last executing test programs:

23.497025538s ago: executing program 1 (id=809):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f00000000c0))

23.225068166s ago: executing program 1 (id=811):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x3f, 0xfd, 0x5ae9}, {0x20, 0x0, 0x4, 0xffbff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

22.843176798s ago: executing program 1 (id=817):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x520c445, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

22.705280352s ago: executing program 1 (id=820):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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")
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x4806, 0x0)

21.766445721s ago: executing program 1 (id=826):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000880)={0x0, 0x11, "233d28ab040f747d24b5359c86f84a9f8c"}, &(0x7f0000000580)=0x19)

21.022363224s ago: executing program 1 (id=832):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d266abfb74bce739b919bac0c87dce1bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df746fccb1b01fd85815abc4b2cd3d8a3e0ce5c932be454104e9a4e84d867c11d790012d548598251be2be276972b599b391b32ca8ecfecec3dc429112d207a2b02eaee36b66e383968b2b764d4d308414626504bd95f131d3c3fb146a1339588d49be4a5de97f35ec3d4385957603637ce90275b9088ff97ffaed13121b2bca31bf489b47a81d2f9bf01a593d2c031fa7674f1fa75d13bdc3b512a43d962cd3bb52e56db77dd19f55acd55170b872324d985982db8d3c39c70c9b99bd2671d4d7a58ea69754e8b69055c2f2a7f70dd0768d5b05a769904e393bf95afe35261fbd358719fd01e86aebfd96a770a7bcc0e611cf173c4f1c6b6a50731d872d9afa7eb32aa59dae737d86c1fdd25a9e022376a3921132c5560a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0xe, 0x0, 0x8, 0xfffffffffffffc81, 0x0}}, 0x10)

20.686320734s ago: executing program 32 (id=832):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0xe, 0x0, 0x8, 0xfffffffffffffc81, 0x0}}, 0x10)

5.121957453s ago: executing program 5 (id=998):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x470f, &(0x7f0000008f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0xd000000})

3.850890061s ago: executing program 3 (id=1012):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0xff, 0x6355, &(0x7f00000082c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x6}}, 0x24, 0x0)

2.469833734s ago: executing program 5 (id=1028):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/icmp\x00')
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0)
preadv(r0, &(0x7f0000000040), 0x4, 0x8, 0x5)

2.394523046s ago: executing program 3 (id=1020):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

2.322986969s ago: executing program 5 (id=1022):
timer_create(0x2, 0x0, &(0x7f0000000240)=<r0=>0x0)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0)
timer_delete(r0)

2.119310085s ago: executing program 5 (id=1023):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

1.711047687s ago: executing program 5 (id=1032):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0xff, 0x6355, &(0x7f00000082c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x6}}, 0x24, 0x0)

1.603168151s ago: executing program 3 (id=1033):
rt_sigtimedwait(&(0x7f0000000000)={[0x84]}, 0x0, &(0x7f0000000040), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83428137", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.602694761s ago: executing program 0 (id=1034):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

1.602640051s ago: executing program 2 (id=1035):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001280)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1000}]}, 0x3c}}, 0x0)

1.523089164s ago: executing program 2 (id=1036):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]})
r0 = syz_clone(0x9880000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x30004d)

1.31149163s ago: executing program 4 (id=1037):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x100000001)
readv(r0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1)

1.255736112s ago: executing program 2 (id=1038):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)

1.058092278s ago: executing program 0 (id=1039):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000140)="e9", 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @rand_addr=0x64010100}], 0x20)

964.067421ms ago: executing program 2 (id=1040):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}], 0x2c)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), 0x4)

882.909643ms ago: executing program 0 (id=1041):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xa296}}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x40}, 0x1, 0x0, 0x0, 0x401c4}, 0x8840)

798.173686ms ago: executing program 4 (id=1043):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing={0x5c, 0x0, 0x1, 0x5}, 0x8)

692.953729ms ago: executing program 0 (id=1044):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a01020000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x88}}, 0x0)

651.49587ms ago: executing program 2 (id=1045):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000001880)=""/216, 0xd8}], 0x1, 0x1, 0x9f)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000180)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x2, 0x2}}, 0x0, 0x0}})

631.66404ms ago: executing program 4 (id=1046):
r0 = socket$inet(0x2, 0xa, 0xcaa)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x40, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10)

532.628144ms ago: executing program 0 (id=1047):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000120057830000", @ANYBLOB="000000000000000004"], 0x24}}, 0x0)

493.813355ms ago: executing program 3 (id=1048):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
splice(r1, &(0x7f0000000180)=0xfffffffffffffff4, r0, 0x0, 0x800008, 0xf)

431.380987ms ago: executing program 4 (id=1049):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r1, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084)

424.174377ms ago: executing program 2 (id=1050):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

311.080241ms ago: executing program 0 (id=1051):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0)
sendfile(r1, r0, 0x0, 0x80000000)

310.98943ms ago: executing program 4 (id=1052):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x13)
read(r0, &(0x7f0000000080)=""/47, 0x2f)

298.999781ms ago: executing program 3 (id=1053):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

113.688067ms ago: executing program 4 (id=1054):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

30.542179ms ago: executing program 5 (id=1055):
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)

0s ago: executing program 3 (id=1056):
syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

kernel console output (not intermixed with test programs):

