last executing test programs:

16.674566979s ago: executing program 3 (id=1273):
iopl(0x3)
r0 = syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r0, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0})

16.342483836s ago: executing program 3 (id=1276):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

16.14734255s ago: executing program 3 (id=1279):
unshare(0x480)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r0, &(0x7f00000003c0), 0x0}, 0x20)

15.894873863s ago: executing program 3 (id=1283):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

15.296803651s ago: executing program 3 (id=1294):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r1, 0x349fe7506ca93f77, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x40)

14.576403696s ago: executing program 3 (id=1303):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94)

14.38122368s ago: executing program 32 (id=1303):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94)

6.1996462s ago: executing program 2 (id=1402):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2)

4.974952s ago: executing program 2 (id=1415):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x64000)

4.557723442s ago: executing program 1 (id=1419):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x4000)

4.048797807s ago: executing program 2 (id=1421):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0)

3.969828893s ago: executing program 2 (id=1422):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
read(r0, &(0x7f0000000080)=""/101, 0x65)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

3.735167539s ago: executing program 2 (id=1424):
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)

3.064792043s ago: executing program 2 (id=1430):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

2.770430549s ago: executing program 1 (id=1433):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4010)

2.152176003s ago: executing program 0 (id=1438):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1.940401763s ago: executing program 0 (id=1440):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x101040)
readv(r0, &(0x7f0000000600)=[{&(0x7f0000000680)=""/192, 0xc0}], 0x61)
ioctl$EVIOCGABS20(r0, 0x40044591, 0x0)

1.832665153s ago: executing program 1 (id=1441):
r0 = eventfd(0x2)
ppoll(&(0x7f0000000000)=[{r0, 0x1040}], 0x1, 0x0, 0x0, 0x0)
read$eventfd(r0, &(0x7f00000012c0), 0x8)

1.696561857s ago: executing program 0 (id=1443):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x5c25, 0x3, 0x1, 0x0, 0x2, 0x7, 0xc, 0x7, 0x7ffd, 0xfe, 0x2, 0x1, 0x200004, 0x403, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x100, 0xb27, 0x0, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]})

1.468834305s ago: executing program 0 (id=1445):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x89}, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)

1.300835844s ago: executing program 0 (id=1446):
r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==")
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff0ff447cd9caded4abf65767e9dbbd7b5841a8ce3eae5cb5abfd7d4fb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e0000000000000000000000b5ff5bb6b1fa869800651587af", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480))
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

1.300692093s ago: executing program 4 (id=1447):
r0 = socket$phonet(0x23, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10)
ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000140)=0x2)

1.163813398s ago: executing program 4 (id=1448):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x24, 0x0, 0x0)

904.79974ms ago: executing program 4 (id=1449):
io_setup(0x4, &(0x7f0000000600)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x8, 0x0, r1, 0x0}])

840.887418ms ago: executing program 1 (id=1450):
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)={0x100004, 0x1, 0x100000}, 0x47)

618.186136ms ago: executing program 4 (id=1451):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x0, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x2f, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]})

499.176973ms ago: executing program 1 (id=1452):
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}, {0x1, 0xe65b}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000006c0)=[0xd, 0x7f, 0x7, 0x9c, 0x9])

208.791829ms ago: executing program 4 (id=1453):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x17, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

208.503429ms ago: executing program 1 (id=1454):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000002400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',barrier,nls=iso8859-15,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x20, 0x6fe, &(0x7f0000000c00)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
rename(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='./file0\x00')

24.249435ms ago: executing program 0 (id=1455):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@umask={'umask', 0x3d, 0x80}}, {@part={'part', 0x3d, 0x9}}, {@codepage={'codepage', 0x3d, 'cp855'}}, {@type={'type', 0x3d, "9d4b9598"}}, {@type}, {@umask={'umask', 0x3d, 0x100}}, {@gid}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x34a, &(0x7f0000000c40)="$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")

