.150518][T12224]  __se_sys_ioctl+0xfc/0x170
[  313.152376][T12224]  do_syscall_64+0xfa/0x3b0
[  313.154156][T12224]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.156139][T12224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.158503][T12224]  ? exc_page_fault+0x9f/0xf0
[  313.160347][T12224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.162607][T12224] RIP: 0033:0x7f0e9218eba9
[  313.164333][T12224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.171582][T12224] RSP: 002b:00007f0e9300d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  313.174772][T12224] RAX: ffffffffffffffda RBX: 00007f0e923d5fa0 RCX: 00007f0e9218eba9
[  313.177758][T12224] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  313.180878][T12224] RBP: 00007f0e92211e19 R08: 0000000000000000 R09: 0000000000000000
[  313.183866][T12224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.186844][T12224] R13: 00007f0e923d6038 R14: 00007f0e923d5fa0 R15: 00007fff208564c8
[  313.189786][T12224]  </TASK>
[  313.190950][T12224] Modules linked in:
[  313.192971][T12224] ---[ end trace 0000000000000000 ]---
[  313.201610][T12224] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  313.203952][T12224] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 d8 35 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 d8 35 f9 4d 8b 24 24 48 83 c3
[  313.212268][T12224] RSP: 0018:ffffc90006e679f8 EFLAGS: 00010206
[  313.214791][T12224] RAX: 0000000000000005 RBX: ffff888034304a80 RCX: 0000000000080000
[  313.218038][T12224] RDX: ffffc90003e11000 RSI: 000000000000098d RDI: 000000000000098e
[  313.221397][T12224] RBP: 0000000000000001 R08: ffff8881063dc12f R09: 1ffff11020c7b825
[  313.224692][T12224] R10: dffffc0000000000 R11: ffffffff88ed23d0 R12: 0000000000000028
[  313.227994][T12224] R13: dffffc0000000000 R14: ffff8881063dc000 R15: dffffc0000000000
[  313.231943][T12224] FS:  00007f0e9300d6c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  313.235526][T12224] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  313.238185][T12224] CR2: 0000001b32a21ff8 CR3: 0000000122122000 CR4: 00000000000006f0
[  313.241657][T12224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  313.244852][T12224] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  313.247993][T12224] Kernel panic - not syncing: Fatal exception
[  313.251115][T12224] Kernel Offset: disabled
[  313.252917][T12224] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:15:11  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001b21 RDI=0000000000001b22 RBP=00000000000003f8 RSP=ffffc90006e67190
R8 =ffff888021038237 R9 =1ffff11004207046 R10=dffffc0000000000 R11=ffffffff854f7000
R12=dffffc0000000000 R13=ffffffff99b008d2 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f707c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0e9300d6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32a21ff8 CR3=0000000122122000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa5ab812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffc90006587ee8 RCX=1ffff92000cb0e01 RDX=ffffffff904231dc
RSI=0000000000000002 RDI=ffffffff8be33920 RBP=1ffff92000cb0eba RSP=ffffc900065874f8
R8 =0000000000000007 R9 =0000000000000000 R10=ffffc90006587618 R11=ffffffff81ac3cb0
R12=ffffc90006588000 R13=1ffff92000cb0ebb R14=ffffc900065875c8 R15=ffffc90006580000
RIP=ffffffff8172cc46 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558f5d8500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558f5f35c8 CR3=000000011ecc0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc1a8612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