: link becomes ready
[   67.109987][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.121265][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.141616][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.158014][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.176395][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.188289][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.205075][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.237096][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.255425][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.275144][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.293520][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.303489][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.321098][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.331205][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.342035][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.352452][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.365672][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.378689][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.387090][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.399293][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.417291][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.425127][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.443734][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.452998][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.473932][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.484364][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.494552][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.506085][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.520085][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.530337][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.547493][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.557767][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.570293][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.580283][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.592421][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.604771][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.634101][ T4268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   67.634184][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.659315][ T4268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   67.673158][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.680613][ T4268] netlink: 'syz.2.7': attribute type 14 has an invalid length.
[   67.680637][ T4268] netlink: 'syz.2.7': attribute type 12 has an invalid length.
[   67.698311][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.710409][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.725350][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.776184][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.798768][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.819925][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.833104][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.855090][ T4272] netlink: 'syz.1.2': attribute type 29 has an invalid length.
[   67.894343][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.910733][ T4272] netlink: 'syz.1.2': attribute type 29 has an invalid length.
[   67.920006][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.937067][ T4275] netlink: 'syz.1.2': attribute type 29 has an invalid length.
[   67.948704][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.048994][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.056963][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.116887][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.172541][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.197682][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.200857][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.232356][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.249427][  T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.268258][  T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.357177][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.405224][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.442457][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.910459][ T4310] loop0: detected capacity change from 0 to 1024
[   68.956329][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[   68.965378][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[   68.987391][ T1110] Bluetooth: hci4: command 0x0419 tx timeout
[   68.994282][ T1110] Bluetooth: hci2: command 0x0419 tx timeout
[   69.024180][ T1110] Bluetooth: hci3: command 0x0419 tx timeout
[   69.107384][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   69.164609][   T26] audit: type=1800 audit(1779276336.472:2): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22" name="file1" dev="loop0" ino=20 res=0 errno=0
[   69.268899][  T154] hfsplus: b-tree write err: -5, ino 25
[   69.289203][  T154] hfsplus: b-tree write err: -5, ino 4
[   69.308912][  T154] hfsplus: b-tree write err: -5, ino 2
[   69.337633][  T154] hfsplus: b-tree write err: -5, ino 20
[   69.367528][ T4231] usb 4-1: Using ep0 maxpacket: 16
[   69.507725][ T4231] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.537403][ T4231] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[   69.552143][ T4231] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 6
[   69.578322][ T4231] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[   69.594646][ T4231] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   69.604385][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.673852][ T4302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   69.690522][ T4338] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.33'.
[   69.691303][ T4302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   69.740575][ T4231] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[   70.034776][ T4231] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[   70.118444][ T4231] usb 4-1: USB disconnect, device number 2
[   70.997549][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.017789][   T23] Bluetooth: hci4: command 0x0405 tx timeout
[   71.074151][ T1108] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   71.096557][ T4387] loop1: detected capacity change from 0 to 1024
[   71.161806][ T4387] =======================================================
[   71.161806][ T4387] WARNING: The mand mount option has been deprecated and
[   71.161806][ T4387]          and is ignored by this kernel. Remove the mand
[   71.161806][ T4387]          option from the mount to silence this warning.
[   71.161806][ T4387] =======================================================
[   71.312254][ T4387] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.56: lblock 2 mapped to illegal pblock 2 (length 1)
[   71.334447][ T4387] Quota error (device loop1): qtree_write_dquot: dquota write failed
[   71.362690][ T4387] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.56: lblock 0 mapped to illegal pblock 48 (length 1)
[   71.388138][ T4387] Quota error (device loop1): v2_write_file_info: Can't write info structure
[   71.397892][ T4387] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.56: Failed to acquire dquot type 0
[   71.418246][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[   71.423333][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.424906][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[   71.448554][ T4387] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   71.477419][ T1108] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[   71.496111][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.497356][ T1108] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[   71.518874][ T4387] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.56: mark_inode_dirty error
[   71.537302][ T4231] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   71.550741][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0
[   71.563638][ T4387] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[   71.567505][ T1108] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[   71.577448][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.597373][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.607858][ T4387] EXT4-fs (loop1): 1 orphan inode deleted
[   71.609413][ T4231] usb 5-1: config 0 descriptor??
[   71.614332][ T4387] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[   71.626464][ T4383] loop2: detected capacity change from 0 to 32768
[   71.658354][ T1108] usb 4-1: config 0 descriptor??
[   71.681259][  T144] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   71.701960][  T144] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   71.716597][  T144] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0
[   71.791863][ T4383] (syz.2.54,4383,0):ocfs2_verify_volume:2377 ERROR: bad system_dir_blkno: 0
[   71.827372][ T4383] (syz.2.54,4383,0):ocfs2_verify_volume:2392 ERROR: status = -22
[   71.835168][ T4383] (syz.2.54,4383,0):ocfs2_fill_super:991 ERROR: superblock probe failed!
[   71.868710][ T4383] (syz.2.54,4383,0):ocfs2_fill_super:1177 ERROR: status = -22
[   71.913587][  T144] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   71.946504][  T144] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   71.959549][  T144] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0
[   71.990502][ T4197] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[   72.024858][ T4397] loop0: detected capacity change from 0 to 32768
[   72.026421][ T4197] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   72.072589][ T4197] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[   72.120828][ T4403] netlink: 91 bytes leftover after parsing attributes in process `syz.2.62'.
[   72.142210][ T4231] pyra 0003:1E7D:2CF6.0001: item fetching failed at offset 5/7
[   72.151259][ T1108] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x2
[   72.167760][ T1108] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x6
[   72.182736][ T1108] hid-generic 0003:17EF:60EE.0002: ignoring exceeding usage max
[   72.205706][ T1108] hid-generic 0003:17EF:60EE.0002: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0
[   72.218559][ T4231] pyra 0003:1E7D:2CF6.0001: parse failed
[   72.224652][ T4231] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -22
[   72.306916][ T4397] XFS (loop0): Mounting V5 Filesystem
[   72.404769][ T1108] usb 4-1: USB disconnect, device number 3
[   72.484027][ T4397] XFS (loop0): Ending clean mount
[   72.519199][   T13] usb 5-1: USB disconnect, device number 2
[   72.590676][ T4410] fido_id[4410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   72.632889][ T4188] XFS (loop0): Unmounting Filesystem
[   72.640111][ T4424] loop2: detected capacity change from 0 to 128
[   72.675729][ T4426] loop1: detected capacity change from 0 to 512
[   72.753904][ T4426] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   72.789528][ T4426] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.69: invalid block
[   72.810887][ T4426] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.69: invalid indirect mapped block 1024 (level 0)
[   72.855943][ T4426] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.69: bg 0: block 35: padding at end of block bitmap is not set
[   72.932427][ T4426] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   73.004340][ T4426] EXT4-fs (loop1): 1 truncate cleaned up
[   73.023398][ T4431] loop2: detected capacity change from 0 to 128
[   73.054271][ T4426] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   73.118692][ T4431] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   73.129797][ T4434] loop3: detected capacity change from 0 to 2048
[   73.227714][ T4431] hpfs: filesystem error: improperly stopped
[   73.233766][ T4431] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   73.260657][ T4436] sp0: Synchronizing with TNC
[   73.278610][ T4431] hpfs: You really don't want any checks? You are crazy...
[   73.298486][ T4435] [U] è`
[   73.302716][ T4431] hpfs: hpfs_map_sector(): read error
[   73.328458][ T4431] hpfs: code page support is disabled
[   73.338082][ T4431] hpfs: hpfs_map_4sectors(): unaligned read
[   73.344139][ T4431] hpfs: hpfs_map_4sectors(): unaligned read
[   73.353615][ T4440] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.405760][ T4431] hpfs: filesystem error: unable to find root dir
[   74.006183][ T4456] loop2: detected capacity change from 0 to 4096
[   74.119194][ T4475] loop3: detected capacity change from 0 to 256
[   74.251033][ T4475] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[   74.847214][ T4500] loop3: detected capacity change from 0 to 128
[   74.874338][ T4503] loop0: detected capacity change from 0 to 128
[   74.898522][ T4504] loop1: detected capacity change from 0 to 128
[   74.906817][ T4503] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   74.935448][ T4503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.067708][ T4197] sysv_free_block: flc_count > flc_size
[   75.104019][ T4197] sysv_free_block: flc_count > flc_size
[   75.161349][ T4197] sysv_free_block: flc_count > flc_size
[   75.177008][ T4197] sysv_free_block: flc_count > flc_size
[   75.188620][ T4197] sysv_free_block: flc_count > flc_size
[   75.236294][ T4197] sysv_free_block: flc_count > flc_size
[   75.248584][ T4506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.106'.
[   75.272530][ T4197] sysv_free_block: flc_count > flc_size
[   75.296271][ T4197] sysv_free_block: flc_count > flc_size
[   75.302820][ T4470] loop4: detected capacity change from 0 to 40427
[   75.319839][ T4197] sysv_free_block: flc_count > flc_size
[   75.337730][ T4197] sysv_free_block: flc_count > flc_size
[   75.368975][ T4197] sysv_free_inode: inode 0,1,2 or nonexistent inode
[   75.436873][ T4470] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[   75.480715][ T4470] F2FS-fs (loop4): invalid crc value
[   75.480824][ T4514] netlink: 19 bytes leftover after parsing attributes in process `syz.3.109'.