0s ago: executing program 4 (id=1456):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]})
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 4-1: new full-speed USB device number 3 using dummy_hcd
[   94.936674][   T43] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[   94.959631][ T6493] BTRFS info (device loop1): rebuilding free space tree
[   95.111631][ T6493] BTRFS info (device loop1): checking UUID tree
[   95.156991][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.192967][    T9] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[   95.222894][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.242316][    T9] usb 4-1: Product: syz
[   95.246919][    T9] usb 4-1: Manufacturer: syz
[   95.257028][    T9] usb 4-1: SerialNumber: syz
[   95.274500][    T9] usb 4-1: config 0 descriptor??
[   95.364439][ T5762] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.441184][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[   95.518752][    T9] cdc_subset: probe of 4-1:0.0 failed with error -22
[   95.590433][ T6523] loop2: detected capacity change from 0 to 32768
[   95.654943][ T6523] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   95.741170][ T5804] usb 4-1: USB disconnect, device number 3
[   95.856571][ T6523] XFS (loop2): Ending clean mount
[   95.989115][ T6546] loop0: detected capacity change from 0 to 64
[   96.039749][ T5763] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   96.177319][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'.
[   96.794810][ T5804] IPVS: starting estimator thread 0...
[   96.909300][ T6571] IPVS: using max 20 ests per chain, 48000 per kthread
[   96.938959][ T6575] QAT: Invalid ioctl 21531
[   97.080516][ T6556] loop2: detected capacity change from 0 to 32768
[   97.152155][ T6579] loop3: detected capacity change from 0 to 256
[   97.211356][ T6579] FAT-fs (loop3): Directory bread(block 64) failed
[   97.229946][ T6579] FAT-fs (loop3): Directory bread(block 65) failed
[   97.252872][ T6579] FAT-fs (loop3): Directory bread(block 66) failed
[   97.280935][ T6579] FAT-fs (loop3): Directory bread(block 67) failed
[   97.299305][ T6579] FAT-fs (loop3): Directory bread(block 68) failed
[   97.309605][ T6579] FAT-fs (loop3): Directory bread(block 69) failed
[   97.320916][ T6579] FAT-fs (loop3): Directory bread(block 70) failed
[   97.338804][ T6579] FAT-fs (loop3): Directory bread(block 71) failed
[   97.382563][ T6579] FAT-fs (loop3): Directory bread(block 72) failed
[   97.402535][ T6579] FAT-fs (loop3): Directory bread(block 73) failed
[   97.431004][ T6583] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[   97.895830][ T6592] netlink: 'syz.3.326': attribute type 29 has an invalid length.
[   98.547747][ T6605] loop0: detected capacity change from 0 to 2048
[   98.573141][ T6594] loop1: detected capacity change from 0 to 32768
[   98.620765][ T6605] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   98.637235][ T6590] loop2: detected capacity change from 0 to 32768
[   98.661793][ T6594] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   98.671077][ T6605] UDF-fs: Scanning with blocksize 512 failed
[   98.688140][ T6590] gfs2: fsid=localflocks: Trying to join cluster "lock_nolock", "localflocks"
[   98.708443][ T6590] gfs2: fsid=localflocks: Now mounting FS (format 1801)...
[   98.748950][ T6605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.842628][ T6619] netlink: 'syz.3.335': attribute type 2 has an invalid length.
[   98.856221][ T6590] gfs2: fsid=localflocks.s: journal 0 mapped with 5 extents in 0ms
[   98.926818][ T6605] overlayfs: upper fs needs to support d_type.
[   98.979435][ T6605] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   98.996080][ T6594] XFS (loop1): Ending clean mount
[   99.004868][ T6605] overlayfs: failed to set xattr on upper
[   99.020028][ T6594] XFS (loop1): Quotacheck needed: Please wait.
[   99.021815][ T6605] overlayfs: ...falling back to redirect_dir=nofollow.
[   99.045594][ T6590] gfs2: fsid=localflocks.s: first mount done, others may mount
[   99.057390][ T6605] overlayfs: ...falling back to index=off.
[   99.063269][ T6605] overlayfs: ...falling back to uuid=null.
[   99.160619][ T6594] XFS (loop1): Quotacheck: Done.
[   99.512470][ T5762] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  100.609597][ T6662] loop1: detected capacity change from 0 to 64
[  101.211055][   T28] audit: type=1326 audit(1773153614.176:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.1.367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05fcf9c799 code=0x0
[  101.496072][ T6695] loop2: detected capacity change from 0 to 64
[  101.620289][ T6688] loop0: detected capacity change from 0 to 32768
[  101.633867][ T6688] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.369 (6688)
[  101.637966][ T6671] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  101.696877][ T6688] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  101.726315][ T6688] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  101.774797][ T6688] BTRFS info (device loop0): enabling auto defrag
[  101.781307][ T6688] BTRFS info (device loop0): use no compression
[  101.818135][ T6688] BTRFS info (device loop0): max_inline at 4096
[  101.824450][ T6688] BTRFS info (device loop0): using free space tree
[  101.866369][ T6700] loop3: detected capacity change from 0 to 2048
[  101.999945][ T6688] BTRFS info (device loop0): enabling ssd optimizations
[  102.000393][ T6700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.024640][ T6688] BTRFS info (device loop0): auto enabling async discard
[  102.268933][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.435596][ T6734] loop2: detected capacity change from 0 to 512
[  102.466188][ T6734] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  102.496600][ T6731] loop3: detected capacity change from 0 to 1024
[  102.543448][ T6734] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.380: invalid indirect mapped block 4294967295 (level 0)
[  102.561860][ T5760] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  102.586662][ T6734] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.380: invalid indirect mapped block 4294967295 (level 1)
[  102.628871][ T6737] loop1: detected capacity change from 0 to 256
[  102.642057][ T6737] exfat: Deprecated parameter 'utf8'
[  102.660168][ T6734] EXT4-fs (loop2): 1 orphan inode deleted
[  102.687667][ T6738] hfsplus: xattr exists yet
[  102.717281][ T6734] EXT4-fs (loop2): 1 truncate cleaned up
[  102.740597][ T6737] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  102.760839][ T6734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.761245][   T11] hfsplus: b-tree write err: -5, ino 8
[  103.042762][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.182726][ T6745] loop0: detected capacity change from 0 to 256
[  103.585363][ T6758] loop1: detected capacity change from 0 to 4096
[  103.598875][ T6758] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  103.774908][    T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  103.991023][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  104.014767][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.044735][    T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  104.064194][ T6758] ntfs3: Cannot use different iocharset when remounting!
[  104.072540][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.098806][    T8] usb 1-1: config 0 descriptor??
[  104.558493][    T8] kye 0003:0458:5005.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  104.603028][    T8] kye 0003:0458:5005.0006: hidraw0: USB HID v10.00 Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0
[  104.635994][    T8] kye 0003:0458:5005.0006: tablet-enabling feature report not found
[  104.674665][    T8] kye 0003:0458:5005.0006: tablet enabling failed
[  104.830957][    T8] usb 1-1: USB disconnect, device number 5
[  105.017098][ T6783] loop3: detected capacity change from 0 to 32768
[  105.057215][ T6802] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  105.082631][ T6783] JBD2: Ignoring recovery information on journal
[  105.111981][ T6783] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  105.295088][ T5761] ocfs2: Unmounting device (7,3) on (node local)
[  105.675249][ T6819] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  105.742171][ T6822] loop3: detected capacity change from 0 to 136
[  105.784787][ T5804] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  105.974637][ T5804] usb 1-1: Using ep0 maxpacket: 32
[  105.989023][ T5804] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  106.014647][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.040971][ T5804] usb 1-1: Product: syz
[  106.054709][ T5804] usb 1-1: Manufacturer: syz
[  106.056387][ T6831] loop2: detected capacity change from 0 to 16
[  106.059402][ T5804] usb 1-1: SerialNumber: syz
[  106.092211][ T5804] usb 1-1: config 0 descriptor??
[  106.094968][ T6831] erofs: (device loop2): mounted with root inode @ nid 36.
[  106.117224][ T5804] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  106.144975][ T5804] dvb-usb: bulk message failed: -22 (2/0)
[  106.164003][ T6831] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  106.166102][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  106.194860][ T6831] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  106.205163][ T5804] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  106.213209][ T5804] usb 1-1: media controller created
[  106.218298][ T6831] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  106.248348][ T6831] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  106.260074][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  106.274739][ T6831] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  106.292488][ T6833] loop3: detected capacity change from 0 to 4096
[  106.311048][ T5804] usb 1-1: selecting invalid altsetting 7
[  106.329924][ T6831] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  106.339187][ T6833] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  106.351301][ T6831] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  106.356225][ T5804] cxusb: set interface failed
[  106.361338][ T6831] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  106.376507][ T6831] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  106.386773][ T5804] dvb-usb: bulk message failed: -22 (1/0)
[  106.438189][   T28] audit: type=1800 audit(1773153619.396:42): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.424" name="file2" dev="loop2" ino=89 res=0 errno=0
[  106.492206][   T28] audit: type=1800 audit(1773153619.456:43): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.425" name="file1" dev="loop3" ino=30 res=0 errno=0
[  106.552341][ T5804] DVB: Unable to find symbol lgdt330x_attach()
[  106.576262][ T5804] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  106.671790][ T6840] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  106.749756][ T6840] CIFS mount error: No usable UNC path provided in device string!
[  106.749756][ T6840] 
[  106.754184][ T6825] loop1: detected capacity change from 0 to 40427
[  106.763625][ T6840] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  106.784999][ T5804] rc_core: IR keymap rc-dvico-portable not found
[  106.792551][ T6825] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  106.807484][ T5804] Registered IR keymap rc-empty
[  106.816824][ T5804] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  106.854397][ T6825] F2FS-fs (loop1): invalid crc value
[  106.875720][ T5804] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12
[  106.901184][ T6825] F2FS-fs (loop1): Found nat_bits in checkpoint
[  106.925508][ T5804] dvb-usb: schedule remote query interval to 100 msecs.
[  106.942304][ T5804] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  106.985658][ T5804] usb 1-1: USB disconnect, device number 6
[  107.166400][ T5804] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  107.169174][ T6825] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  107.736452][ T6865] batman_adv: The newly added mac address (aa:00:00:00:00:00) already exists on: batadv_slave_1
[  107.762012][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.796908][ T6865] netlink: 'syz.2.438': attribute type 2 has an invalid length.
[  107.835879][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.438'.
[  107.878970][ T6865] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  107.919599][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'.
[  108.112276][ T6875] loop0: detected capacity change from 0 to 64
[  108.166314][ T6859] loop3: detected capacity change from 0 to 32768
[  108.210327][ T6859] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.366194][ T6859] XFS (loop3): Ending clean mount
[  108.384808][   T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  108.404284][ T6859] XFS (loop3): Quotacheck needed: Please wait.
[  108.507363][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'.
[  108.531736][ T6859] XFS (loop3): Quotacheck: Done.
[  108.548985][ T6893] loop0: detected capacity change from 0 to 128
[  108.594696][   T23] usb 3-1: Using ep0 maxpacket: 8
[  108.604894][ T6893] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  108.639025][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.659104][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.673611][ T6893] hpfs: filesystem error: improperly stopped
[  108.684982][   T23] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  108.694146][ T6893] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  108.712015][ T6893] hpfs: You really don't want any checks? You are crazy...
[  108.712017][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.725284][   T23] usb 3-1: config 0 descriptor??
[  108.733802][ T5761] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.743724][ T6893] hpfs: Code page index out of array
[  108.750201][ T6893] hpfs: code page support is disabled
[  108.761222][ T6893] hpfs: hpfs_map_4sectors(): unaligned read
[  108.773325][ T6893] hpfs: hpfs_map_4sectors(): unaligned read
[  108.780615][ T6893] hpfs: filesystem error: unable to find root dir
[  108.886158][ T6893] hpfs: hpfs_map_4sectors(): unaligned read
[  109.133352][ T6901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.452'.
[  109.288345][ T6903] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  109.302985][ T6903] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  109.312082][ T6903] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  109.324981][ T6903] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  109.331520][ T6903] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  109.338875][ T6903] comedi comedi3: 8255: I/O port conflict (0x12,4)
[  109.345831][ T6903] comedi comedi3: 8255: I/O port conflict (0x11,4)
[  109.353351][ T6903] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  109.373983][ T6903] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  109.382329][ T6903] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  109.391554][   T23] usb 3-1: string descriptor 0 read error: -71
[  109.398123][ T6903] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  109.406516][   T23] uclogic 0003:5543:0045.0007: failed retrieving string descriptor #200: -71
[  109.424731][   T23] uclogic 0003:5543:0045.0007: failed retrieving pen parameters: -71
[  109.432841][   T23] uclogic 0003:5543:0045.0007: failed probing pen v2 parameters: -71
[  109.441491][ T6903] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  109.455044][ T6903] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  109.461532][ T6903] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  109.474972][   T23] uclogic 0003:5543:0045.0007: failed probing parameters: -71
[  109.482551][   T23] uclogic: probe of 0003:5543:0045.0007 failed with error -71
[  109.484794][ T6903] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  109.497593][   T23] usb 3-1: USB disconnect, device number 4
[  109.526054][ T6903] comedi comedi3: 8255: I/O port conflict (0x400009,4)