[   75.513371][ T4470] F2FS-fs (loop4): Found nat_bits in checkpoint
[   75.731087][ T4470] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   75.747523][ T4522] device gretap0 entered promiscuous mode
[   75.794294][ T4522] device vlan2 entered promiscuous mode
[   75.955458][ T4194] attempt to access beyond end of device
[   75.955458][ T4194] loop4: rw=2049, want=45104, limit=40427
[   76.117955][ T1345] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.294554][ T4513] loop1: detected capacity change from 0 to 32768
[   76.381971][ T1345] usb 1-1: Using ep0 maxpacket: 32
[   76.413018][ T4513] XFS (loop1): Mounting V5 Filesystem
[   76.507573][ T1345] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   76.517043][ T1345] usb 1-1: config 0 has no interface number 0
[   76.523725][ T1345] usb 1-1: config 0 interface 184 has no altsetting 0
[   76.546904][ T4513] XFS (loop1): Ending clean mount
[   76.568174][ T4232] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   76.642810][ T4554] capability: warning: `syz.4.122' uses 32-bit capabilities (legacy support in use)
[   76.681544][ T4197] XFS (loop1): Unmounting Filesystem
[   76.697579][ T1345] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   76.710390][ T1345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.728894][ T1345] usb 1-1: Product: syz
[   76.733310][ T1345] usb 1-1: Manufacturer: syz
[   76.761032][ T1345] usb 1-1: SerialNumber: syz
[   76.779852][ T1345] usb 1-1: config 0 descriptor??
[   76.826526][ T1345] smsc75xx v1.0.0
[   76.907523][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.947553][ T4232] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   76.965520][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   76.986620][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   77.028758][ T4232] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   77.032409][ T1345] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   77.047285][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.056870][ T1345] smsc75xx: probe of 1-1:0.184 failed with error -71
[   77.069746][ T1345] usb 1-1: USB disconnect, device number 2
[   77.101228][ T4232] usb 4-1: config 0 descriptor??
[   77.147621][ T4536] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   77.171072][ T1108] usb 3-1: Using ep0 maxpacket: 16
[   77.252866][ T4570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.130'.
[   77.286902][ T4568] loop4: detected capacity change from 0 to 4096
[   77.297562][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.322924][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.340040][ T4568] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   77.367427][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   77.383895][ T1108] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   77.393841][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.406873][ T1108] usb 3-1: config 0 descriptor??
[   77.447538][ T4568] ntfs: volume version 3.1.
[   77.653529][ T4232] hid-multitouch 0003:1FD2:6007.0003: ignoring exceeding usage max
[   77.676375][ T4232] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x2
[   77.684647][ T4580] netlink: 277 bytes leftover after parsing attributes in process `syz.4.134'.
[   77.707058][ T4232] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[   77.732908][ T4584] device team_slave_0 entered promiscuous mode
[   77.739342][ T4584] device team_slave_1 entered promiscuous mode
[   77.768534][ T4584] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.899181][ T1108] belkin 0003:1020:0006.0004: unknown main item tag 0x0
[   77.907499][ T4232] usb 4-1: USB disconnect, device number 4
[   77.923058][ T1108] belkin 0003:1020:0006.0004: unknown main item tag 0x0
[   77.941763][ T1108] belkin 0003:1020:0006.0004: unknown main item tag 0x0
[   77.977371][ T1108] belkin 0003:1020:0006.0004: unknown main item tag 0x0
[   78.000797][ T1108] belkin 0003:1020:0006.0004: unknown main item tag 0x0
[   78.015702][ T4587] fido_id[4587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   78.027372][ T1108] belkin 0003:1020:0006.0004: unknown main item tag 0x0
[   78.067857][ T1108] belkin 0003:1020:0006.0004: unknown main item tag 0x0
[   78.082280][ T1108] belkin 0003:1020:0006.0004: unknown main item tag 0x0
[   78.107356][ T1108] belkin 0003:1020:0006.0004: unknown main item tag 0x0
[   78.138620][ T1108] belkin 0003:1020:0006.0004: hidraw0: USB HID v0.0a Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0
[   78.153056][ T4597] loop4: detected capacity change from 0 to 164
[   78.166638][ T1108] usb 3-1: USB disconnect, device number 2
[   78.464698][ T4600] fido_id[4600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   78.478356][ T4602] loop4: detected capacity change from 0 to 164
[   78.740279][ T4610] netlink: 'syz.4.149': attribute type 2 has an invalid length.
[   78.789071][ T4613] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.897086][ T4616] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   79.088517][ T4624] netlink: 80 bytes leftover after parsing attributes in process `syz.3.155'.
[   79.111762][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'.
[   79.276037][ T4595] set_capacity_and_notify: 1 callbacks suppressed
[   79.276054][ T4595] loop0: detected capacity change from 0 to 32768
[   79.398532][ T4637] vivid-001: disconnect
[   79.411757][ T4636] vivid-001: reconnect
[   79.532964][ T4595] XFS (loop0): Mounting V5 Filesystem
[   79.657914][ T4663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'.
[   79.759930][ T4595] XFS (loop0): Ending clean mount
[   79.782467][ T4595] XFS (loop0): Quotacheck needed: Please wait.
[   79.895558][ T4595] XFS (loop0): Quotacheck: Done.
[   79.979757][ T1345] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   80.095057][ T4188] XFS (loop0): Unmounting Filesystem
[   80.274314][ T4685] netlink: 56 bytes leftover after parsing attributes in process `syz.1.181'.
[   80.377607][ T1345] usb 4-1: too many endpoints for config 0 interface 0 altsetting 248: 255, using maximum allowed: 30
[   80.427329][ T1345] usb 4-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   80.467428][ T1345] usb 4-1: config 0 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   80.519361][ T4693] loop1: detected capacity change from 0 to 128
[   80.519853][ T1345] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.553633][ T1345] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[   80.570709][ T4693] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   80.586191][ T1345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.631800][ T4669] loop4: detected capacity change from 0 to 32768
[   80.646141][ T1345] usb 4-1: config 0 descriptor??
[   80.656139][   T26] audit: type=1800 audit(1779276347.962:3): pid=4693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.185" name="file1" dev="loop1" ino=94 res=0 errno=0
[   80.855910][ T4669] XFS (loop4): Mounting V5 Filesystem
[   80.982757][ T4715] loop1: detected capacity change from 0 to 512
[   81.040556][ T4715] EXT4-fs (loop1): Ignoring removed bh option
[   81.056374][ T4669] XFS (loop4): Ending clean mount
[   81.109007][ T4669] XFS (loop4): Quotacheck needed: Please wait.
[   81.118066][ T4715] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   81.179341][ T1345] cherry 0003:046A:0027.0005: unknown main item tag 0x0
[   81.186360][ T1345] cherry 0003:046A:0027.0005: unknown main item tag 0x0
[   81.199785][ T4695] loop2: detected capacity change from 0 to 32768
[   81.207569][ T4715] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.273698][ T1345] cherry 0003:046A:0027.0005: unknown main item tag 0x0
[   81.287758][ T1345] cherry 0003:046A:0027.0005: unknown main item tag 0x0
[   81.296532][ T1345] cherry 0003:046A:0027.0005: unknown main item tag 0x0
[   81.305621][ T1345] cherry 0003:046A:0027.0005: unknown main item tag 0x0
[   81.313951][ T1345] cherry 0003:046A:0027.0005: unknown main item tag 0x0
[   81.318466][ T4695] XFS (loop2): Mounting V5 Filesystem
[   81.321603][ T1345] cherry 0003:046A:0027.0005: unknown main item tag 0x0
[   81.342978][ T1345] cherry 0003:046A:0027.0005: hidraw0: USB HID v0.0a Device [HID 046a:0027] on usb-dummy_hcd.3-1/input0
[   81.415533][ T4669] XFS (loop4): Quotacheck: Done.
[   81.434817][ T4201] usb 4-1: USB disconnect, device number 5
[   81.565195][ T4733] fido_id[4733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   81.569635][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.615247][ T4736] loop0: detected capacity change from 0 to 1024
[   81.625785][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.725052][ T4695] XFS (loop2): Ending clean mount
[   81.726723][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.748924][ T4736] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   81.794063][ T4695] XFS (loop2): Quotacheck needed: Please wait.
[   81.794103][ T4736] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: inode #32: comm syz.0.194: iget: special inode unallocated
[   81.866718][ T4736] EXT4-fs (loop0): no journal found
[   81.875970][ T4194] XFS (loop4): Unmounting Filesystem
[   81.876092][ T4736] EXT4-fs (loop0): can't get journal size
[   81.882106][ T4695] XFS (loop2): Quotacheck: Done.
[   81.988398][ T4741] capability: warning: `syz.1.196' uses deprecated v2 capabilities in a way that may be insecure
[   82.016896][ T4736] EXT4-fs (loop0): filesystem is read-only
[   82.077724][ T4736] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,bsdgroups,abort,data=writeback,init_itable=0x000000000000001f,usrquota,,errors=continue. Quota mode: writeback.
[   82.108195][ T4189] XFS (loop2): Unmounting Filesystem
[   82.629799][ T4754] loop3: detected capacity change from 0 to 8192
[   82.684160][ T4764] loop0: detected capacity change from 0 to 256
[   82.774006][ T4754] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   82.814358][ T4754] REISERFS (device loop3): using ordered data mode
[   82.816305][ T4771] loop1: detected capacity change from 0 to 256
[   82.856704][ T4754] reiserfs: using flush barriers
[   82.946447][ T4771] FAT-fs (loop1): Directory bread(block 64) failed
[   82.947297][ T4754] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   82.979919][ T4771] FAT-fs (loop1): Directory bread(block 65) failed
[   83.008235][ T4771] FAT-fs (loop1): Directory bread(block 66) failed
[   83.014820][ T4771] FAT-fs (loop1): Directory bread(block 67) failed
[   83.021967][ T4771] FAT-fs (loop1): Directory bread(block 68) failed
[   83.031368][ T4771] FAT-fs (loop1): Directory bread(block 69) failed
[   83.042033][ T4771] FAT-fs (loop1): Directory bread(block 70) failed
[   83.053084][ T4771] FAT-fs (loop1): Directory bread(block 71) failed
[   83.057127][ T4754] REISERFS (device loop3): checking transaction log (loop3)
[   83.104467][ T4771] FAT-fs (loop1): Directory bread(block 72) failed
[   83.136474][ T4754] REISERFS (device loop3): Using r5 hash to sort names
[   83.158411][ T4771] FAT-fs (loop1): Directory bread(block 73) failed
[   83.193257][ T4754] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   83.699292][ T4789] loop2: detected capacity change from 0 to 1024
[   83.980203][ T4796] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.218: lblock 2 mapped to illegal pblock 2 (length 1)
[   84.012693][ T1345] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   84.072960][ T4796] Quota error (device loop3): qtree_write_dquot: dquota write failed
[   84.117620][ T4796] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.218: lblock 0 mapped to illegal pblock 48 (length 1)
[   84.148119][ T4796] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   84.157075][ T4796] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.218: Failed to acquire dquot type 0
[   84.170133][ T4769] XFS (loop4): Mounting V5 Filesystem
[   84.187155][ T4796] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   84.256871][ T4796] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.218: mark_inode_dirty error
[   84.268636][ T1345] usb 1-1: Using ep0 maxpacket: 16
[   84.298602][ T4796] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[   84.362894][ T4769] XFS (loop4): Ending clean mount
[   84.387729][ T1345] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.400387][ T4796] EXT4-fs (loop3): 1 orphan inode deleted
[   84.427407][ T1345] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.454074][ T4796] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[   84.478325][    C0] vkms_vblank_simulate: vblank timer overrun
[   84.511667][ T1345] usb 1-1: config 0 interface 0 has no altsetting 0
[   84.524275][ T1345] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   84.577607][ T1345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.636358][ T1345] usb 1-1: config 0 descriptor??
[   84.705463][ T4725] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[   84.732915][ T4194] XFS (loop4): Unmounting Filesystem
[   84.748556][ T4725] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   84.796608][ T4725] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0
[   84.825393][ T4195] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[   84.848782][ T4195] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   84.889058][ T4195] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[   85.120664][ T1345] hid (null): unknown global tag 0xc
[   85.132845][ T1345] hid (null): report_id 11172 is invalid
[   85.153781][ T1345] hid (null): report_id 19093 is invalid
[   85.159625][ T1345] hid (null): nested delimiters
[   85.183465][ T4830] set_capacity_and_notify: 2 callbacks suppressed
[   85.183481][ T4830] loop3: detected capacity change from 0 to 8192
[   85.187001][ T1345] hid (null): unknown global tag 0xd
[   85.216090][ T4832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'.
[   85.233573][ T1345] hid (null): report_id 0 is invalid
[   85.260386][ T1345] hid (null): global environment stack overflow
[   85.306699][ T4830] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   85.346845][ T4830] REISERFS (device loop3): using ordered data mode
[   85.365031][ T1345] usb 1-1: USB disconnect, device number 3