[  109.533127][ T6903] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  109.604705][ T6903] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  109.611286][ T6903] comedi comedi3: 8255: I/O port conflict (0x80,4)
[  109.653306][ T6903] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  109.664897][ T6903] comedi comedi3: 8255: I/O port conflict (0x2000e67,4)
[  109.671948][ T6903] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  109.694693][ T6903] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  110.345735][ T6929] loop3: detected capacity change from 0 to 64
[  110.629363][ T6932] loop0: detected capacity change from 0 to 8192
[  110.655425][ T6932] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  110.669110][ T6932] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  110.683298][ T6932] REISERFS (device loop0): using ordered data mode
[  110.694504][ T6932] reiserfs: using flush barriers
[  110.709594][ T6932] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  110.726588][ T6932] REISERFS (device loop0): checking transaction log (loop0)
[  110.754659][ T6932] REISERFS (device loop0): Using r5 hash to sort names
[  110.764415][ T6932] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  110.779686][ T6932] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  111.003291][ T6947] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  111.645885][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'.
[  111.665184][   T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  111.770152][ T6952] loop3: detected capacity change from 0 to 32768
[  111.795754][ T6952] 
[  111.795754][ T6952]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  111.795754][ T6952] 
[  111.844443][   T28] audit: type=1800 audit(1773153624.806:44): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.477" name="file1" dev="loop3" ino=4 res=0 errno=0
[  111.900254][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.963249][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.014784][   T23] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[  112.023879][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.089922][   T23] usb 3-1: config 0 descriptor??
[  112.125998][ T6952] ERROR: (device loop3): xtSearch: stack overrun!
[  112.125998][ T6952] 
[  112.174282][ T6952] ERROR: (device loop3): xtSearch: stack overrun!
[  112.174282][ T6952] 
[  112.184946][ T6952] xtLookup: xtSearch returned -5
[  112.192333][ T6952] ERROR: (device loop3): xtTruncate: stack overrun!
[  112.192333][ T6952] 
[  112.260610][ T1028] 
[  112.260610][ T1028]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.260610][ T1028] 
[  112.272639][ T1028] 
[  112.272639][ T1028]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.272639][ T1028] 
[  112.283733][ T1028] 
[  112.283733][ T1028]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.283733][ T1028] 
[  112.301293][ T1028] 
[  112.301293][ T1028]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.301293][ T1028] 
[  112.343454][ T1028] JFS: metapage_get_blocks failed
[  112.350627][ T1028] 
[  112.350627][ T1028]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.350627][ T1028] 
[  112.367223][ T5761] 
[  112.367223][ T5761]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.367223][ T5761] 
[  112.397971][ T5761] 
[  112.397971][ T5761]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.397971][ T5761] 
[  112.548493][   T23] hid (null): report_id 0 is invalid
[  112.563929][   T23] stadia 0003:18D1:9400.0008: report_id 0 is invalid
[  112.579723][   T23] stadia 0003:18D1:9400.0008: item 0 0 1 8 parsing failed
[  112.597689][   T23] stadia 0003:18D1:9400.0008: parse failed
[  112.610296][   T23] stadia: probe of 0003:18D1:9400.0008 failed with error -22
[  112.622498][ T6988] syz.3.491 uses obsolete (PF_INET,SOCK_PACKET)
[  112.736423][ T6990] loop3: detected capacity change from 0 to 256
[  112.748335][ T6990] exfat: Deprecated parameter 'namecase'
[  112.775546][ T6990] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  112.828203][    T9] usb 3-1: USB disconnect, device number 5
[  112.993585][ T6986] loop1: detected capacity change from 0 to 32768
[  113.047221][ T6986] JBD2: Ignoring recovery information on journal
[  113.091926][ T6986] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  113.153612][ T6998] loop0: detected capacity change from 0 to 512
[  113.205651][ T6998] EXT4-fs: Ignoring removed orlov option
[  113.232130][ T6998] EXT4-fs: Ignoring removed bh option
[  113.272531][ T6998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  113.284530][ T5762] ocfs2: Unmounting device (7,1) on (node local)
[  113.315295][ T6998] EXT4-fs (loop0): orphan cleanup on readonly fs
[  113.376490][ T6998] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.497: bg 0: block 248: padding at end of block bitmap is not set
[  113.473094][ T6998] Quota error (device loop0): write_blk: dquota write failed
[  113.514904][ T6998] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  113.538597][ T6998] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.497: Failed to acquire dquot type 1
[  113.596179][ T6998] EXT4-fs (loop0): 1 truncate cleaned up
[  113.616396][ T6998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  113.763860][ T6998] EXT4-fs: Ignoring removed orlov option
[  113.791203][ T6998] EXT4-fs: Ignoring removed bh option
[  113.818694][ T6998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  113.850141][ T6998] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  113.923397][ T6998] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.497: Abort forced by user
[  113.959975][ T6998] EXT4-fs (loop0): Remounting filesystem read-only
[  113.975088][ T6998] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  113.997700][ T6998] ext4 filesystem being remounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.021181][ T7019] loop1: detected capacity change from 0 to 8
[  114.031673][ T7020] loop3: detected capacity change from 0 to 512
[  114.096338][ T7020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  114.150965][ T7020] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002]
[  114.195614][ T5760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.217813][ T7020] EXT4-fs (loop3): orphan cleanup on readonly fs
[  114.246690][ T7020] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  114.299267][ T7010] loop2: detected capacity change from 0 to 32768
[  114.327032][ T7020] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  114.349202][ T7020] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.505: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  114.408920][ T7020] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.505: couldn't read orphan inode 13 (err -117)
[  114.451651][ T7020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  114.675122][ T7020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  114.733139][ T7020] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  114.748737][ T7020] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2842c09c, mo2=0002]
[  114.779782][ T7020] System zones: 0-2, 18-18, 34-34
[  114.795069][ T7020] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  115.018738][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.189410][ T7045] loop3: detected capacity change from 0 to 512
[  115.215824][ T7045] EXT4-fs: Ignoring removed orlov option
[  115.248689][ T7045] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  115.283579][ T7045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  115.314537][ T7045] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.517: corrupted in-inode xattr: e_value size too large
[  115.335092][ T7045] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.517: couldn't read orphan inode 15 (err -117)
[  115.389179][ T7045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.591714][ T7038] loop1: detected capacity change from 0 to 32768
[  115.608709][ T7038] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.514 (7038)
[  115.613716][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.648147][ T7038] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  115.657986][ T7054] loop0: detected capacity change from 0 to 128
[  115.662775][ T7038] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  115.677166][ T7038] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  115.690552][ T7054] VFS: Found a Xenix FS (block size = 1024) on device loop0
[  115.709367][ T7038] BTRFS info (device loop1): use zstd compression, level 3
[  115.726112][ T7038] BTRFS info (device loop1): using free space tree
[  115.868161][ T5760] sysv_free_block: flc_count > flc_size
[  115.884877][ T7038] BTRFS info (device loop1): enabling ssd optimizations
[  115.899974][ T5760] sysv_free_block: flc_count > flc_size
[  115.920811][ T5760] sysv_free_block: flc_count > flc_size
[  115.926584][ T7038] BTRFS info (device loop1): auto enabling async discard
[  115.948630][ T5760] sysv_free_block: flc_count > flc_size
[  115.954233][ T5760] sysv_free_block: flc_count > flc_size
[  116.013255][ T5760] sysv_free_block: flc_count > flc_size
[  116.019263][ T5760] sysv_free_block: flc_count > flc_size
[  116.025796][ T5760] sysv_free_block: flc_count > flc_size
[  116.031369][ T5760] sysv_free_block: flc_count > flc_size
[  116.047797][ T5760] sysv_free_block: flc_count > flc_size
[  116.054810][ T5760] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  116.333500][ T7082] erofs: (device loop2): mounted with root inode @ nid 36.
[  116.393544][ T5762] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  117.226127][ T7103] set_capacity_and_notify: 2 callbacks suppressed
[  117.226141][ T7103] loop2: detected capacity change from 0 to 1024
[  117.338082][ T7085] loop0: detected capacity change from 0 to 32768
[  117.379834][ T7103] hfsplus: trying to free free bnode 0(1)
[  117.512693][ T1143] hfsplus: b-tree write err: -5, ino 25
[  117.522859][ T1143] hfsplus: b-tree write err: -5, ino 4
[  117.535808][ T1143] hfsplus: b-tree write err: -5, ino 2
[  117.559084][ T1143] hfsplus: b-tree write err: -5, ino 26
[  117.867527][ T7097] loop1: detected capacity change from 0 to 32768
[  117.907508][ T7097] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.925138][ T5764] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  117.985624][ T7097] XFS (loop1): Ending clean mount
[  118.011082][ T7097] XFS (loop1): syz.1.534 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  118.102449][ T5762] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.128815][ T5764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  118.154770][ T5764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  118.186902][ T5764] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  118.217921][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  118.232355][ T5764] usb 4-1: SerialNumber: syz
[  118.242996][ T5764] usb 4-1: bad CDC descriptors
[  118.260922][ T5764] usb-storage 4-1:1.0: USB Mass Storage device detected
[  118.317181][ T5764] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  118.355575][ T7130] loop0: detected capacity change from 0 to 4096
[  118.371315][ T5764] scsi host1: usb-storage 4-1:1.0
[  118.500344][ T7139] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.563875][ T7141] IPVS: Error connecting to the multicast addr
[  118.892550][ T7149] loop0: detected capacity change from 0 to 24
[  119.500089][ T7170] loop1: detected capacity change from 0 to 4096
[  119.520208][ T7170] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  119.539054][ T7170] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856e018, mo2=0002]
[  119.547779][ T7170] System zones: 0-5
[  119.563353][ T7170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.648307][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.720004][ T5764] usb 4-1: USB disconnect, device number 4
[  119.856335][ T7167] loop0: detected capacity change from 0 to 32768
[  119.937804][   T28] audit: type=1800 audit(1773153632.896:45): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.561" name="file1" dev="loop0" ino=4 res=0 errno=0
[  119.947384][ T7167] ERROR: (device loop0): dbAllocBits: leaf page corrupt
[  119.947384][ T7167] 
[  120.003543][ T7167] ERROR: (device loop0): remounting filesystem as read-only
[  120.012555][ T7167] syz.0.561: attempt to access beyond end of device
[  120.012555][ T7167] loop0: rw=34817, sector=4680704, nr_sectors = 968 limit=32768
[  120.038800][  T112] blkno = 8ed80, nblocks = 79
[  120.043654][  T112] ERROR: (device loop0): dbFree: block to be freed is outside the map
[  120.043654][  T112] 
[  120.368502][ T7184] loop0: detected capacity change from 0 to 4096
[  120.377633][ T7184] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  120.471862][ T7188] loop5: detected capacity change from 0 to 4096
[  121.406431][ T7223] Bluetooth: MGMT ver 1.22
[  121.707388][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.591'.
[  121.790349][ T7235] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  121.834672][ T5764] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  121.889792][ T7213] loop0: detected capacity change from 0 to 32768
[  121.948745][   T28] audit: type=1800 audit(1773153634.916:46): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.582" name="file1" dev="loop0" ino=7 res=0 errno=0
[  122.044288][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  122.065092][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.105903][ T5764] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  122.127393][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.136849][ T7243] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0)
[  122.141136][ T5764] usb 4-1: config 0 descriptor??
[  122.384703][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  122.495409][ T5804] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  122.511652][ T7247] loop0: detected capacity change from 0 to 512
[  122.521004][ T7247] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  122.532835][ T7247] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  122.549062][ T7247] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.598: Invalid block bitmap block 0 in block_group 0
[  122.569648][ T7247] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Corrupt filesystem
[  122.573170][ T5764] cherry 0003:046A:0027.0009: unknown main item tag 0x0
[  122.586245][    T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  122.586273][    T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  122.586292][    T9] usb 2-1: config 220 has no interface number 2
[  122.586359][    T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  122.586386][    T9] usb 2-1: config 220 interface 0 has no altsetting 0
[  122.586404][    T9] usb 2-1: config 220 interface 76 has no altsetting 0
[  122.586423][    T9] usb 2-1: config 220 interface 1 has no altsetting 0
[  122.588613][    T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  122.618228][ T7247] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.598: attempt to clear invalid blocks 983261 len 1
[  122.631714][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.654642][ T5764] cherry 0003:046A:0027.0009: unknown main item tag 0x0
[  122.654675][ T5764] cherry 0003:046A:0027.0009: unknown main item tag 0x0
[  122.654699][ T5764] cherry 0003:046A:0027.0009: unknown main item tag 0x0
[  122.673545][    T9] usb 2-1: Product: syz
[  122.688575][ T5764] cherry 0003:046A:0027.0009: unknown main item tag 0x0
[  122.710626][ T7247] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.598: Invalid inode table block 0 in block_group 0
[  122.711485][    T9] usb 2-1: Manufacturer: syz
[  122.728150][ T5804] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  122.732635][    T9] usb 2-1: SerialNumber: syz
[  122.741500][ T5804] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.750697][ T7247] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  122.755561][ T5764] cherry 0003:046A:0027.0009: unknown main item tag 0x0
[  122.774976][ T7247] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  122.783755][ T5804] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.796474][ T7247] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.598: Invalid inode table block 0 in block_group 0
[  122.798036][ T5804] usb 3-1: config 0 interface 0 has no altsetting 0
[  122.819584][ T5764] cherry 0003:046A:0027.0009: unknown main item tag 0x0
[  122.819642][ T7247] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  122.829017][ T5764] cherry 0003:046A:0027.0009: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.3-1/input0
[  122.843913][ T7247] EXT4-fs error (device loop0): ext4_truncate:4294: inode #11: comm syz.0.598: mark_inode_dirty error
[  122.861018][ T5804] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  122.872238][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.886335][ T5764] usb 4-1: USB disconnect, device number 5
[  122.899126][ T5804] usb 3-1: config 0 descriptor??
[  122.900518][ T7247] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  122.938949][ T7247] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.598: Invalid inode table block 0 in block_group 0
[  122.952571][ T7247] EXT4-fs (loop0): 1 truncate cleaned up
[  122.960803][ T7247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.000409][ T7249] fido_id[7249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  123.033590][    T9] usb 2-1: selecting invalid altsetting 0
[  123.047832][    T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  123.054257][    T9] usb 2-1: No valid video chain found.
[  123.103164][    T9] usb 2-1: selecting invalid altsetting 0
[  123.116944][    T9] usbtest: probe of 2-1:220.1 failed with error -22
[  123.132993][ T7247] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.598: Invalid inode bitmap blk 0 in block_group 0
[  123.151052][    T9] usb 2-1: USB disconnect, device number 6
[  123.209551][ T5760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.352513][ T5804] holtek 0003:1241:5015.000A: invalid report_count 1684669245
[  123.362023][ T5804] holtek 0003:1241:5015.000A: item 0 4 1 9 parsing failed
[  123.375967][ T5804] holtek 0003:1241:5015.000A: parse failed
[  123.395483][ T5804] holtek: probe of 0003:1241:5015.000A failed with error -22
[  123.634156][ T5804] usb 3-1: USB disconnect, device number 6
[  123.875433][   T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  123.886004][ T7270] tipc: Started in network mode
[  123.891730][ T7270] tipc: Node identity 4246, cluster identity 4711
[  123.903694][ T7270] tipc: Node number set to 16966
[  124.019974][ T7272] netlink: 'syz.1.610': attribute type 3 has an invalid length.
[  124.067137][   T27] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  124.113116][   T27] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x89 has invalid wMaxPacketSize 0
[  124.145303][   T27] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  124.175462][   T27] usb 1-1: config 0 interface 0 has no altsetting 0
[  124.195795][   T27] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00
[  124.222030][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.231315][ T7279] loop3: detected capacity change from 0 to 512
[  124.246192][ T7279] EXT4-fs: Ignoring removed i_version option
[  124.256769][   T27] usb 1-1: config 0 descriptor??
[  124.273603][ T7279] EXT4-fs: Ignoring removed bh option
[  124.308318][ T7282] netlink: 92 bytes leftover after parsing attributes in process `syz.2.615'.
[  124.380987][ T7279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.446354][ T7279] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.702992][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.756335][   T27] wacom 0003:056A:0028.000B: Unknown device_type for 'HID 056a:0028'. Assuming pen.
[  124.835141][   T27] wacom 0003:056A:0028.000B: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.0-1/input0
[  124.879817][   T27] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0028.000B/input/input13
[  125.015247][   T27] usb 1-1: USB disconnect, device number 7
[  125.048557][ T7308] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  125.089627][ T7306] loop1: detected capacity change from 0 to 512
[  125.127684][ T7306] EXT4-fs: Ignoring removed orlov option
[  125.166309][ T7306] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.218480][ T7306] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.625: corrupted in-inode xattr: e_value size too large
[  125.241643][ T7306] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.625: couldn't read orphan inode 15 (err -117)
[  125.256192][ T7306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.318613][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.351807][ T7315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  125.506614][ T5774] Bluetooth: hci3: link tx timeout
[  125.513051][ T5774] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.424222][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.648'.
[  126.444818][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  126.634727][    T9] usb 2-1: Using ep0 maxpacket: 16
[  126.647011][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.669775][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  126.690633][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  126.708546][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  126.718710][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  126.735274][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  126.754743][    T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  126.763636][    T9] usb 2-1: Manufacturer: syz
[  126.795864][    T9] usb 2-1: config 0 descriptor??
[  126.832566][ T7345] loop2: detected capacity change from 0 to 40427
[  126.850501][ T7345] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  126.869334][ T7345] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  126.881626][ T7345] F2FS-fs (loop2): invalid crc value
[  126.916102][ T7345] F2FS-fs (loop2): Found nat_bits in checkpoint
[  127.045864][ T7345] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  127.073515][ T7345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  127.165354][    T9] rc_core: IR keymap rc-hauppauge not found
[  127.172416][    T9] Registered IR keymap rc-empty
[  127.206387][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.222684][   T28] audit: type=1800 audit(1773153640.186:47): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.642" name="file1" dev="loop2" ino=10 res=0 errno=0
[  127.244709][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.285867][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  127.314161][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16
[  127.324357][ T7365] loop0: detected capacity change from 0 to 40427
[  127.345112][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.383522][ T7365] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  127.392481][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.410343][ T7365] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  127.444794][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.465409][ T7365] F2FS-fs (loop0): Found nat_bits in checkpoint
[  127.496711][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.542461][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.584951][ T5768] Bluetooth: hci3: command 0x0406 tx timeout
[  127.594806][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.605169][ T7365] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  127.612399][ T7365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  127.666883][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.708597][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.764750][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.815214][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  127.859162][    T9] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  127.884669][    T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  127.911668][    T9] usb 2-1: USB disconnect, device number 7
[  127.993932][ T7383] loop3: detected capacity change from 0 to 2048
[  128.047873][ T7383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.185866][ T7383] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  128.300027][ T7387] loop0: detected capacity change from 0 to 4096
[  128.327634][ T7387] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  128.463982][ T7387] ntfs: volume version 3.1.
[  128.643937][ T7387] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775.  You might want to try to use the mount option nls=utf8.
[  128.709617][ T7387] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  129.099739][ T7415] netlink: 'syz.3.670': attribute type 16 has an invalid length.
[  129.125725][ T7415] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.670'.
[  129.144252][ T7409] loop0: detected capacity change from 0 to 4096
[  129.185148][ T7409] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  129.281153][ T7419] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  129.326395][ T7409] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  129.378154][ T7409] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  129.538194][ T7428] loop1: detected capacity change from 0 to 8
[  129.544396][ T7409] overlayfs: upper fs does not support tmpfile.
[  129.577276][ T7409] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  129.598774][ T7409] ntfs3: loop0: ino=1b, "file0" attr_set_size
[  129.619153][ T7409] overlayfs: failed to set uuid (/file0, err=-2); falling back to uuid=null.
[  129.644982][ T7409] overlayfs: failed to get origin (-5)
[  129.664963][ T7409] overlayfs: failed to verify origin (/, ino=5, err=-5)
[  129.709118][ T7409] overlayfs: failed to verify upper root origin
[  130.014197][ T7440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.680'.
[  130.097326][ T5822] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  130.334684][ T5822] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  130.343496][ T5822] usb 2-1: config 1 has no interface number 0
[  130.364680][ T5822] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  130.394963][ T5822] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.417918][ T5822] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  130.427266][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.442293][ T5822] usb 2-1: Product: syz
[  130.461034][ T5822] usb 2-1: Manufacturer: syz
[  130.476733][ T5822] usb 2-1: SerialNumber: syz
[  130.495461][ T7434] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  130.509433][ T5822] usb 2-1: Expected 3 endpoints, found: 2
[  130.579107][   T27] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  130.912141][ T7445] loop0: detected capacity change from 0 to 40427
[  130.937653][ T7445] F2FS-fs (loop0): Corrupted extension count (4294901797 + 1 > 64)
[  130.953579][ T7445] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  130.988895][ T7445] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  131.001508][ T7445] F2FS-fs (loop0): invalid crc value
[  131.019197][ T7445] F2FS-fs (loop0): Found nat_bits in checkpoint
[  131.055704][ T7455] loop3: detected capacity change from 0 to 32768
[  131.122272][   T28] audit: type=1800 audit(1773153644.086:48): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.689" name="file1" dev="loop3" ino=7 res=0 errno=0
[  131.159225][ T7445] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  131.212274][ T7445] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  131.354802][ T5764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  131.388080][ T7445] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  131.890542][ T7471] loop2: detected capacity change from 0 to 32768
[  132.484180][ T7500] loop2: detected capacity change from 0 to 128
[  132.620967][ T7500] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 322)
[  132.682959][ T7500] FAT-fs (loop2): Filesystem has been set read-only
[  132.714100][ T7500] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 322)
[  132.748117][ T7500] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 322)
[  132.848107][ T5804] usb 2-1: USB disconnect, device number 8
[  132.851066][ T7510] loop3: detected capacity change from 0 to 16
[  132.878140][ T7511] loop0: detected capacity change from 0 to 512
[  132.893855][ T7510] erofs: (device loop3): mounted with root inode @ nid 36.
[  132.961786][ T7511] EXT4-fs (loop0): 1 truncate cleaned up
[  133.022836][ T7511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.098141][ T7515] loop1: detected capacity change from 0 to 2048
[  133.100343][ T5760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.164893][ T7517] sctp: [Deprecated]: syz.2.716 (pid 7517) Use of int in max_burst socket option.
[  133.164893][ T7517] Use struct sctp_assoc_value instead
[  133.168614][ T7515] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.201394][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  133.212555][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.611182][ T7530] loop2: detected capacity change from 0 to 512
[  133.644467][ T7530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  133.742455][ T7530] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  133.772455][ T7530] EXT4-fs (loop2): 1 truncate cleaned up
[  133.780649][ T7530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.848783][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.726'.
[  133.858062][ T7538] netlink: 7 bytes leftover after parsing attributes in process `syz.0.726'.
[  133.916773][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.048852][ T7540] loop1: detected capacity change from 0 to 4096
[  134.057978][ T7546] ubi31: attaching mtd0
[  134.075834][ T7546] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80)
[  134.079375][ T7540] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  134.155316][ T7540] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  134.185381][ T7540] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  134.203439][ T7540] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  134.241022][ T7540] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  134.279141][ T7540] ntfs: volume version 3.1.
[  134.310881][ T7540] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota.
[  134.341896][ T7540] ntfs: (device loop1): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  134.408270][ T7558] loop3: detected capacity change from 0 to 64
[  135.340786][ T7565] loop2: detected capacity change from 0 to 32768
[  135.432888][ T7565] JBD2: Ignoring recovery information on journal
[  135.649180][ T7565] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  135.783871][ T7565] (syz.2.738,7565,0):ocfs2_remount:630 ERROR: Cannot change data mode on remount
[  135.911087][ T5763] ocfs2: Unmounting device (7,2) on (node local)
[  136.644973][ T7630] loop2: detected capacity change from 0 to 64
[  137.387344][ T7654] loop3: detected capacity change from 0 to 2048
[  137.412792][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  137.431897][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'.
[  137.436089][ T7654] Alternate GPT is invalid, using primary GPT.
[  137.444636][ T7657] netlink: 'syz.0.769': attribute type 13 has an invalid length.
[  137.464769][ T7657] netlink: 'syz.0.769': attribute type 11 has an invalid length.
[  137.476147][ T7658] loop2: detected capacity change from 0 to 2048
[  137.476217][ T7654]  loop3: p2 p3 p7
[  137.500505][ T7658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.649945][ T5136] Alternate GPT is invalid, using primary GPT.
[  137.657387][ T5136]  loop3: p2 p3 p7
[  137.693306][ T7660] loop2: detected capacity change from 0 to 1024
[  137.856166][ T7660] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  137.893629][ T7660] hfsplus: xattr search failed
[  137.919455][ T7660] hfsplus: can't free extent
[  137.972858][ T7641] loop1: detected capacity change from 0 to 32768
[  138.017285][ T7641] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.761 (7641)