[   85.388213][ T4830] reiserfs: using flush barriers
[   85.453719][ T4830] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   85.508718][ T4830] REISERFS (device loop3): checking transaction log (loop3)
[   85.535490][ T4830] REISERFS (device loop3): Using tea hash to sort names
[   85.547856][ T4830] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   85.689149][ T4828] loop2: detected capacity change from 0 to 32768
[   85.912036][    T9] read_mapping_page failed!
[   85.929581][    T9] ERROR: (device loop2): txCommit: 
[   85.929581][    T9] 
[   85.974097][    T9] jfs_write_inode: jfs_commit_inode failed!
[   86.097543][ T4847] syz.3.240 uses obsolete (PF_INET,SOCK_PACKET)
[   86.262565][ T4845] loop2: detected capacity change from 0 to 8192
[   86.289081][ T4854] loop0: detected capacity change from 0 to 1024
[   86.390604][ T4845] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   86.406118][ T4859] loop1: detected capacity change from 0 to 512
[   86.418593][ T4845] REISERFS (device loop2): using ordered data mode
[   86.425747][ T4845] reiserfs: using flush barriers
[   86.451098][ T4845] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   86.480329][ T4845] REISERFS (device loop2): checking transaction log (loop2)
[   86.488669][ T4725] hfsplus: b-tree write err: -5, ino 25
[   86.494341][ T4725] hfsplus: b-tree write err: -5, ino 4
[   86.511341][ T4845] REISERFS (device loop2): Using r5 hash to sort names
[   86.518122][ T4725] hfsplus: b-tree write err: -5, ino 2
[   86.535511][ T4725] hfsplus: b-tree write err: -5, ino 17
[   86.535770][ T4845] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   86.547139][ T4859] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   86.603366][ T4862] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   86.611377][ T4859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   86.663383][ T4862] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   86.721209][ T4859] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.246: bad orphan inode 131083
[   86.752639][ T4862] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   86.766160][ T4867] loop0: detected capacity change from 0 to 256
[   86.770446][    T7] cfg80211: failed to load regulatory.db
[   86.791474][ T4862] comedi comedi3: 8255: I/O port conflict (0x8,4)
[   86.817363][ T4859] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   86.827428][ T4862] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   86.852584][ T4862] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[   86.864432][   T26] audit: type=1326 audit(1779276354.172:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.2.249" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f2a6e59 code=0x7ffc0000
[   86.917570][ T4862] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   86.947492][ T4862] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   86.987397][ T4862] comedi comedi3: 8255: I/O port conflict (0x9,4)
[   86.994064][ T4862] comedi comedi3: 8255: I/O port conflict (0x6,4)
[   87.031406][   T26] audit: type=1326 audit(1779276354.172:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.2.249" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f2a6e59 code=0x7ffc0000
[   87.086260][ T4862] comedi comedi3: 8255: I/O port conflict (0x4,4)
[   87.126933][   T26] audit: type=1326 audit(1779276354.172:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.2.249" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f2a6e59 code=0x7ffc0000
[   87.268739][   T26] audit: type=1326 audit(1779276354.172:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.2.249" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2b7f2a6e59 code=0x7ffc0000
[   87.292747][    C0] vkms_vblank_simulate: vblank timer overrun
[   87.313939][ T4871] team0: Cannot enslave team device to itself
[   87.337119][   T26] audit: type=1326 audit(1779276354.202:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.2.249" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f2a6e59 code=0x7ffc0000
[   87.361171][    C0] vkms_vblank_simulate: vblank timer overrun
[   87.385741][ T4871] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   87.467741][   T26] audit: type=1326 audit(1779276354.212:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.2.249" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f2a6e59 code=0x7ffc0000
[   87.491870][    C0] vkms_vblank_simulate: vblank timer overrun
[   87.564564][   T26] audit: type=1326 audit(1779276354.242:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.2.249" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b7f2a6e59 code=0x7ffc0000
[   87.658580][ T4881] loop3: detected capacity change from 0 to 4096
[   87.690348][ T4880] loop0: detected capacity change from 0 to 4096
[   87.741224][ T4881] ntfs: volume version 3.1.
[   87.783771][ T4880] ntfs: volume version 3.1.
[   87.836042][ T4886] loop2: detected capacity change from 0 to 4096
[   87.971388][ T4890] netlink: 596 bytes leftover after parsing attributes in process `syz.3.260'.
[   88.802164][ T4918] loop3: detected capacity change from 0 to 512
[   88.998427][ T4918] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.273: inode has both inline data and extents flags
[   89.013688][ T4923] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   89.037599][ T4923] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.069206][ T4918] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.273: couldn't read orphan inode 15 (err -117)
[   89.081684][ T4918] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   89.125348][ T4923] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.4.276: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[   89.152484][ T4918] EXT4-fs (loop3): can't change dax mount option while remounting
[   89.201959][ T4923] EXT4-fs error (device loop4): ext4_get_first_dir_block:3608: inode #12: comm syz.4.276: directory missing '.'
[   89.513047][ T4906] JBD2: Ignoring recovery information on journal
[   89.609998][ T4947] [U] „
[   89.630361][ T4906] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   89.770573][ T4953] syz.4.288 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   89.877018][ T4956] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   90.104269][ T4189] ocfs2: Unmounting device (7,2) on (node local)
[   90.265219][ T4972] set_capacity_and_notify: 5 callbacks suppressed
[   90.265236][ T4972] loop1: detected capacity change from 0 to 256
[   90.363946][ T4972] exfat: Deprecated parameter 'utf8'
[   90.411631][ T4972] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   90.571444][ T4981] sctp: [Deprecated]: syz.0.301 (pid 4981) Use of int in max_burst socket option.
[   90.571444][ T4981] Use struct sctp_assoc_value instead
[   90.944967][ T5000] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   90.981146][ T5000] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   91.001377][ T5000] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   91.013830][ T5000] comedi comedi3: 8255: I/O port conflict (0x8,4)
[   91.042714][ T5000] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   91.054973][ T5000] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[   91.063450][ T5002] loop2: detected capacity change from 0 to 4096
[   91.067147][ T5000] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   91.076906][ T5000] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   91.087199][ T5002] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[   91.092065][ T5000] comedi comedi3: 8255: I/O port conflict (0x9,4)
[   91.105414][ T5000] comedi comedi3: 8255: I/O port conflict (0x6,4)
[   91.120048][ T5000] comedi comedi3: 8255: I/O port conflict (0x4,4)
[   91.135708][ T5000] comedi comedi3: 8255: I/O port conflict (0x3,4)
[   91.144281][ T5000] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[   91.159225][ T5000] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[   91.172132][ T5000] comedi comedi3: 8255: I/O port conflict (0xb,4)
[   91.209909][ T5002] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   91.218604][ T5000] comedi comedi3: 8255: I/O port conflict (0x3,4)
[   91.225105][ T5000] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[   91.254138][ T5002] ntfs3: loop2: Failed to load $Extend.
[   91.269861][ T5000] comedi comedi3: 8255: I/O port conflict (0x3,4)
[   91.280689][ T1345] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   91.312313][ T5000] comedi comedi3: 8255: I/O port conflict (0x8,4)
[   91.326643][ T5000] comedi comedi3: 8255: I/O port conflict (0x4,4)
[   91.356759][ T5000] comedi comedi3: 8255: I/O port conflict (0x8000000,4)
[   91.365601][ T5000] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[   91.514255][ T5020] loop2: detected capacity change from 0 to 1024
[   91.636459][ T5024] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.321'.
[   91.684202][ T1345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.707880][ T1345] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.758134][ T1345] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.778509][ T1345] usb 2-1: config 0 interface 0 has no altsetting 0
[   91.785198][ T1345] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[   91.807471][ T1345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.854744][ T1345] usb 2-1: config 0 descriptor??
[   91.885719][ T5035] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   92.119571][ T5042] loop0: detected capacity change from 0 to 512
[   92.234821][ T5042] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.330: inode #1: comm syz.0.330: iget: illegal inode #
[   92.292740][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'.
[   92.315976][ T5042] EXT4-fs (loop0): Remounting filesystem read-only
[   92.353892][ T5042] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.330: error while reading EA inode 1 err=-117
[   92.368104][ T1345] kye 0003:0458:5015.0007: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0
[   92.387293][ T1345] kye 0003:0458:5015.0007: tablet-enabling feature report not found
[   92.405953][ T1345] kye 0003:0458:5015.0007: tablet enabling failed
[   92.413148][ T5042] EXT4-fs (loop0): Remounting filesystem read-only
[   92.433576][ T5042] EXT4-fs (loop0): 1 orphan inode deleted
[   92.460317][ T5042] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000003,norecovery,noinit_itable,dax=inode,minixdf,usrjquota=,jqfmt=vfsold,usrjquota=,errors=remount-ro,noblock_validity,noquota,. Quota mode: none.
[   92.617039][ T4232] usb 2-1: USB disconnect, device number 2
[   92.849356][ T5071] netlink: 216 bytes leftover after parsing attributes in process `syz.4.342'.
[   92.859415][ T5071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.342'.
[   92.869556][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.342'.
[   93.033604][ T5051] loop2: detected capacity change from 0 to 32768
[   93.389236][ T5085] loop1: detected capacity change from 0 to 736
[   93.910168][ T5075] loop3: detected capacity change from 0 to 32768
[   94.265652][ T5079] loop4: detected capacity change from 0 to 32768
[   94.494463][ T5113] loop0: detected capacity change from 0 to 256
[   94.715298][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'.
[   94.888568][ T5125] loop2: detected capacity change from 0 to 736
[   95.299833][ T5144] set_capacity_and_notify: 1 callbacks suppressed
[   95.299850][ T5144] loop0: detected capacity change from 0 to 16
[   95.398472][ T5144] erofs: (device loop0): mounted with root inode @ nid 36.
[   95.457578][ T4198] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000]
[   95.552950][ T5144] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000]
[   95.606150][ T5158] loop2: detected capacity change from 0 to 256
[   95.639417][   T26] kauditd_printk_skb: 11 callbacks suppressed
[   95.639434][   T26] audit: type=1800 audit(1779276362.952:12): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.378" name="file2" dev="loop0" ino=89 res=0 errno=0
[   95.690197][ T5158] exfat: Deprecated parameter 'namecase'
[   95.695952][ T5158] exfat: Deprecated parameter 'utf8'
[   95.732387][ T5158] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   95.782963][ T5158] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[   95.954165][ T5167] loop4: detected capacity change from 0 to 2048
[   96.173095][ T5167] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.240540][ T5185] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   96.504229][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'.
[   96.616100][ T5203] loop2: detected capacity change from 0 to 512
[   96.777052][ T5203] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.406: missing EA_INODE flag
[   96.844530][ T5206] loop0: detected capacity change from 0 to 4096
[   96.908894][ T5203] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.406: error while reading EA inode 12 err=-117
[   96.973872][ T5203] EXT4-fs (loop2): 1 orphan inode deleted
[   97.012100][ T5203] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   97.017068][ T5206] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   97.197082][ T5206] ntfs3: loop0: Failed to load $Extend.
[   97.889923][ T5251] netlink: 134700 bytes leftover after parsing attributes in process `syz.3.427'.
[   97.937640][ T5251] openvswitch: netlink: Message has 5 unknown bytes.
[   98.196964][ T5270] loop0: detected capacity change from 0 to 1024
[   98.304971][ T5270] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.436: lblock 2 mapped to illegal pblock 2 (length 1)
[   98.425610][ T5278] loop2: detected capacity change from 0 to 512
[   98.430101][ T5271] loop4: detected capacity change from 0 to 4096
[   98.454637][ T5270] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   98.471883][ T5270] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.436: lblock 0 mapped to illegal pblock 48 (length 1)
[   98.506663][ T5270] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   98.533839][ T5270] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.436: Failed to acquire dquot type 0
[   98.549080][ T5280] loop1: detected capacity change from 0 to 2048
[   98.555640][ T5278] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   98.577434][ T5270] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   98.610906][ T5270] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.436: mark_inode_dirty error
[   98.624069][ T5278] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.440: bad orphan inode 131083
[   98.663248][ T5271] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   98.746139][ T5270] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[   98.757979][ T5278] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   98.775868][ T5271] ntfs3: loop4: Failed to load $Extend.
[   98.779899][ T5270] EXT4-fs (loop0): 1 orphan inode deleted
[   98.805300][  T463] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[   98.845934][ T5270] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noblock_validity,quota,max_batch_time=0x0000000000000009,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   98.889833][  T463] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   98.912666][  T463] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0
[   98.927903][ T5280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.043638][ T5270] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[   99.155556][ T5288] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   99.190910][ T5288] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.436: lblock 0 mapped to illegal pblock 48 (length 1)
[   99.246331][ T5288] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117
[   99.293018][ T5288] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback.
[   99.367450][ T5297] loop2: detected capacity change from 0 to 2048
[   99.475077][ T5297] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.668524][ T5312] mmap: syz.4.455 (5312): VmData 49205248 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   99.858038][ T5309] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[   99.892316][ T5309] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   99.987380][ T5309] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  100.004806][ T5309] ntfs: volume version 3.1.
[  100.094420][ T5331] tipc: Started in network mode
[  100.094461][ T5331] tipc: Node identity fc01, cluster identity 4711
[  100.094504][ T5331] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  100.194719][ T4188] ntfs: (device loop0): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  101.174973][ T5378] set_capacity_and_notify: 2 callbacks suppressed
[  101.174991][ T5378] loop2: detected capacity change from 0 to 4096
[  101.344371][ T5378] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  101.413971][ T5378] ntfs3: loop2: Failed to load $Extend.
[  101.935307][ T5393] loop1: detected capacity change from 0 to 256
[  101.936882][ T5374] loop0: detected capacity change from 0 to 32768
[  101.985757][ T5374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.484 (5374)
[  102.000465][ T5398] loop3: detected capacity change from 0 to 64
[  102.107191][ T5374] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  102.163147][ T5374] BTRFS info (device loop0): using free space tree
[  102.180016][ T5374] BTRFS info (device loop0): has skinny extents
[  102.206742][ T5393] FAT-fs (loop1): Directory bread(block 64) failed
[  102.234113][ T5393] FAT-fs (loop1): Directory bread(block 65) failed
[  102.293634][ T5393] FAT-fs (loop1): Directory bread(block 66) failed
[  102.374049][ T5393] FAT-fs (loop1): Directory bread(block 67) failed
[  102.407395][ T5393] FAT-fs (loop1): Directory bread(block 68) failed
[  102.457641][ T5393] FAT-fs (loop1): Directory bread(block 69) failed
[  102.457656][ T5418] loop3: detected capacity change from 0 to 4096
[  102.471431][ T5393] FAT-fs (loop1): Directory bread(block 70) failed
[  102.478445][ T5393] FAT-fs (loop1): Directory bread(block 71) failed
[  102.487533][ T5393] FAT-fs (loop1): Directory bread(block 72) failed
[  102.496839][ T5393] FAT-fs (loop1): Directory bread(block 73) failed
[  102.588525][ T5418] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  102.777510][ T5374] BTRFS info (device loop0): enabling ssd optimizations
[  102.809692][ T5440] loop4: detected capacity change from 0 to 64
[  102.936975][ T5440] MINIX-fs: deleted inode referenced: 6
[  102.956304][ T5440] MINIX-fs: deleted inode referenced: 6
[  103.491663][ T5453] netlink: 64 bytes leftover after parsing attributes in process `syz.4.509'.
[  103.981049][ T5435] loop2: detected capacity change from 0 to 40427
[  104.015255][ T5435] F2FS-fs (loop2): build fault injection attr: rate: 25, type: 0x1ffff
[  104.035069][ T5435] F2FS-fs (loop2): invalid crc value
[  104.053900][ T5435] F2FS-fs (loop2) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x26f1/0x67c0
[  104.084627][ T5435] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  104.247535][ T5477] loop0: detected capacity change from 0 to 2048
[  104.253782][ T5483] binder: 5482:5483 unknown command 0
[  104.263192][ T5483] binder: 5482:5483 ioctl c0306201 200000000080 returned -22
[  104.332077][ T5477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.386639][ T5490] loop4: detected capacity change from 0 to 128
[  104.477389][ T5493] netlink: 72 bytes leftover after parsing attributes in process `syz.1.520'.
[  104.511586][ T5490] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  104.563558][ T5490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.646761][   T26] audit: type=1800 audit(1779276371.952:13): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.519" name="file2" dev="loop4" ino=105 res=0 errno=0
[  104.748106][ T5505] loop2: detected capacity change from 0 to 64
[  104.760362][ T5503] netlink: 64 bytes leftover after parsing attributes in process `syz.0.523'.
[  105.074006][ T5518] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  105.226067][ T5517] SQUASHFS error: Unable to read directory block [2c0:35]
[  105.377723][ T5466] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  105.649125][ T5466] usb 4-1: Using ep0 maxpacket: 16
[  105.676567][ T5545] FAT-fs (loop1): Directory bread(block 64) failed
[  105.687511][ T5545] FAT-fs (loop1): Directory bread(block 65) failed
[  105.694217][ T5545] FAT-fs (loop1): Directory bread(block 66) failed
[  105.736344][ T5545] FAT-fs (loop1): Directory bread(block 67) failed
[  105.752750][ T5545] FAT-fs (loop1): Directory bread(block 68) failed
[  105.760931][ T5545] FAT-fs (loop1): Directory bread(block 69) failed
[  105.774829][ T5554] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  105.785063][ T5545] FAT-fs (loop1): Directory bread(block 70) failed
[  105.785147][ T5545] FAT-fs (loop1): Directory bread(block 71) failed
[  105.785229][ T5545] FAT-fs (loop1): Directory bread(block 72) failed
[  105.785264][ T5545] FAT-fs (loop1): Directory bread(block 73) failed
[  105.817453][ T5466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.837332][ T5466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.855727][ T5466] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  105.864935][ T5466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.886548][ T5466] usb 4-1: config 0 descriptor??
[  105.931551][ T5554] EXT4-fs (loop0): 1 truncate cleaned up
[  105.945222][ T5554] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[  106.321166][ T5580] set_capacity_and_notify: 6 callbacks suppressed
[  106.321183][ T5580] loop4: detected capacity change from 0 to 256
[  106.359536][ T5466] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  106.375419][ T5466] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  106.389344][ T5580] FAT-fs (loop4): Unrecognized mount option "shortname=wknnt" or missing value
[  106.457364][ T5466] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  106.465081][ T5466] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  106.494676][ T5466] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x0
[  106.554320][ T5466] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  106.591991][ T5466] usb 4-1: USB disconnect, device number 6
[  106.645751][ T5589] netlink: 52 bytes leftover after parsing attributes in process `syz.2.565'.
[  106.833204][ T5590] fido_id[5590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  106.963414][ T5597] loop2: detected capacity change from 0 to 256
[  107.043094][ T5598] loop1: detected capacity change from 0 to 4096
[  107.056453][ T5597] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f516b14, utbl_chksum : 0xe619d30d)
[  107.108416][ T5598] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  107.208942][ T5598] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  107.235783][ T5598] ntfs3: loop1: Failed to load $Extend.
[  107.359753][ T5585] loop0: detected capacity change from 0 to 32768
[  107.798878][ T5475] kernel write not supported for file /260/net/rt_cache (pid: 5475 comm: kworker/0:17)
[  107.868811][ T5618] loop3: detected capacity change from 0 to 8
[  108.000101][ T5618] SQUASHFS error: Unable to read directory block [2c0:35]
[  108.382903][ T5632] netlink: 52 bytes leftover after parsing attributes in process `syz.3.586'.
[  108.408009][ T5604] loop2: detected capacity change from 0 to 32768
[  108.515073][ T5637] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  108.529265][ T5637] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  108.544118][ T5637] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  108.563880][ T5637] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  108.571904][ T5638] loop1: detected capacity change from 0 to 1024
[  108.577962][ T5637] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  108.600697][ T5612] loop0: detected capacity change from 0 to 32768
[  108.614737][ T5637] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  108.624657][ T5637] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  108.645946][ T5638] hfsplus: bad catalog folder entry
[  108.674417][ T5637] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  108.681524][ T5637] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  108.749567][ T5637] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  108.756062][ T5637] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  108.764375][ T5642] loop2: detected capacity change from 0 to 764
[  108.880053][ T5612] overlayfs: upper fs needs to support d_type.
[  108.886627][ T5612] overlayfs: upper fs does not support tmpfile.
[  108.927472][ T5637] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  108.940012][ T5637] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  108.997485][ T5637] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  109.009313][ T5612] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  109.027433][ T5637] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  109.036261][ T5637] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  109.067439][ T5637] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  109.076555][ T5612] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  109.076555][ T5612] 
[  109.095001][ T5612] ERROR: (device loop0): remounting filesystem as read-only
[  109.103832][ T5612] overlayfs: failed to verify origin (/, ino=2, err=-5)
[  109.105884][ T5637] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  109.112597][ T5612] overlayfs: failed to verify upper root origin
[  109.143888][ T5637] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  109.151956][ T5637] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  109.186295][ T5650] loop2: detected capacity change from 0 to 512
[  109.195379][ T5637] comedi comedi3: 8255: I/O port conflict (0x8000000,4)
[  109.205128][ T5637] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  109.230156][ T5650] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.595: ea_inode file size=4 entry size=6
[  109.278786][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.303931][ T5650] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  109.365036][ T5650] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.595: corrupted inode contents
[  109.379337][ T5650] EXT4-fs (loop2): Remounting filesystem read-only
[  109.394412][ T5650] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.595: mark_inode_dirty error
[  109.406746][ T5650] EXT4-fs (loop2): Remounting filesystem read-only
[  109.424265][ T5650] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.595: corrupted inode contents
[  109.446819][ T5650] EXT4-fs (loop2): Remounting filesystem read-only
[  109.453733][ T5650] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2952: inode #15: comm syz.2.595: mark_inode_dirty error
[  109.467964][ T5650] EXT4-fs (loop2): Remounting filesystem read-only
[  109.474480][ T5650] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2955: inode #15: comm syz.2.595: mark inode dirty (error -117)
[  109.518793][ T5650] EXT4-fs (loop2): Remounting filesystem read-only
[  109.525436][ T5650] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117)
[  109.547866][ T5650] EXT4-fs (loop2): 1 orphan inode deleted
[  109.553910][ T5650] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x00000000000000ff,init_itable=0x0000000000008d55,nouid32,resgid=0x0000000000000000,acl,debug_want_extra_isize=0x000000000000005c,nojournal_checksum,sb=0x0000000000000006,. Quota mode: none.
[  109.842081][ T5662] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.600: inode #1: comm syz.2.600: iget: illegal inode #
[  109.891360][ T5662] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.600: error while reading EA inode 1 err=-117
[  109.907523][   T23] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  109.912328][ T5662] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.600: inode #1: comm syz.2.600: iget: illegal inode #
[  109.926882][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.937708][   T23] usb 2-1: Product: syz
[  109.941904][   T23] usb 2-1: Manufacturer: syz
[  109.946520][   T23] usb 2-1: SerialNumber: syz
[  109.953428][   T23] usb 2-1: config 0 descriptor??
[  109.960230][ T5662] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.600: error while reading EA inode 1 err=-117