[  138.054221][ T5753] udevd[5753]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  138.083739][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  138.089023][ T6196] udevd[6196]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  138.108071][ T7641] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  138.128272][ T7666] loop0: detected capacity change from 0 to 256
[  138.145434][ T7641] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  138.165866][ T7641] BTRFS info (device loop1): force zlib compression, level 3
[  138.173289][ T7641] BTRFS info (device loop1): force clearing of disk cache
[  138.182337][ T7668] loop3: detected capacity change from 0 to 512
[  138.191082][ T7666] exfat: Deprecated parameter 'utf8'
[  138.212210][ T7666] exfat: Deprecated parameter 'utf8'
[  138.233352][ T7666] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  138.247800][ T7641] BTRFS info (device loop1): setting nodatasum
[  138.279165][ T7641] BTRFS info (device loop1): allowing degraded mounts
[  138.304353][ T7641] BTRFS info (device loop1): enabling disk space caching
[  138.326827][ T7668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.351951][ T6196] udevd[6196]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  138.362677][ T5753] udevd[5753]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  138.364658][ T7641] BTRFS info (device loop1): disk space caching is enabled
[  138.399832][ T5755] udevd[5755]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  138.410245][ T7668] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.498467][ T7679] loop2: detected capacity change from 0 to 16
[  138.543399][ T7668] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.775: corrupted xattr block 6: invalid header
[  138.574528][ T7679] erofs: (device loop2): mounted with root inode @ nid 36.
[  138.677770][ T7641] BTRFS info (device loop1): auto enabling async discard
[  138.699981][   T28] audit: type=1800 audit(1773153651.666:49): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.776" name="file1" dev="loop2" ino=86 res=0 errno=0
[  138.730558][ T7641] BTRFS info (device loop1): rebuilding free space tree
[  138.789784][ T7641] BTRFS info (device loop1): disabling free space tree
[  138.815044][ T7641] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.866314][ T7641] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.910555][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.048355][ T7641] BTRFS info (device loop1): balance: start -f
[  139.080659][ T7641] BTRFS info (device loop1): balance: ended with status: 0
[  139.252756][ T7700] loop3: detected capacity change from 0 to 2048
[  139.281338][ T5762] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  139.305388][ T7700] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  139.329583][ T7704] loop2: detected capacity change from 0 to 128
[  139.344894][ T7700] NILFS (loop3): mounting unchecked fs
[  139.403655][ T7700] NILFS (loop3): recovery complete
[  139.428138][ T5753] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 13 /dev/loop1 scanned by udevd (5753)
[  139.452115][ T7707] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.465888][ T7704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  139.501898][ T7704] hpfs: filesystem error: improperly stopped
[  139.522624][ T7704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  139.530475][ T7704] hpfs: You really don't want any checks? You are crazy...
[  139.538258][ T7704] hpfs: hpfs_map_sector(): read error
[  139.543645][ T7704] hpfs: code page support is disabled
[  139.549304][ T7704] hpfs: hpfs_map_4sectors(): unaligned read
[  139.555446][ T7704] hpfs: hpfs_map_4sectors(): unaligned read
[  139.562196][ T7704] hpfs: filesystem error: unable to find root dir
[  139.698508][ T7713] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  139.744691][ T7713] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  139.794904][ T7713] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  139.827813][ T7713] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  139.834293][ T7713] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  139.894700][ T7713] comedi comedi3: 8255: I/O port conflict (0x12,4)
[  139.911337][ T7713] comedi comedi3: 8255: I/O port conflict (0x11,4)
[  139.949810][ T7713] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  139.982766][ T7713] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  140.003112][ T7713] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  140.024392][ T7713] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  140.039694][ T7713] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  140.057492][ T7713] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  140.086118][ T7713] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  140.104863][ T7713] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  140.127778][ T7722] loop3: detected capacity change from 0 to 8
[  140.133979][ T7713] comedi comedi3: 8255: I/O port conflict (0x400009,4)
[  140.151401][ T7713] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  140.177867][ T7713] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  140.206204][ T7713] comedi comedi3: 8255: I/O port conflict (0x80,4)
[  140.214802][ T5804] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  140.222777][ T7713] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  140.244779][ T7713] comedi comedi3: 8255: I/O port conflict (0x2000e67,4)
[  140.251813][ T7713] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  140.289894][ T7713] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  140.298847][ T7722] SQUASHFS error: Unable to read directory block [2c0:35]
[  140.417806][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.444840][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.479552][ T5804] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  140.506698][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.547666][ T5804] usb 1-1: config 0 descriptor??
[  140.993415][ T5804] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[  141.181489][ T5804] arvo 0003:1E7D:30D4.000C: couldn't init struct arvo_device
[  141.205357][ T5804] arvo 0003:1E7D:30D4.000C: couldn't install keyboard
[  141.214690][ T5804] arvo: probe of 0003:1E7D:30D4.000C failed with error -71
[  141.256981][ T5804] usb 1-1: USB disconnect, device number 8
[  141.363158][ T7762] loop1: detected capacity change from 0 to 64
[  142.470163][ T7785] loop1: detected capacity change from 0 to 32768
[  142.497970][ T7798] loop3: detected capacity change from 0 to 64
[  142.515478][ T7785] 
[  142.515478][ T7785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  142.515478][ T7785] 
[  142.597415][   T28] audit: type=1800 audit(1773153655.566:50): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.818" name="file1" dev="loop1" ino=4 res=0 errno=0
[  142.868763][ T7808] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  142.881988][ T7785] ERROR: (device loop1): xtSearch: stack overrun!
[  142.881988][ T7785] 
[  142.965760][ T7785] ERROR: (device loop1): xtSearch: stack overrun!
[  142.965760][ T7785] 
[  142.974421][ T7785] xtLookup: xtSearch returned -5
[  143.013173][ T7785] ERROR: (device loop1): xtTruncate: stack overrun!
[  143.013173][ T7785] 
[  143.130061][ T1143] 
[  143.130061][ T1143]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.130061][ T1143] 
[  143.185433][ T1143] 
[  143.185433][ T1143]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.185433][ T1143] 
[  143.215851][ T1143] 
[  143.215851][ T1143]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.215851][ T1143] 
[  143.237410][ T1143] 
[  143.237410][ T1143]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.237410][ T1143] 
[  143.254690][ T7817] netlink: 52 bytes leftover after parsing attributes in process `syz.3.834'.
[  143.281540][ T1143] JFS: metapage_get_blocks failed
[  143.287379][ T1143] 
[  143.287379][ T1143]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.287379][ T1143] 
[  143.306319][ T5762] 
[  143.306319][ T5762]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.306319][ T5762] 
[  143.364957][ T5762] 
[  143.364957][ T5762]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.364957][ T5762] 
[  143.454049][ T7821] loop0: detected capacity change from 0 to 256
[  143.455600][ T7807] loop2: detected capacity change from 0 to 32768
[  143.488772][ T7807] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.830 (7807)
[  143.510250][ T7821] exfat: Deprecated parameter 'namecase'
[  143.558601][ T7821] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  143.571827][ T7807] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  143.602913][ T7807] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  143.621094][ T7807] BTRFS info (device loop2): using free space tree
[  143.811228][ T7807] BTRFS info (device loop2): enabling ssd optimizations
[  143.828536][ T7844] loop1: detected capacity change from 0 to 256
[  143.840982][ T7807] BTRFS info (device loop2): auto enabling async discard
[  143.904366][ T7844] FAT-fs (loop1): Directory bread(block 64) failed
[  143.941207][ T7844] FAT-fs (loop1): Directory bread(block 65) failed
[  143.962980][ T7844] FAT-fs (loop1): Directory bread(block 66) failed
[  143.979265][ T7844] FAT-fs (loop1): Directory bread(block 67) failed
[  144.004181][ T7844] FAT-fs (loop1): Directory bread(block 68) failed
[  144.017771][ T7846] loop0: detected capacity change from 0 to 64
[  144.028534][ T7844] FAT-fs (loop1): Directory bread(block 69) failed
[  144.054374][ T7844] FAT-fs (loop1): Directory bread(block 70) failed
[  144.071633][ T7844] FAT-fs (loop1): Directory bread(block 71) failed
[  144.085908][ T7844] FAT-fs (loop1): Directory bread(block 72) failed
[  144.092796][ T7844] FAT-fs (loop1): Directory bread(block 73) failed
[  144.101095][ T5763] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  145.077232][ T7866] loop2: detected capacity change from 0 to 4096
[  145.200662][ T7873] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.582237][ T7885] netlink: 'syz.1.860': attribute type 10 has an invalid length.
[  145.590244][ T7885] netlink: 256 bytes leftover after parsing attributes in process `syz.1.860'.
[  146.016352][ T7900] loop2: detected capacity change from 0 to 512
[  146.028364][ T7901] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  146.053557][ T7900] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  146.096426][ T7900] EXT4-fs (loop2): 1 truncate cleaned up
[  146.106253][ T7900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.237663][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.354025][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.869'.
[  146.369574][ T7916] loop2: detected capacity change from 0 to 256
[  146.370484][ T7916] exfat: Deprecated parameter 'utf8'
[  146.370531][ T7916] exfat: Deprecated parameter 'namecase'
[  146.370555][ T7916] exfat: Deprecated parameter 'utf8'
[  146.421228][ T7916] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  146.502095][ T7916] syz.2.870: attempt to access beyond end of device
[  146.502095][ T7916] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  146.518282][ T7916] syz.2.870: attempt to access beyond end of device
[  146.518282][ T7916] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  146.520662][ T7919] loop3: detected capacity change from 0 to 128
[  146.523245][ T7916] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[  146.524374][   T28] audit: type=1800 audit(1773153659.486:51): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.870" name="file1" dev="loop2" ino=1048658 res=0 errno=0
[  146.540514][ T7919] VFS: Found a Xenix FS (block size = 1024) on device loop3
[  146.544450][ T7916] syz.2.870: attempt to access beyond end of device
[  146.544450][ T7916] loop2: rw=2049, sector=34359738488, nr_sectors = 5 limit=256
[  146.680038][ T5761] sysv_free_block: flc_count > flc_size
[  146.680082][ T5761] sysv_free_block: flc_count > flc_size
[  146.680091][ T5761] sysv_free_block: flc_count > flc_size
[  146.680099][ T5761] sysv_free_block: flc_count > flc_size
[  146.680107][ T5761] sysv_free_block: flc_count > flc_size
[  146.680114][ T5761] sysv_free_block: flc_count > flc_size
[  146.680121][ T5761] sysv_free_block: flc_count > flc_size
[  146.680129][ T5761] sysv_free_block: flc_count > flc_size
[  146.680137][ T5761] sysv_free_block: flc_count > flc_size
[  146.680144][ T5761] sysv_free_block: flc_count > flc_size
[  146.680837][ T5761] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  147.364728][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  147.388368][ T7951] loop3: detected capacity change from 0 to 64
[  147.564722][    T9] usb 3-1: Using ep0 maxpacket: 32
[  147.582546][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.608488][    T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.651897][    T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.696126][    T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  147.715079][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  147.727597][ T7962] loop0: detected capacity change from 0 to 512
[  147.732840][    T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  147.739322][ T7963] exfat: Deprecated parameter 'utf8'
[  147.782536][ T7963] exfat: Deprecated parameter 'utf8'
[  147.784635][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.794619][ T7963] exfat: Deprecated parameter 'namecase'
[  147.823200][ T7962] EXT4-fs (loop0): 1 truncate cleaned up
[  147.844229][ T7967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  147.879481][ T7962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.906692][ T7963] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  147.929200][    T9] usb 3-1: config 0 descriptor??
[  147.957034][ T5760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.033999][ T7967] EXT4-fs (loop3): 1 truncate cleaned up
[  148.056640][ T7967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.243003][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.379394][    T9] hid-thrustmaster 0003:044F:B65D.000D: unbalanced delimiter at end of report description
[  148.412930][    T9] hid-thrustmaster 0003:044F:B65D.000D: parse failed with error -22
[  148.443030][    T9] hid-thrustmaster: probe of 0003:044F:B65D.000D failed with error -22
[  148.489106][ T7973] ntfs3: loop0: Failed to load $Extend (-22).
[  148.522568][ T7973] ntfs3: loop0: Failed to initialize $Extend.
[  148.646408][ T7973] ntfs3: loop0: ino=5, "/" directory corrupted
[  148.671692][ T7973] ntfs3: loop0: ino=5, "/" directory corrupted
[  148.695957][    T9] usb 3-1: USB disconnect, device number 7
[  148.704955][ T5804] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  148.712465][ T7983] set_capacity_and_notify: 3 callbacks suppressed
[  148.712478][ T7983] loop1: detected capacity change from 0 to 2048
[  148.714205][ T7983] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  148.800665][ T7984] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.855963][ T7983] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  148.892852][ T7983] Remounting filesystem read-only
[  148.906345][ T5768] Bluetooth: hci1: hardware error 0x09
[  148.914745][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.931515][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.982159][ T5804] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  149.034764][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.076188][ T5804] usb 4-1: config 0 descriptor??
[  149.205178][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'.
[  149.350966][ T7999] loop1: detected capacity change from 0 to 2048
[  149.377584][ T7999] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  149.389483][ T7999] NILFS (loop1): mounting unchecked fs
[  149.428043][ T7999] NILFS (loop1): recovery complete
[  149.451256][ T8004] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.597267][ T5804] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x2
[  149.617458][ T8010] netlink: 'syz.2.902': attribute type 2 has an invalid length.
[  149.630558][ T5804] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  149.762481][ T5804] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device
[  149.780833][ T5804] pyra 0003:1E7D:2CF6.000E: couldn't install mouse
[  149.815708][ T5804] pyra: probe of 0003:1E7D:2CF6.000E failed with error -71
[  149.850005][ T5804] usb 4-1: USB disconnect, device number 6
[  150.026957][ T8023] loop0: detected capacity change from 0 to 256
[  150.054201][ T8023] exfat: Deprecated parameter 'utf8'
[  150.060199][ T8023] exfat: Deprecated parameter 'utf8'
[  150.066436][ T8023] exfat: Deprecated parameter 'utf8'
[  150.102777][ T8023] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  150.211217][ T8029] loop1: detected capacity change from 0 to 256
[  150.321049][ T8029] FAT-fs (loop1): Directory bread(block 64) failed
[  150.345218][ T8029] FAT-fs (loop1): Directory bread(block 65) failed
[  150.352235][ T8029] FAT-fs (loop1): Directory bread(block 66) failed
[  150.363528][ T8029] FAT-fs (loop1): Directory bread(block 67) failed
[  150.370550][ T8029] FAT-fs (loop1): Directory bread(block 68) failed
[  150.378929][ T8029] FAT-fs (loop1): Directory bread(block 69) failed
[  150.405018][ T8029] FAT-fs (loop1): Directory bread(block 70) failed
[  150.412366][ T8029] FAT-fs (loop1): Directory bread(block 71) failed
[  150.429267][ T8029] FAT-fs (loop1): Directory bread(block 72) failed
[  150.443791][ T8029] FAT-fs (loop1): Directory bread(block 73) failed
[  150.573085][ T8039] loop3: detected capacity change from 0 to 512
[  150.597073][ T8035] loop0: detected capacity change from 0 to 4096
[  150.624702][ T8039] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  150.652915][ T8039] EXT4-fs (loop3): invalid journal inode
[  150.688977][ T8039] EXT4-fs (loop3): can't get journal size
[  150.701831][ T8042] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.745900][ T8039] EXT4-fs (loop3): 1 truncate cleaned up
[  150.752757][ T8039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.908636][   T28] audit: type=1804 audit(1773153663.876:52): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.915" name="/newroot/231/file0/file1" dev="loop3" ino=15 res=1 errno=0
[  150.937636][ T8046] wireguard: wg2: Could not create IPv4 socket
[  150.956164][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.034829][ T5768] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  151.073591][ T8050] loop0: detected capacity change from 0 to 128
[  151.104091][ T8048] loop2: detected capacity change from 0 to 4096
[  151.392182][ T8060] loop3: detected capacity change from 0 to 64
[  151.406160][ T8061] loop0: detected capacity change from 0 to 512
[  151.419567][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[  151.442568][ T8061] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  151.567598][   T28] audit: type=1800 audit(1773153664.536:53): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.925" name="file1" dev="loop3" ino=5 res=0 errno=0
[  151.596872][ T8061] EXT4-fs (loop0): 1 truncate cleaned up
[  151.603764][ T8061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.687346][ T8060] syz.3.925 (8060) used greatest stack depth: 20816 bytes left
[  151.802690][ T5760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.093824][ T8077] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  152.272926][ T8084] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  152.289946][ T8084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.457074][ T8090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  152.536106][ T8090] EXT4-fs (loop3): 1 truncate cleaned up
[  152.542998][ T8090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.729127][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.824417][ T8092] (syz.1.938,8092,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  152.852820][ T8092] (syz.1.938,8092,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  152.897947][ T8092] JBD2: Ignoring recovery information on journal
[  152.931382][ T8092] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  153.242834][ T5762] ocfs2: Unmounting device (7,1) on (node local)
[  153.387268][ T8111] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  153.409324][ T8111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.724636][ T8117] IPVS: ip_vs_edit_dest(): server weight less than zero
[  153.803291][ T8119] set_capacity_and_notify: 6 callbacks suppressed
[  153.803306][ T8119] loop0: detected capacity change from 0 to 1764
[  153.906246][ T8119] iso9660: Corrupted directory entry in block 2 of inode 1920
[  154.088416][ T8135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.956'.
[  154.554506][ T8148] loop0: detected capacity change from 0 to 256
[  155.310346][ T8165] loop1: detected capacity change from 0 to 4096
[  155.430896][ T8165] ntfs: volume version 3.1.
[  155.711466][ T8182] netlink: 68 bytes leftover after parsing attributes in process `syz.3.978'.
[  155.740056][ T8182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.978'.
[  155.758760][ T8182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.978'.
[  155.988379][ T8189] loop3: detected capacity change from 0 to 512
[  156.047841][ T8189] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  156.086491][ T8189] System zones: 0-2, 18-18, 34-35
[  156.152742][ T8189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.213346][ T8189] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.696596][ T8205] program syz.2.988 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.697607][ T8185] loop0: detected capacity change from 0 to 40427
[  156.736171][ T8185] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[  156.743774][ T8185] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  156.791340][ T8185] F2FS-fs (loop0): invalid crc value
[  156.844633][ T8185] F2FS-fs (loop0): Found nat_bits in checkpoint
[  157.029151][ T8185] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  157.039765][ T8216] loop2: detected capacity change from 0 to 64
[  157.046016][ T8185] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  157.150837][ T8185] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  157.354480][ T8220] loop2: detected capacity change from 0 to 256
[  157.362512][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.527174][ T8220] FAT-fs (loop2): Directory bread(block 64) failed
[  157.533756][ T8220] FAT-fs (loop2): Directory bread(block 65) failed
[  157.555969][ T8220] FAT-fs (loop2): Directory bread(block 66) failed
[  157.562545][ T8220] FAT-fs (loop2): Directory bread(block 67) failed
[  157.608168][ T8220] FAT-fs (loop2): Directory bread(block 68) failed
[  157.637763][ T8220] FAT-fs (loop2): Directory bread(block 69) failed
[  157.644449][ T8220] FAT-fs (loop2): Directory bread(block 70) failed
[  157.658107][ T8220] FAT-fs (loop2): Directory bread(block 71) failed
[  157.668297][ T8220] FAT-fs (loop2): Directory bread(block 72) failed
[  157.675925][ T8220] FAT-fs (loop2): Directory bread(block 73) failed
[  157.953406][ T8229] loop3: detected capacity change from 0 to 2048
[  158.041323][ T8229] Alternate GPT is invalid, using primary GPT.
[  158.074806][ T8229]  loop3: p2 p3 p7
[  158.089037][ T8231] loop0: detected capacity change from 0 to 2048
[  158.502569][   T28] audit: type=1326 audit(1773153671.456:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.1000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8525d9c799 code=0x0
[  158.543447][ T5754] udevd[5754]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  158.549511][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  158.567315][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  159.014780][ T5822] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  159.192428][ T8246] loop3: detected capacity change from 0 to 32768
[  159.207046][ T5822] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  159.224677][ T5822] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  159.253063][ T5822] usb 3-1: config 220 has no interface number 2
[  159.271386][ T5822] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  159.311476][ T5822] usb 3-1: config 220 interface 0 has no altsetting 0
[  159.338921][ T5822] usb 3-1: config 220 interface 76 has no altsetting 0
[  159.383354][ T5822] usb 3-1: config 220 interface 1 has no altsetting 0
[  159.419032][ T5822] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  159.437965][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.447436][ T5822] usb 3-1: Product: syz
[  159.451837][ T5822] usb 3-1: Manufacturer: syz
[  159.465071][ T5822] usb 3-1: SerialNumber: syz
[  159.697836][ T5822] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  159.724918][ T5822] usb 3-1: No valid video chain found.
[  159.747078][ T5822] usb 3-1: selecting invalid altsetting 0
[  159.792545][ T5822] usb 3-1: selecting invalid altsetting 0
[  159.804740][ T5822] usbtest: probe of 3-1:220.1 failed with error -22
[  159.823496][ T5822] usb 3-1: USB disconnect, device number 8
[  161.304338][ T8288] loop1: detected capacity change from 0 to 32768
[  161.351774][ T8288] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  161.537926][ T8288] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  161.830224][ T5762] ocfs2: Unmounting device (7,1) on (node local)
[  161.867495][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  162.075954][    T9] usb 1-1: Using ep0 maxpacket: 16
[  162.108049][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.137220][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.177661][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  162.203104][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.233963][    T9] usb 1-1: config 0 descriptor??
[  162.675698][    T9] apple 0003:05AC:024B.000F: unknown global tag 0xe
[  162.682348][    T9] apple 0003:05AC:024B.000F: item 0 1 1 14 parsing failed
[  162.713985][    T9] apple 0003:05AC:024B.000F: parse failed
[  162.730371][    T9] apple: probe of 0003:05AC:024B.000F failed with error -22
[  162.803036][ T8316] loop2: detected capacity change from 0 to 32768
[  162.842591][ T8316] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  162.871871][    T8] usb 1-1: USB disconnect, device number 9
[  162.924974][ T8318] loop3: detected capacity change from 0 to 32768
[  162.973105][ T8318] (syz.3.1039,8318,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  162.985280][ T8316] XFS (loop2): Ending clean mount
[  163.001122][ T8318] (syz.3.1039,8318,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  163.052561][ T8316] XFS (loop2): Quotacheck needed: Please wait.
[  163.128451][ T8318] JBD2: Ignoring recovery information on journal
[  163.176206][ T8316] XFS (loop2): Quotacheck: Done.
[  163.255782][ T8318] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  163.425412][ T5763] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  163.473789][ T5761] ocfs2: Unmounting device (7,3) on (node local)
[  164.003205][ T8352] loop2: detected capacity change from 0 to 1024
[  164.022521][ T8355] CUSE: info not properly terminated
[  164.059184][ T8352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.255732][ T8342] loop1: detected capacity change from 0 to 32768
[  164.324727][ T8352] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  164.356121][   T28] audit: type=1800 audit(1773153677.316:55): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1045" name="file1" dev="loop1" ino=7 res=0 errno=0
[  164.424505][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.969885][ T8364] loop0: detected capacity change from 0 to 32768
[  165.025837][ T8364] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  165.094295][ T8395] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1066'.
[  165.183634][ T8364] XFS (loop0): Ending clean mount
[  165.215498][ T5804] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  165.230513][ T8364] XFS (loop0): Quotacheck needed: Please wait.
[  165.296248][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'.
[  165.312268][ T8364] XFS (loop0): Quotacheck: Done.
[  165.394183][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'.
[  165.454814][ T5804] usb 2-1: Using ep0 maxpacket: 16
[  165.492109][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.512266][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.512862][ T5760] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  165.534709][ T5804] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  165.554013][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.576019][ T5804] usb 2-1: config 0 descriptor??
[  165.840909][   T23] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  165.875080][   T23] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  166.021231][ T8410] fido_id[8410]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  166.054866][ T5804] hid (null): bogus close delimiter
[  166.086243][ T5804] wacom 0003:056A:0084.0011: bogus close delimiter
[  166.092850][ T5804] wacom 0003:056A:0084.0011: item 0 4 2 10 parsing failed
[  166.152569][ T5804] wacom 0003:056A:0084.0011: parse failed
[  166.175167][ T5804] wacom: probe of 0003:056A:0084.0011 failed with error -22
[  166.271328][ T5804] usb 2-1: USB disconnect, device number 9
[  166.280387][ T8417] mkiss: ax0: crc mode is auto.
[  166.302104][ T8404] loop2: detected capacity change from 0 to 32768
[  166.583088][ T8425] loop3: detected capacity change from 0 to 256
[  166.611794][ T8426] loop0: detected capacity change from 0 to 764
[  167.834201][ T8436] loop2: detected capacity change from 0 to 32768
[  167.901651][ T8436] JBD2: Ignoring recovery information on journal
[  167.998452][ T8436] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  168.111727][ T8470] loop1: detected capacity change from 0 to 4096
[  168.217176][ T5763] (syz-executor,5763,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22
[  168.246002][ T8470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.392705][ T5763] ocfs2: Unmounting device (7,2) on (node local)
[  168.437218][ T8470] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.1099: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  168.482421][ T8467] loop0: detected capacity change from 0 to 32768
[  168.529168][ T8470] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.1099: directory missing '..'
[  168.545037][ T8467] (syz.0.1098,8467,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  168.595483][ T8467] (syz.0.1098,8467,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  168.680430][ T8478] loop3: detected capacity change from 0 to 64
[  168.709132][ T8467] JBD2: Ignoring recovery information on journal
[  168.807183][ T8481] loop2: detected capacity change from 0 to 512
[  168.814343][ T8481] EXT4-fs: Ignoring removed bh option
[  168.820565][ T8467] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  168.845041][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.875897][ T8467] (syz.0.1098,8467,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  168.903155][ T8481] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  168.974179][ T8481] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  169.064710][ T8481] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1101: bg 0: block 248: padding at end of block bitmap is not set
[  169.090720][ T8481] Quota error (device loop2): write_blk: dquota write failed
[  169.098789][ T8481] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  169.111221][ T8481] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1101: Failed to acquire dquot type 1
[  169.142082][ T8481] EXT4-fs (loop2): 1 truncate cleaned up
[  169.142810][ T5760] ocfs2: Unmounting device (7,0) on (node local)
[  169.196544][ T8481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  169.423590][    T8] kernel write not supported for file /input/mice (pid: 8 comm: kworker/0:0)
[  169.445725][ T8481] EXT4-fs: Ignoring removed orlov option
[  169.451628][ T8481] EXT4-fs: Ignoring removed nobh option
[  169.471089][ T8481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  169.508787][ T8481] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0008-000000000000.