[  109.976997][ T5662] EXT4-fs (loop2): 1 orphan inode deleted
[  109.977092][ T5660] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.596 (5660)
[  109.996521][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,acl,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  110.027722][   T23] gspca_main: sq905c-2.14.0 probing 2770:9052
[  110.041998][ T5660] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  110.083022][ T5660] BTRFS info (device loop0): using free space tree
[  110.105735][ T5660] BTRFS info (device loop0): has skinny extents
[  110.429181][ T5660] BTRFS info (device loop0): enabling ssd optimizations
[  110.683568][   T23] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  110.700920][   T23] sq905c: probe of 2-1:0.0 failed with error -71
[  110.724099][   T23] usb 2-1: USB disconnect, device number 3
[  111.231752][ T5689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.604 (5689)
[  111.250285][ T5717] netlink: 'syz.2.617': attribute type 3 has an invalid length.
[  111.333739][ T5689] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  111.380091][ T5722] set_capacity_and_notify: 3 callbacks suppressed
[  111.380108][ T5722] loop0: detected capacity change from 0 to 1024
[  111.393178][ T5689] BTRFS info (device loop4): using free space tree
[  111.450391][ T5689] BTRFS info (device loop4): has skinny extents
[  111.481104][ T5727] netlink: 'syz.1.622': attribute type 1 has an invalid length.
[  111.492462][ T5725] loop2: detected capacity change from 0 to 2048
[  111.520756][ T5730] loop3: detected capacity change from 0 to 512
[  111.535399][ T5722] hfsplus: request for non-existent node 3 in B*Tree
[  111.556735][ T5722] hfsplus: request for non-existent node 3 in B*Tree
[  111.579954][ T5730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  111.605781][ T5725] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  111.650968][ T5725] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.670732][ T5730] EXT4-fs (loop3): 1 truncate cleaned up
[  111.718322][ T5730] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nolazytime,auto_da_alloc,noquota,,errors=continue. Quota mode: none.
[  111.819784][   T26] audit: type=1800 audit(1779276379.132:14): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.623" name="file1" dev="loop3" ino=15 res=0 errno=0
[  111.884055][ T5689] BTRFS info (device loop4): enabling ssd optimizations
[  112.475605][ T5778] loop0: detected capacity change from 0 to 764
[  112.754807][ T5787] loop1: detected capacity change from 0 to 1024
[  112.939846][ T5797] loop3: detected capacity change from 0 to 1024
[  112.995120][ T4725] hfsplus: b-tree write err: -5, ino 25
[  113.013472][ T4725] hfsplus: b-tree write err: -5, ino 4
[  113.035223][ T4725] hfsplus: b-tree write err: -5, ino 2
[  113.080291][ T5797] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  113.178318][ T5797] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x0000000000000003,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  113.327018][ T5797] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  113.539142][ T5820] loop1: detected capacity change from 0 to 256
[  113.646733][ T5820] FAT-fs (loop1): Directory bread(block 64) failed
[  113.678521][ T5820] FAT-fs (loop1): Directory bread(block 65) failed
[  113.707495][ T5820] FAT-fs (loop1): Directory bread(block 66) failed
[  113.714090][ T5820] FAT-fs (loop1): Directory bread(block 67) failed
[  113.757725][ T5820] FAT-fs (loop1): Directory bread(block 68) failed
[  113.784036][ T5820] FAT-fs (loop1): Directory bread(block 69) failed
[  113.816799][ T5820] FAT-fs (loop1): Directory bread(block 70) failed
[  113.833992][ T5820] FAT-fs (loop1): Directory bread(block 71) failed
[  113.855493][ T5820] FAT-fs (loop1): Directory bread(block 72) failed
[  113.877608][ T5820] FAT-fs (loop1): Directory bread(block 73) failed
[  113.884358][ T5830] loop0: detected capacity change from 0 to 512
[  113.963545][ T5830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  114.026727][ T5830] EXT4-fs (loop0): 1 truncate cleaned up
[  114.043054][ T5830] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,nolazytime,auto_da_alloc,noquota,,errors=continue. Quota mode: none.
[  114.100839][   T26] audit: type=1800 audit(1779276381.412:15): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.658" name="file1" dev="loop0" ino=15 res=0 errno=0
[  114.218415][ T5820] attempt to access beyond end of device
[  114.218415][ T5820] loop1: rw=2049, want=1228, limit=256
[  114.225558][ T5801] loop2: detected capacity change from 0 to 32768
[  114.310907][ T5801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.644 (5801)
[  114.398231][ T5801] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  114.427659][ T5801] BTRFS info (device loop2): using free space tree
[  114.434226][ T5801] BTRFS info (device loop2): has skinny extents
[  114.722712][ T5801] BTRFS info (device loop2): enabling ssd optimizations
[  114.870577][ T5824] loop4: detected capacity change from 0 to 32768
[  114.966288][ T5824] (syz.4.655,5824,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  115.023496][ T5824] (syz.4.655,5824,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  115.139197][ T5869] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  115.221040][ T5869] hpfs: filesystem error: improperly stopped
[  115.227824][ T5869] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  115.235865][ T5824] JBD2: Ignoring recovery information on journal
[  115.267515][ T5869] hpfs: You really don't want any checks? You are crazy...
[  115.274866][ T5869] hpfs: Code page index out of array
[  115.283571][ T5869] hpfs: code page support is disabled
[  115.289695][ T5869] hpfs: hpfs_map_4sectors(): unaligned read
[  115.295655][ T5869] hpfs: hpfs_map_4sectors(): unaligned read
[  115.303050][ T5869] hpfs: filesystem error: unable to find root dir
[  115.411620][ T5824] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  115.419036][ T5839] overlayfs: upper fs needs to support d_type.
[  115.426804][ T5839] overlayfs: upper fs does not support tmpfile.
[  115.497725][ T5839] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  115.562525][ T5839] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  115.562525][ T5839] 
[  115.678269][ T5839] ERROR: (device loop3): remounting filesystem as read-only
[  115.685636][ T5839] overlayfs: failed to verify origin (/, ino=2, err=-5)
[  115.718168][ T5839] overlayfs: failed to verify upper root origin
[  115.827323][   T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  115.925209][ T4194] ocfs2: Unmounting device (7,4) on (node local)
[  115.939003][ T5862] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff
[  115.970731][ T5862] F2FS-fs (loop1): invalid crc value
[  115.985501][ T5862] F2FS-fs (loop1): Found nat_bits in checkpoint
[  116.106479][  T463] hfsplus: b-tree write err: -5, ino 25
[  116.115937][  T463] hfsplus: b-tree write err: -5, ino 4
[  116.142108][  T463] hfsplus: b-tree write err: -5, ino 2
[  116.238528][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  116.261909][   T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  116.296695][ T5862] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  116.310622][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  116.330843][   T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  116.395976][   T26] audit: type=1800 audit(1779276383.702:16): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.665" name="file1" dev="loop1" ino=10 res=0 errno=0
[  116.421832][ T5885] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  116.443564][ T4197] attempt to access beyond end of device
[  116.443564][ T4197] loop1: rw=2049, want=45104, limit=40427
[  116.492581][ T5885] EXT4-fs (loop4): 1 truncate cleaned up
[  116.513975][ T5885] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,nolazytime,auto_da_alloc,noquota,,errors=continue. Quota mode: none.
[  116.547548][   T23] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  116.613209][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.674093][   T26] audit: type=1800 audit(1779276383.982:17): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.673" name="file1" dev="loop4" ino=15 res=0 errno=0
[  116.676101][   T23] usb 3-1: Product: syz
[  116.774488][   T23] usb 3-1: Manufacturer: syz
[  116.776209][ T5898] set_capacity_and_notify: 5 callbacks suppressed
[  116.776225][ T5898] loop3: detected capacity change from 0 to 256
[  116.791029][   T23] usb 3-1: SerialNumber: syz
[  116.822208][   T23] usb 3-1: config 0 descriptor??
[  116.870944][   T23] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  117.143543][   T23] scsi host1: usb-storage 3-1:0.0
[  117.326070][ T5922] loop4: detected capacity change from 0 to 256
[  117.415307][ T5929] loop1: detected capacity change from 0 to 128
[  117.437440][ T5462] usb 3-1: USB disconnect, device number 3
[  117.479311][ T5922] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d)
[  117.626544][ T5929] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[  117.655018][ T5929] FAT-fs (loop1): Filesystem has been set read-only
[  117.672678][ T5929] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[  118.037951][ T5956] vivid-001: =================  START STATUS  =================
[  118.092009][ T5956] vivid-001: Test Pattern: 75% Colorbar
[  118.127124][ T5956] vivid-001: Fill Percentage of Frame: 100
[  118.139428][ T5965] hsr0: VLAN not yet supported
[  118.147719][ T5956] vivid-001: Horizontal Movement: No Movement
[  118.204509][ T5956] vivid-001: Vertical Movement: No Movement
[  118.226615][ T5956] vivid-001: OSD Text Mode: All
[  118.235304][ T5956] vivid-001: Show Border: false
[  118.251485][ T5466] kernel write not supported for file /vcs (pid: 5466 comm: kworker/0:10)
[  118.265522][ T5956] vivid-001: Show Square: false
[  118.312533][ T5956] vivid-001: Sensor Flipped Horizontally: false
[  118.337288][ T5956] vivid-001: Sensor Flipped Vertically: false
[  118.363902][ T5956] vivid-001: Insert SAV Code in Image: false
[  118.402117][ T5956] vivid-001: Insert EAV Code in Image: false
[  118.433344][ T5956] vivid-001: Reduced Framerate: false
[  118.437281][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  118.464471][ T5956] vivid-001: Enable Capture Cropping: true grabbed
[  118.495901][ T5956] vivid-001: Enable Capture Composing: true grabbed
[  118.524039][ T5956] vivid-001: Enable Capture Scaler: true grabbed
[  118.543880][ T5956] vivid-001: Timestamp Source: End of Frame
[  118.563629][ T5956] vivid-001: Colorspace: sRGB
[  118.571340][ T5956] vivid-001: Transfer Function: Default
[  118.591593][ T5956] vivid-001: Y'CbCr Encoding: Default
[  118.611827][ T5956] vivid-001: HSV Encoding: Hue 0-179
[  118.618829][ T5977] loop3: detected capacity change from 0 to 4096
[  118.625624][ T5956] vivid-001: Quantization: Default
[  118.632586][ T5956] vivid-001: Apply Alpha To Red Only: false
[  118.651623][ T5956] vivid-001: Standard Aspect Ratio: 4x3
[  118.665985][ T5956] vivid-001: DV Timings Signal Mode: Current DV Timings inactive
[  118.669342][ T5979] loop1: detected capacity change from 0 to 128
[  118.676367][ T5956] vivid-001: DV Timings: 640x480p59 inactive
[  118.705131][ T5956] vivid-001: DV Timings Aspect Ratio: Source Width x Height
[  118.713093][ T5956] vivid-001: Maximum EDID Blocks: 2
[  118.718967][ T5956] vivid-001: Limited RGB Range (16-235): false
[  118.725266][ T5956] vivid-001: Rx RGB Quantization Range: Automatic
[  118.760969][ T5979] FAT-fs (loop1): Directory bread(block 32) failed
[  118.823010][ T5979] FAT-fs (loop1): Directory bread(block 33) failed
[  118.826469][ T5956] vivid-001: Power Present: 0x00000001
[  118.857661][ T4232] usb 3-1: config index 0 descriptor too short (expected 1572, got 36)
[  118.866282][ T5979] FAT-fs (loop1): Directory bread(block 34) failed
[  118.877327][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.901292][ T5979] FAT-fs (loop1): Directory bread(block 35) failed
[  118.915896][ T5956] tpg source WxH: 640x360 (Y'CbCr)
[  118.916862][ T5979] FAT-fs (loop1): Directory bread(block 36) failed
[  118.927092][ T5956] tpg field: 1
[  118.943843][ T5979] FAT-fs (loop1): Directory bread(block 37) failed
[  118.950846][ T5956] tpg crop: 640x360@0x0
[  118.955205][ T5956] tpg compose: 640x360@0x0
[  118.960957][ T5956] tpg colorspace: 8
[  118.964968][ T5956] tpg transfer function: 0/2
[  118.965027][ T5979] FAT-fs (loop1): Directory bread(block 38) failed
[  118.973898][ T5956] tpg Y'CbCr encoding: 0/1
[  118.981066][ T5956] tpg quantization: 0/2
[  118.985395][ T5956] tpg RGB range: 0/2
[  118.989962][ T5979] FAT-fs (loop1): Directory bread(block 39) failed
[  118.996970][ T5979] FAT-fs (loop1): Directory bread(block 40) failed
[  119.003959][ T5956] vivid-001: ==================  END STATUS  ==================
[  119.017391][ T5979] FAT-fs (loop1): Directory bread(block 41) failed
[  119.089032][ T4232] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  119.115310][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.146428][ T4232] usb 3-1: Product: syz
[  119.153035][ T4232] usb 3-1: Manufacturer: syz
[  119.158313][ T4232] usb 3-1: SerialNumber: syz
[  119.190184][ T5979] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  119.201085][ T5979] FAT-fs (loop1): Filesystem has been set read-only
[  119.223978][ T4232] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5
[  119.357317][ T5989] netlink: 32 bytes leftover after parsing attributes in process `syz.1.715'.
[  119.378517][ T5466] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  119.457484][ T3546] bcm5974 3-1:1.0: could not read from device
[  119.517407][ T4232] bcm5974 3-1:1.0: could not read from device
[  119.557482][ T3546] bcm5974 3-1:1.0: could not read from device
[  119.567059][ T5999] netlink: 452 bytes leftover after parsing attributes in process `syz.0.721'.
[  119.581679][ T4232] input: failed to attach handler mousedev to device input5, error: -5
[  119.601105][ T4232] usb 3-1: USB disconnect, device number 4