[  169.617905][ T8499] sp0: Synchronizing with TNC
[  169.633387][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  169.659075][ T8498] [U] è`
[  169.773565][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'.
[  170.134406][ T8512] loop3: detected capacity change from 0 to 8192
[  170.549051][ T8529] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  170.567872][ T8529] comedi comedi3: 8255: I/O port conflict (0x10000,4)
[  170.581035][ T8529] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  170.593358][ T8529] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  170.618953][ T8529] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  170.644896][ T8529] comedi comedi3: 8255: I/O port conflict (0x85,4)
[  170.651519][ T8529] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  170.688571][ T8529] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  170.709128][ T8529] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  170.739418][ T8529] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  170.770670][ T8529] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  170.774423][ T8538] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1129'.
[  170.794164][ T8529] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  170.810053][ T8529] comedi comedi3: 8255: I/O port conflict (0x78b4042d,4)
[  171.013606][ T8546] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1132'.
[  171.367846][ T8562] loop1: detected capacity change from 0 to 1024
[  171.412917][ T8564] loop2: detected capacity change from 0 to 1024
[  171.461993][ T8562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  171.516852][   T28] audit: type=1800 audit(1773153684.466:56): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1142" name="file1" dev="loop2" ino=2 res=0 errno=0
[  171.556045][ T8562] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.064811][ T8582] loop0: detected capacity change from 0 to 22
[  172.076342][   T11] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 6)
[  172.095286][ T8582] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  172.121177][ T8582] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  172.139962][   T11] EXT4-fs (loop1): Remounting filesystem read-only
[  172.183467][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  172.553346][ T8594] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1155'.
[  172.707640][ T8602] loop2: detected capacity change from 0 to 256
[  172.965253][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  173.051306][ T8617] loop2: detected capacity change from 0 to 256
[  173.059023][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1165'.
[  173.076221][ T8617] FAT-fs (loop2): "posix" option is obsolete, not supported now
[  173.165911][ T8619] mkiss: ax0: crc mode is auto.
[  173.194770][   T23] usb 4-1: Using ep0 maxpacket: 8
[  173.210151][   T23] usb 4-1: unable to get BOS descriptor or descriptor too short
[  173.238715][   T23] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  173.293220][   T23] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.354669][   T23] usb 4-1: config 1 interface 0 has no altsetting 0
[  173.359913][ T8623] loop1: detected capacity change from 0 to 512
[  173.371723][ T8623] EXT4-fs: Ignoring removed i_version option
[  173.394004][   T23] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  173.407862][ T8623] EXT4-fs error (device loop1): __ext4_iget:5071: inode #11: block 1: comm syz.1.1169: invalid block
[  173.410342][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.427513][   T23] usb 4-1: Product: syz
[  173.431700][   T23] usb 4-1: Manufacturer: syz
[  173.436603][   T23] usb 4-1: SerialNumber: syz
[  173.444217][ T8626] cifs: Bad value for 'port'
[  173.449623][ T8601] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  173.482809][ T8623] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1169: couldn't read orphan inode 11 (err -117)
[  173.500666][ T8623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.689900][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.739681][   T23] usb 4-1: USB disconnect, device number 7
[  174.178194][ T8652] ax25_connect(): syz.2.1182 uses autobind, please contact jreuter@yaina.de
[  174.290935][ T8655] can0: slcan on ptm0.
[  174.375579][ T8654] can0 (unregistered): slcan off ptm0.
[  175.093993][ T8692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1201'.
[  175.094981][   T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  175.132243][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'.
[  175.189523][ T8696] loop1: detected capacity change from 0 to 764
[  175.237590][ T5777] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  175.295255][   T27] usb 4-1: Using ep0 maxpacket: 16
[  175.317437][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.317468][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.317488][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  175.317526][   T27] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  175.317547][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.319890][   T27] usb 4-1: config 0 descriptor??
[  175.613012][ T8706] loop0: detected capacity change from 0 to 256
[  175.753054][   T27] microsoft 0003:045E:07DA.0012: item 0 4 0 11 parsing failed
[  175.753757][   T27] microsoft 0003:045E:07DA.0012: parse failed
[  175.753839][   T27] microsoft: probe of 0003:045E:07DA.0012 failed with error -22
[  175.851295][ T8710] loop2: detected capacity change from 0 to 4096
[  175.890210][ T8710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.951073][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.032700][ T5822] usb 4-1: USB disconnect, device number 8
[  176.045356][   T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  176.168954][ T8713] loop2: detected capacity change from 0 to 4096
[  176.177725][ T8713] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  176.211754][ T8713] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  176.234508][ T8713] ntfs3: loop2: Inode r=b is not in use!
[  176.241629][ T8713] ntfs3: loop2: Failed to load $Extend (-116).
[  176.247164][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.251735][ T8713] ntfs3: loop2: Failed to initialize $Extend.
[  176.270900][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.308058][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  176.328126][   T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  176.358490][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.380966][   T23] usb 1-1: config 0 descriptor??
[  176.751071][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'.
[  176.767066][ T8723] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1215'.
[  176.779499][ T8723] xt_time: unknown flags 0xf4
[  176.823144][   T23] kovaplus 0003:1E7D:2D50.0013: item fetching failed at offset 3/5
[  176.863779][   T23] kovaplus 0003:1E7D:2D50.0013: parse failed
[  176.885009][   T23] kovaplus: probe of 0003:1E7D:2D50.0013 failed with error -22
[  177.022044][   T23] usb 1-1: USB disconnect, device number 10
[  177.846517][ T8758] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  177.976022][   T28] audit: type=1400 audit(1773153690.936:57): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D6A pid=8765 comm="syz.3.1237"
[  178.513553][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'.
[  178.864255][ T8805] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1255'.
[  178.884699][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'.
[  178.954802][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  179.146355][    T9] usb 1-1: Using ep0 maxpacket: 16
[  179.167335][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.194754][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.213480][ T8815] loop3: detected capacity change from 0 to 256
[  179.216374][    T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  179.226660][ T8815] exfat: Deprecated parameter 'namecase'
[  179.240958][    T9] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  179.254980][    T9] usb 1-1: Manufacturer: syz
[  179.287762][    T9] usb 1-1: config 0 descriptor??
[  179.301854][ T8815] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  179.658068][ T5822] kernel write not supported for file [eventfd] (pid: 5822 comm: kworker/0:6)
[  179.752667][    T9] creative-sb0540 0003:041E:3100.0014: No inputs registered, leaving
[  179.773270][    T9] creative-sb0540 0003:041E:3100.0014: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  179.820204][ T8835] loop1: detected capacity change from 0 to 512
[  179.858212][ T8835] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1270: bg 0: block 248: padding at end of block bitmap is not set
[  179.884296][ T8835] Quota error (device loop1): write_blk: dquota write failed
[  179.904185][ T8835] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  179.947232][ T8835] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1270: Failed to acquire dquot type 1
[  179.966966][    T9] usb 1-1: USB disconnect, device number 11
[  180.007962][ T8835] EXT4-fs (loop1): 1 truncate cleaned up
[  180.046209][ T8835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.104710][ T8835] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.133975][ T8844] fido_id[8844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  180.198088][ T8835] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  180.243708][ T8835] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  180.270523][ T8835] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1270: Failed to acquire dquot type 1
[  180.351341][ T8835] syz.1.1270 (8835) used greatest stack depth: 20680 bytes left
[  180.382751][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.396368][   T11] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  180.425078][   T11] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:0: Failed to release dquot type 1
[  180.542797][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'.
[  180.612910][ T8857] netlink: 'syz.1.1277': attribute type 21 has an invalid length.
[  180.829993][ T8869] loop3: detected capacity change from 0 to 512
[  180.842685][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'.
[  180.862746][ T8868] netlink: 'syz.0.1284': attribute type 22 has an invalid length.
[  180.881063][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1284'.
[  180.882350][ T8869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.986960][ T8869] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.039028][ T8878] loop1: detected capacity change from 0 to 64
[  181.143277][ T8869] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only
[  181.351229][ T5761] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /329/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  181.400944][ T5761] EXT4-fs (loop3): Remounting filesystem read-only
[  181.481434][ T8888] loop1: detected capacity change from 0 to 4096
[  181.499981][ T8888] NILFS (loop1): invalid segment: Checksum error in segment payload
[  181.533824][ T8888] NILFS (loop1): trying rollback from an earlier position
[  181.587607][ T8888] NILFS (loop1): recovery complete
[  181.600208][ T8893] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.932217][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.374756][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  182.554724][    T9] usb 3-1: Using ep0 maxpacket: 32
[  182.569974][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.588128][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.631720][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  182.643224][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.652205][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.660537][ T8920] netlink: 'syz.0.1310': attribute type 1 has an invalid length.
[  182.670322][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.676139][ T8920] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1310'.
[  182.680178][    T9] usb 3-1: config 0 descriptor??
[  182.695089][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.710017][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.719543][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  182.728704][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.931487][ T8924] loop1: detected capacity change from 0 to 4096
[  182.943850][ T8924] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  183.020212][ T8924] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  183.089268][ T8924] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  183.104253][    T9] savu 0003:1E7D:2D5A.0015: unexpected long global item
[  183.116821][    T9] savu 0003:1E7D:2D5A.0015: parse failed
[  183.124185][    T9] savu: probe of 0003:1E7D:2D5A.0015 failed with error -22
[  183.144368][ T8924] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  183.159262][ T8924] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  183.190615][ T8924] ntfs: volume version 3.1.
[  183.209374][ T8924] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  183.236851][ T8917] chnl_net:caif_netlink_parms(): no params data found
[  183.254144][ T8924] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  183.289439][ T8924] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  183.319948][ T8924] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  183.324649][   T27] usb 3-1: USB disconnect, device number 9
[  183.354078][ T8924] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  183.393883][ T8934] sg_write: process 654 (syz.0.1315) changed security contexts after opening file descriptor, this is not allowed.
[  183.408238][ T8924] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value.
[  183.527345][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.567827][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.575308][ T8917] bridge_slave_0: entered allmulticast mode
[  183.601850][ T8917] bridge_slave_0: entered promiscuous mode
[  183.611836][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.643681][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.653785][ T8917] bridge_slave_1: entered allmulticast mode
[  183.675980][ T8917] bridge_slave_1: entered promiscuous mode
[  183.713384][ T8942] loop1: detected capacity change from 0 to 128
[  183.748140][ T8942] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  183.759187][ T8917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.772513][ T8917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.792329][ T8942] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  183.811941][ T8917] team0: Port device team_slave_0 added
[  183.821759][ T8917] team0: Port device team_slave_1 added
[  183.856603][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.863674][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.894666][ T8917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.947684][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.955365][ T5762] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.974740][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.002240][ T8917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.029878][ T8948] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1320'.
[  184.058814][ T8948] nbd: illegal input index 1638463
[  184.200482][ T8917] hsr_slave_0: entered promiscuous mode
[  184.211537][ T8917] hsr_slave_1: entered promiscuous mode
[  184.226783][ T8917] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.242962][ T8917] Cannot create hsr debugfs directory
[  184.719292][ T8917] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  184.774362][ T8917] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  184.784930][ T5768] Bluetooth: hci0: command tx timeout
[  184.813927][ T8917] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  184.840625][ T8971] loop1: detected capacity change from 0 to 1024
[  184.869567][ T8971] hfsplus: bad catalog entry type
[  184.910750][ T1028] hfsplus: b-tree write err: -5, ino 25
[  184.915577][ T8917] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  184.926213][ T1028] hfsplus: b-tree write err: -5, ino 4
[  184.931794][ T1028] hfsplus: b-tree write err: -5, ino 2
[  185.023722][ T8955] loop0: detected capacity change from 0 to 32768
[  185.135978][ T8955] 
[  185.135978][ T8955]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  185.135978][ T8955] 
[  185.158913][ T8917] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.206765][ T8955] ERROR: (device loop0): dbReAlloc: the block is outside the filesystem
[  185.206765][ T8955] 
[  185.266331][ T8917] 8021q: adding VLAN 0 to HW filter on device team0
[  185.275971][ T8955] ERROR: (device loop0): remounting filesystem as read-only
[  185.283646][ T8980] loop1: detected capacity change from 0 to 64
[  185.299696][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.308242][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.353903][ T8980] Trying to free block not in datazone
[  185.399702][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.406911][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.738966][ T8992] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1339'.
[  185.842759][ T8993] [U] ¦
[  185.939347][ T8999] x_tables: ip6_tables: HL target: only valid in mangle table, not syz1
[  186.073871][ T8917] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.464908][ T5768] Bluetooth: hci2: command 0x0406 tx timeout
[  186.807327][ T8917] veth0_vlan: entered promiscuous mode
[  186.848388][ T8917] veth1_vlan: entered promiscuous mode
[  186.864721][ T5774] Bluetooth: hci0: command tx timeout
[  186.892868][ T8917] veth0_macvtap: entered promiscuous mode
[  186.903712][ T8917] veth1_macvtap: entered promiscuous mode
[  186.925356][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.936017][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.947908][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.958839][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.970145][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.981086][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.991418][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.002334][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.015831][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.032733][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.043762][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.054395][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.065383][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.080325][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.105196][ T8917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.114220][ T8917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.124147][ T8917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.133430][ T8917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.497280][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'.
[  187.539244][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.572531][ T9031] loop2: detected capacity change from 0 to 256
[  187.585818][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.620268][ T9031] exfat: Deprecated parameter 'utf8'
[  187.645350][ T9031] exfat: Deprecated parameter 'namecase'
[  187.651159][ T9031] exfat: Deprecated parameter 'namecase'
[  187.675750][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.680704][ T9031] exfat: Deprecated parameter 'utf8'
[  187.694421][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.738530][ T9031] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  188.648636][ T9071] netlink: 5112 bytes leftover after parsing attributes in process `syz.4.1372'.
[  188.660598][ T9071] netlink: 5112 bytes leftover after parsing attributes in process `syz.4.1372'.
[  188.786717][ T9078] loop4: detected capacity change from 0 to 64
[  188.816021][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'.
[  188.822368][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  188.945217][ T5774] Bluetooth: hci0: command tx timeout
[  189.018101][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.028645][    T8] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.049838][    T8] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.063870][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  189.070944][    T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  189.088007][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.126082][    T8] usb 2-1: config 0 descriptor??
[  189.505948][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  189.550979][    T8] kye 0003:0458:5015.0016: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  189.575685][    T8] kye 0003:0458:5015.0016: unbalanced collection at end of report description
[  189.597905][    T8] kye 0003:0458:5015.0016: parse failed
[  189.603626][    T8] kye: probe of 0003:0458:5015.0016 failed with error -22
[  189.674065][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'.
[  189.756635][ T5764] usb 2-1: USB disconnect, device number 10
[  189.819112][ T9113] loop0: detected capacity change from 0 to 64
[  189.933506][ T9115] netlink: 'syz.0.1393': attribute type 15 has an invalid length.
[  190.000937][ T9117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1394'.
[  190.242875][ T9125] loop4: detected capacity change from 0 to 256
[  190.262565][ T9125] exfat: Deprecated parameter 'namecase'
[  190.324750][ T9125] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  190.460677][ T9133] loop1: detected capacity change from 0 to 64
[  190.748067][ T9143] comedi comedi2: das16m1: I/O port conflict (0x4f27,16)
[  191.024844][ T5774] Bluetooth: hci0: command tx timeout
[  191.283073][ T9137] loop2: detected capacity change from 0 to 40427
[  191.327874][ T9137] F2FS-fs (loop2): Found nat_bits in checkpoint
[  191.411628][ T9137] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  191.415117][ T9139] loop0: detected capacity change from 0 to 32768
[  191.655761][ T5763] syz-executor: attempt to access beyond end of device
[  191.655761][ T5763] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  191.710358][ T5763] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  192.210524][ T9174] loop4: detected capacity change from 0 to 128
[  192.241565][ T9174] FAT-fs (loop4): Directory bread(block 162) failed
[  192.258574][ T9174] FAT-fs (loop4): Directory bread(block 163) failed
[  192.284711][ T9174] FAT-fs (loop4): Directory bread(block 164) failed
[  192.314683][ T9174] FAT-fs (loop4): Directory bread(block 165) failed
[  192.321347][ T9174] FAT-fs (loop4): Directory bread(block 166) failed
[  192.354929][ T9174] FAT-fs (loop4): Directory bread(block 167) failed
[  192.361590][ T9174] FAT-fs (loop4): Directory bread(block 168) failed
[  192.394708][ T9174] FAT-fs (loop4): Directory bread(block 169) failed
[  192.402756][ T9174] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  192.473237][ T9174] FAT-fs (loop4): Directory bread(block 162) failed
[  192.481850][ T9174] FAT-fs (loop4): Directory bread(block 163) failed
[  192.497359][ T9174] syz.4.1420: attempt to access beyond end of device
[  192.497359][ T9174] loop4: rw=3, sector=226, nr_sectors = 6 limit=128
[  192.520518][ T9174] syz.4.1420: attempt to access beyond end of device
[  192.520518][ T9174] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128
[  192.685451][ T9166] loop0: detected capacity change from 0 to 32768
[  192.724191][ T9166] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  192.876931][ T9166] XFS (loop0): Ending clean mount
[  193.031568][ T5760] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  193.053103][ T9194] loop2: detected capacity change from 0 to 512
[  193.100444][ T9194] EXT4-fs: Ignoring removed bh option
[  193.141121][ T9173] loop1: detected capacity change from 0 to 40427
[  193.182439][ T9194] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  193.189178][ T9173] F2FS-fs (loop1): invalid crc value
[  193.227624][ T9173] F2FS-fs (loop1): Found nat_bits in checkpoint
[  193.238880][ T9194] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.1424: corrupted in-inode xattr: e_value size too large
[  193.336023][ T9194] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1424: couldn't read orphan inode 15 (err -117)
[  193.437276][ T9194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.527074][ T9173] F2FS-fs (loop1): Start checkpoint disabled!
[  193.588685][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.606295][ T9173] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  194.029761][ T1028] kworker/u4:5: attempt to access beyond end of device
[  194.029761][ T1028] loop1: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  194.057717][ T1028] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  194.098092][ T1028] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  194.111879][ T1028] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  194.121662][ T1028] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  194.130232][ T1028] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  194.646544][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.653748][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.937420][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.091921][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.252620][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.427494][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.599095][ T9246] loop0: detected capacity change from 0 to 8192
[  195.650628][ T9246] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  195.706197][ T9250] syz.4.1448 (9250) used greatest stack depth: 20656 bytes left
[  195.751507][ T9246] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  195.761435][ T9246] REISERFS (device loop0): using ordered data mode
[  195.768463][ T9246] reiserfs: using flush barriers
[  195.778429][ T9246] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  195.795571][ T9246] REISERFS (device loop0): checking transaction log (loop0)
[  195.827433][ T9246] REISERFS (device loop0): Using r5 hash to sort names
[  195.873880][   T11] tipc: Disabling bearer <udp:syz2>
[  195.918356][ T9246] reiserfs: enabling write barrier flush mode
[  195.919092][   T11] tipc: Left network mode
[  195.973887][ T9246] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  196.074838][ T9246] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  196.136834][ T9246] REISERFS (device loop0): Remounting filesystem read-only
[  196.144093][ T9246] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  196.220422][ T9246] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  196.234788][ T9259] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  196.255249][ T9259] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  196.267169][ T9246] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  196.305230][ T9246] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error
[  196.316293][ T9246] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  196.364725][ T9246] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  196.414785][ T9246] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  196.445317][ T9246] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  196.559852][ T9271] loop1: detected capacity change from 0 to 1024
[  196.634214][ T5760] ------------[ cut here ]------------
[  196.640036][ T5760] kernel BUG at fs/reiserfs/journal.c:1916!
[  196.676694][ T5760] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  196.682834][ T5760] CPU: 1 PID: 5760 Comm: syz-executor Not tainted syzkaller #0
[  196.690387][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  196.700466][ T5760] RIP: 0010:do_journal_release+0x4e6/0x4f0
[  196.706312][ T5760] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 dc b5 ff e9 f9 fc ff ff e8 8a ad 5d ff <0f> 0b e8 83 ad 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3
[  196.725933][ T5760] RSP: 0018:ffffc90004427b00 EFLAGS: 00010293
[  196.732021][ T5760] RAX: ffffffff82296ed6 RBX: 1ffff92000884f64 RCX: ffff88802c94bc00
[  196.740006][ T5760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  196.747991][ T5760] RBP: ffffc90004427bf8 R08: ffffc90004427b77 R09: 0000000000000000
[  196.755975][ T5760] R10: ffffc90004427b40 R11: fffff52000884f6f R12: ffffc900032e1000
[  196.763960][ T5760] R13: dffffc0000000000 R14: ffff888076acc630 R15: 0000000000000000
[  196.771930][ T5760] FS:  000055555fabc500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  196.780851][ T5760] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  196.787430][ T5760] CR2: 0000559048c19950 CR3: 000000006100b000 CR4: 00000000003506e0
[  196.795390][ T5760] Call Trace:
[  196.798677][ T5760]  <TASK>
[  196.801603][ T5760]  ? journal_release+0x30/0x30
[  196.806376][ T5760]  journal_release+0x1f/0x30
[  196.810967][ T5760]  reiserfs_put_super+0x26b/0x510
[  196.815982][ T5760]  ? hook_inode_free_security+0xb0/0xb0
[  196.821515][ T5760]  ? evict_inodes+0x63c/0x6a0
[  196.826184][ T5760]  ? reiserfs_dirty_inode+0x270/0x270
[  196.831561][ T5760]  ? fscrypt_destroy_keyring+0x288/0x2a0
[  196.837187][ T5760]  ? reiserfs_dirty_inode+0x270/0x270
[  196.842553][ T5760]  generic_shutdown_super+0x134/0x2b0
[  196.847916][ T5760]  kill_block_super+0x44/0x90
[  196.852585][ T5760]  deactivate_locked_super+0x97/0x100
[  196.857942][ T5760]  cleanup_mnt+0x43b/0x4d0
[  196.862452][ T5760]  task_work_run+0x1d4/0x260
[  196.867062][ T5760]  ? task_work_cancel+0x220/0x220
[  196.872094][ T5760]  ? exit_to_user_mode_loop+0x3b/0x110
[  196.877556][ T5760]  exit_to_user_mode_loop+0xe6/0x110
[  196.882840][ T5760]  exit_to_user_mode_prepare+0xee/0x180
[  196.888383][ T5760]  syscall_exit_to_user_mode+0x1a/0x50
[  196.893831][ T5760]  do_syscall_64+0x61/0xa0
[  196.898238][ T5760]  ? clear_bhb_loop+0x40/0x90
[  196.902903][ T5760]  ? clear_bhb_loop+0x40/0x90
[  196.907570][ T5760]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  196.913457][ T5760] RIP: 0033:0x7f8525d9d9d7
[  196.917877][ T5760] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  196.937470][ T5760] RSP: 002b:00007ffeb2cb9548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  196.945881][ T5760] RAX: 0000000000000000 RBX: 00007f8525e32050 RCX: 00007f8525d9d9d7
[  196.953858][ T5760] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb2cb9600
[  196.961828][ T5760] RBP: 00007ffeb2cb9600 R08: 00007ffeb2cba600 R09: 00000000ffffffff
[  196.969799][ T5760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb2cba690
[  196.977759][ T5760] R13: 00007f8525e32050 R14: 000000000002ffad R15: 00007ffeb2cba6d0
[  196.985735][ T5760]  </TASK>
[  196.988746][ T5760] Modules linked in:
[  197.022571][ T1143] hfsplus: b-tree write err: -5, ino 25
[  197.035530][ T1143] hfsplus: b-tree write err: -5, ino 4
[  197.040431][ T5760] ---[ end trace 0000000000000000 ]---
[  197.046775][ T5760] RIP: 0010:do_journal_release+0x4e6/0x4f0
[  197.052610][ T5760] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 dc b5 ff e9 f9 fc ff ff e8 8a ad 5d ff <0f> 0b e8 83 ad 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3
[  197.065439][ T1143] hfsplus: b-tree write err: -5, ino 2
[  197.072885][ T5760] RSP: 0018:ffffc90004427b00 EFLAGS: 00010293
[  197.100494][ T1143] hfsplus: b-tree write err: -5, ino 26
[  197.111046][ T5760] RAX: ffffffff82296ed6 RBX: 1ffff92000884f64 RCX: ffff88802c94bc00
[  197.166850][ T5760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  197.193425][ T5760] RBP: ffffc90004427bf8 R08: ffffc90004427b77 R09: 0000000000000000
[  197.215126][ T5760] R10: ffffc90004427b40 R11: fffff52000884f6f R12: ffffc900032e1000
[  197.232837][ T5760] R13: dffffc0000000000 R14: ffff888076acc630 R15: 0000000000000000
[  197.261943][ T5760] FS:  000055555fabc500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  197.277300][ T5760] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.283926][ T5760] CR2: 00007f05fd1e7158 CR3: 000000006100b000 CR4: 00000000003506e0
[  197.302087][ T5760] Kernel panic - not syncing: Fatal exception
[  197.308498][ T5760] Kernel Offset: disabled
[  197.313156][ T5760] Rebooting in 86400 seconds..