[  119.620771][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.721'.
[  119.675367][ T6001] loop1: detected capacity change from 0 to 2048
[  119.726786][ T6003] loop0: detected capacity change from 0 to 4096
[  119.755071][ T6001] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  119.768107][ T5466] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  119.786104][ T6003] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  119.801309][ T6004] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.824217][ T5466] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  119.849303][ T5466] usb 4-1: config 0 has no interface number 0
[  119.875368][ T5466] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  119.916974][ T5466] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  119.935210][ T5466] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  119.945657][ T5466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.985205][ T5466] usb 4-1: config 0 descriptor??
[  120.063161][ T6003] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  120.265406][ T6013] netlink: 'syz.1.728': attribute type 13 has an invalid length.
[  120.294152][ T6013] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.728'.
[  120.618102][ T6029] loop1: detected capacity change from 0 to 4096
[  120.693258][ T5466] usb 4-1: USB disconnect, device number 7
[  120.813053][ T6033] loop2: detected capacity change from 0 to 4096
[  120.870147][ T6033] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  120.965463][ T6037] loop1: detected capacity change from 0 to 512
[  121.005198][ T6033] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  121.043994][ T6037] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  121.094821][ T6037] ext4 filesystem being mounted at /160/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.190555][ T6037] EXT4-fs warning (device loop1): ext4_group_add:1676: Can't resize non-sparse filesystem further
[  121.353693][ T6027] XFS (loop0): Mounting V5 Filesystem
[  121.530129][ T6027] XFS (loop0): Ending clean mount
[  121.672630][ T4188] XFS (loop0): Unmounting Filesystem
[  121.951327][ T6080] set_capacity_and_notify: 1 callbacks suppressed
[  121.951345][ T6080] loop3: detected capacity change from 0 to 1024
[  122.073291][ T6078] loop1: detected capacity change from 0 to 4096
[  122.075520][ T6073] loop4: detected capacity change from 0 to 4096
[  122.154492][ T6083] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.282087][ T6078] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  122.383551][ T4194] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  122.397309][ T4194] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  122.547841][ T6086] loop0: detected capacity change from 0 to 4096
[  122.663667][ T6086] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  122.717380][ T6086] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[  122.848362][    T9] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22.
[  122.856787][ T6102] tmpfs: Too small a size for current use
[  123.148289][ T6104] loop3: detected capacity change from 0 to 4096
[  123.174634][ T6106] device team_slave_0 left promiscuous mode
[  123.182184][ T6106] device team_slave_1 left promiscuous mode
[  123.193669][ T6104] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  123.239145][ T6111] loop4: detected capacity change from 0 to 512
[  123.281392][ T6106] team0: Cannot enslave team device to itself
[  123.283127][ T6104] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  123.296970][ T6104] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  123.299589][ T6106] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  123.309399][ T6104] ntfs3: loop3: Failed to load $Bitmap.
[  123.348488][ T6111] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  123.384735][ T6104] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  123.414505][ T6104] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22.
[  123.425198][ T6111] EXT4-fs (loop4): orphan cleanup on readonly fs
[  123.471250][ T6111] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.769: Allocating blocks 41-42 which overlap fs metadata
[  123.501839][ T6111] Quota error (device loop4): write_blk: dquota write failed
[  123.509530][ T6111] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  123.519528][ T6111] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.769: Failed to acquire dquot type 0
[  123.548560][ T6111] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  123.565634][ T6111] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.769: corrupted inode contents
[  123.584020][ T6111] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.769: mark_inode_dirty error
[  123.597445][ T6111] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.769: corrupted inode contents
[  123.614825][ T6111] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.769: mark_inode_dirty error
[  123.628137][ T6111] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.769: corrupted inode contents
[  123.643131][ T6111] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  123.652227][ T6111] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.769: corrupted inode contents
[  123.664561][ T6111] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.769: mark_inode_dirty error
[  123.707443][ T6111] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  123.722371][ T6111] EXT4-fs (loop4): 1 truncate cleaned up
[  123.729000][ T6111] EXT4-fs (loop4): pa ffff8880236a1ee0: logic 1, phys. 41, len 23
[  123.737025][ T6111] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23
[  123.748537][ T6111] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,abort,barrier=0x0000000000000000,nogrpid,resgid=0x0000000000000000,noinit_itable,nombcache,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback.
[  123.766936][ T6104] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  124.039297][ T6126] usb usb9: usbfs: process 6126 (syz.3.775) did not claim interface 0 before use
[  124.237859][ T6136] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  124.260686][ T6101] loop2: detected capacity change from 0 to 40427
[  124.272178][ T6136] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem
[  124.366475][ T6101] F2FS-fs (loop2): invalid crc value
[  124.404672][ T6101] F2FS-fs (loop2): Found nat_bits in checkpoint
[  124.426691][ T6144] loop3: detected capacity change from 0 to 128
[  124.433425][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.550579][ T6101] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  124.657956][   T26] audit: type=1800 audit(1779276391.972:18): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.764" name="file1" dev="loop2" ino=10 res=0 errno=0
[  124.669420][ T6148] loop1: detected capacity change from 0 to 4096
[  124.746778][ T6151] loop3: detected capacity change from 0 to 512
[  124.775816][ T4189] attempt to access beyond end of device
[  124.775816][ T4189] loop2: rw=2049, want=45104, limit=40427
[  124.807649][ T6151] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  124.882611][ T6151] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.785: bad orphan inode 131083
[  124.897564][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short
[  124.942007][ T6151] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  125.257603][ T4232] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  125.287295][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.295350][ T4232] usb 1-1: Product: syz
[  125.304052][ T6160] device ipvlan2 entered promiscuous mode
[  125.324436][ T4232] usb 1-1: Manufacturer: syz
[  125.335712][ T4232] usb 1-1: SerialNumber: syz
[  125.613113][ T6173] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.654189][ T6172] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  125.865108][ T6168] JBD2: Ignoring recovery information on journal
[  125.921831][ T6176] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  125.985861][ T4406] udevd[4406]: incorrect nilfs2 checksum on /dev/loop3
[  126.014685][ T6168] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  126.017193][ T6183] sp0: Synchronizing with TNC
[  126.068251][ T6184] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.079225][ T4232] snd-usb-audio: probe of 1-1:1.0 failed with error -71
[  126.137391][ T4232] usb 1-1: USB disconnect, device number 4
[  126.686963][ T4194] ocfs2: Unmounting device (7,4) on (node local)
[  126.733358][ T6199] process 'syz.0.806' launched '/dev/fd/3' with NULL argv: empty string added
[  126.831920][ T6201] hfsplus: bad catalog entry type
[  126.962001][  T463] hfsplus: b-tree write err: -5, ino 25
[  126.981741][  T463] hfsplus: b-tree write err: -5, ino 4
[  127.004112][  T463] hfsplus: b-tree write err: -5, ino 2
[  127.217383][ T6210] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0
[  127.402800][ T6217] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  127.422538][ T6188] set_capacity_and_notify: 5 callbacks suppressed
[  127.422555][ T6188] loop3: detected capacity change from 0 to 40427
[  127.499785][ T6188] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  127.517365][ T6188] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  127.552513][ T6215] loop2: detected capacity change from 0 to 4096
[  127.568003][ T6188] F2FS-fs (loop3): invalid crc value
[  127.609081][ T6188] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  127.720994][ T6215] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  127.826579][ T6188] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  127.851488][ T6235] loop1: detected capacity change from 0 to 256
[  127.854797][ T6188] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  128.247753][ T4195] attempt to access beyond end of device
[  128.247753][ T4195] loop3: rw=2049, want=45104, limit=40427
[  128.299264][ T6237] loop2: detected capacity change from 0 to 32768
[  128.353406][ T6237] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  128.362305][ T6237] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  128.390371][ T6237] gfs2: fsid=syz:syz.0: can't lookup journal index: 0
[  128.495875][ T6221] loop0: detected capacity change from 0 to 40427
[  128.584359][ T6221] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  128.617253][ T6221] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  128.673093][ T4197] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  128.694180][ T6221] F2FS-fs (loop0): invalid crc value
[  128.728752][ T4197] FAT-fs (loop1): Filesystem has been set read-only
[  128.770298][ T4197] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  128.797463][ T6221] F2FS-fs (loop0): Found nat_bits in checkpoint
[  129.047931][ T6221] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  129.060742][ T6221] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  129.143599][ T6255] loop2: detected capacity change from 0 to 256
[  129.193868][ T6221] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  129.573963][ T6245] loop4: detected capacity change from 0 to 32768
[  129.611217][  T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.683308][ T6245] 
[  129.683308][ T6245]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.683308][ T6245] 
[  129.763555][  T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.801257][ T6245] 
[  129.801257][ T6245]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.801257][ T6245] 
[  129.816056][ T6265] loop2: detected capacity change from 0 to 64
[  129.826290][ T6245] 
[  129.826290][ T6245]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.826290][ T6245] 
[  129.855543][ T6245] 
[  129.855543][ T6245]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.855543][ T6245] 
[  129.882914][ T6245] 
[  129.882914][ T6245]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.882914][ T6245] 
[  129.974816][  T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.031834][  T276] 
[  130.031834][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.031834][  T276] 
[  130.150039][ T4725] 
[  130.150039][ T4725]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.150039][ T4725] 
[  130.150881][  T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.177014][ T6273] loop0: detected capacity change from 0 to 1024
[  130.183639][ T4725] 
[  130.183639][ T4725]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.183639][ T4725] 
[  130.228237][ T4194] 
[  130.228237][ T4194]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.228237][ T4194] 
[  130.297155][  T276] 
[  130.297155][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.297155][  T276] 
[  130.317819][ T4194] 
[  130.317819][ T4194]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.317819][ T4194] 
[  130.328777][ T6273] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  130.343550][ T6273] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  130.404153][ T6273] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[  130.747678][ T6266] loop3: detected capacity change from 0 to 32768
[  130.812974][ T6266] ialloc: diAlloc returned -5!
[  130.974771][ T6274] chnl_net:caif_netlink_parms(): no params data found
[  131.448125][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.463253][ T6311] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  131.527496][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.536361][ T6274] device bridge_slave_0 entered promiscuous mode
[  131.659982][ T6311] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.849: bad orphan inode 11
[  131.667898][ T6320] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  131.677650][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.677693][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.678726][ T6274] device bridge_slave_1 entered promiscuous mode
[  131.767038][ T6311] ext4_test_bit(bit=10, block=4) = 0
[  131.792201][ T6311] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  131.829550][ T6326] Zero length message leads to an empty skb
[  131.988923][ T6311] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.849: path /173/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  132.065720][ T6337] openvswitch: netlink: Actions may not be safe on all matching packets
[  132.090126][ T6274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.174491][ T6274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.297399][ T4232] Bluetooth: hci4: command 0x0409 tx timeout
[  132.333845][ T6347] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  132.385365][ T6274] team0: Port device team_slave_0 added
[  132.536244][ T6351] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  132.572292][ T6274] team0: Port device team_slave_1 added
[  132.584486][ T6355] set_capacity_and_notify: 5 callbacks suppressed
[  132.584504][ T6355] loop0: detected capacity change from 0 to 4096
[  132.598356][ T6351] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.702502][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.781886][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.850738][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  132.857139][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  132.900554][ T6355] ntfs3: loop0: ino=1f, "file3" failed to undo rename
[  132.934671][ T6274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.964086][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.976653][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.004569][ T6274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.234989][ T6274] device hsr_slave_0 entered promiscuous mode
[  133.250300][ T6274] device hsr_slave_1 entered promiscuous mode
[  133.265272][ T6274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  133.283670][ T6274] Cannot create hsr debugfs directory
[  133.590921][  T154] device hsr_slave_0 left promiscuous mode
[  133.616139][  T154] device hsr_slave_1 left promiscuous mode
[  133.633380][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.652754][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.671802][ T6365] loop2: detected capacity change from 0 to 32768
[  133.682952][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.714713][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.725044][  T154] device bridge_slave_1 left promiscuous mode
[  133.740359][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.740408][ T6365] (syz.2.868,6365,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  133.783108][  T154] device bridge_slave_0 left promiscuous mode
[  133.792725][ T6365] (syz.2.868,6365,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  133.802223][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.825483][ T6365] JBD2: Ignoring recovery information on journal
[  133.872949][ T6365] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  133.887948][  T154] device veth1_macvtap left promiscuous mode
[  133.894329][  T154] device veth0_macvtap left promiscuous mode
[  133.918964][  T154] device veth1_vlan left promiscuous mode
[  133.925000][  T154] device veth0_vlan left promiscuous mode
[  134.180015][ T4189] ocfs2: Unmounting device (7,2) on (node local)
[  134.305609][ T6385] loop3: detected capacity change from 0 to 4096
[  134.367676][ T5466] Bluetooth: hci4: command 0x041b tx timeout
[  134.409881][ T6385] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  134.424474][ T6385] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  134.473776][ T6362] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  134.646260][  T154] team0 (unregistering): Port device team_slave_1 removed
[  134.694061][  T154] team0 (unregistering): Port device team_slave_0 removed
[  134.724165][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.736399][ T6398] loop3: detected capacity change from 0 to 256
[  134.758469][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.835957][ T6398] FAT-fs (loop3): Directory bread(block 64) failed
[  134.854065][ T6398] FAT-fs (loop3): Directory bread(block 65) failed
[  134.864551][ T6398] FAT-fs (loop3): Directory bread(block 66) failed
[  134.868240][ T6403] comedi comedi3: rti800: I/O port conflict (0xf7,16)
[  134.876404][ T6398] FAT-fs (loop3): Directory bread(block 67) failed
[  134.889731][ T6398] FAT-fs (loop3): Directory bread(block 68) failed
[  134.902703][ T6398] FAT-fs (loop3): Directory bread(block 69) failed
[  134.912429][ T6398] FAT-fs (loop3): Directory bread(block 70) failed
[  134.923401][  T154] bond0 (unregistering): Released all slaves
[  134.924498][ T6398] FAT-fs (loop3): Directory bread(block 71) failed
[  134.945774][ T6398] FAT-fs (loop3): Directory bread(block 72) failed
[  134.953058][ T6398] FAT-fs (loop3): Directory bread(block 73) failed
[  135.084579][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  135.104183][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.148313][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  135.171503][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  135.182083][ T6407] Cannot find add_set index 0 as target
[  135.209932][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  135.340293][ T6274] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  135.387758][ T6274] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  135.439136][ T6274] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  135.476068][ T6274] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  135.512971][ T6414] IPVS: Unknown mcast interface: pimreg0
[  135.733373][ T6428] loop3: detected capacity change from 0 to 128
[  135.811507][ T6274] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.845748][ T6428] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  135.869442][ T6428] hpfs: filesystem error: improperly stopped
[  135.875498][ T6428] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  135.893117][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.908348][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.938747][ T6428] hpfs: You really don't want any checks? You are crazy...
[  135.940971][ T6274] 8021q: adding VLAN 0 to HW filter on device team0
[  135.946008][ T6428] hpfs: Code page index out of array
[  136.019837][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  136.033265][ T6405] loop4: detected capacity change from 0 to 40427
[  136.040659][ T6428] hpfs: code page support is disabled
[  136.077424][ T6428] hpfs: hpfs_map_4sectors(): unaligned read
[  136.092790][ T6428] hpfs: hpfs_map_4sectors(): unaligned read
[  136.104383][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.145408][ T6428] hpfs: filesystem error: unable to find root dir
[  136.164205][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.171417][ T6362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.191956][ T6405] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  136.209704][ T6405] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  136.249241][ T6405] F2FS-fs (loop4): invalid crc value
[  136.254989][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  136.273408][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  136.293794][ T6405] F2FS-fs (loop4): Found nat_bits in checkpoint
[  136.341267][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  136.414819][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.422005][ T6362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.453430][ T5466] Bluetooth: hci4: command 0x040f tx timeout
[  136.507718][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  136.531738][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  136.588338][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  136.600949][ T6405] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  136.643751][ T6405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  136.665557][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  136.699351][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  136.751490][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  136.789995][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  136.865003][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  136.897074][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  136.916331][ T6274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  136.970768][ T6274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.027665][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.048567][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.137799][ T6459] loop0: detected capacity change from 0 to 256
[  137.144957][ T6425] loop2: detected capacity change from 0 to 40427
[  137.244771][ T6425] F2FS-fs (loop2): invalid crc value
[  137.351384][ T6425] F2FS-fs (loop2): Found nat_bits in checkpoint
[  137.579344][ T6425] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  137.669878][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  137.716522][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  137.769463][ T6274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.877371][ T6425] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  137.996276][ T6489] loop3: detected capacity change from 0 to 1764
[  138.014117][ T6481] loop0: detected capacity change from 0 to 8192
[  138.146930][ T6481] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  138.207927][ T6481] REISERFS (device loop0): using ordered data mode
[  138.214491][ T6481] reiserfs: using flush barriers
[  138.357487][ T6481] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  138.477788][ T6481] REISERFS (device loop0): checking transaction log (loop0)
[  138.533634][ T4318] Bluetooth: hci4: command 0x0419 tx timeout
[  138.540816][ T6481] REISERFS (device loop0): Using r5 hash to sort names
[  138.575130][ T6481] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  138.641010][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  138.680355][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  138.689105][ T6481] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  138.773425][ T6274] device veth0_vlan entered promiscuous mode
[  138.832551][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  138.853335][ T6481] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  138.876503][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  138.918969][ T6481] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  138.932056][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  138.962771][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.003049][ T6274] device veth1_vlan entered promiscuous mode
[  139.012609][ T6481] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  139.165173][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  139.184561][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  139.196841][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.224992][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.245234][ T6274] device veth0_macvtap entered promiscuous mode
[  139.285936][ T6274] device veth1_macvtap entered promiscuous mode
[  139.364360][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.375207][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.388348][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.399731][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.415144][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.434124][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.444589][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.462772][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.508018][ T6274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.532278][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  139.556204][ T6543] loop0: detected capacity change from 0 to 16
[  139.570764][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  139.592703][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  139.608193][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  139.626775][ T6543] erofs: (device loop0): mounted with root inode @ nid 36.
[  139.662413][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.675374][ T6543] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89
[  139.688318][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.709952][ T6543] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89
[  139.737277][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.744426][ T6543] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89
[  139.768717][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.777762][ T6543] attempt to access beyond end of device
[  139.777762][ T6543] loop0: rw=524288, want=24, limit=16
[  139.805445][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.816377][ T6543] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  139.825197][   T26] audit: type=1800 audit(1779276407.132:19): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.919" name="file2" dev="loop0" ino=89 res=0 errno=0
[  139.878819][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.907036][ T6274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.925425][ T6274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.947481][ T6274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.970695][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  139.994447][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.083095][ T6274] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.117261][ T6274] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.126023][ T6274] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.140427][ T6274] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.190931][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.927'.
[  140.203166][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.927'.
[  140.382419][ T3085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.406178][ T3085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.455315][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  140.489041][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.508781][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.582747][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  140.754640][ T6584] loop0: detected capacity change from 0 to 512
[  140.823851][ T6591] loop3: detected capacity change from 0 to 64
[  140.826581][ T6584] EXT4-fs warning (device loop0): ext4_multi_mount_protect:326: fsck is running on the filesystem
[  140.841062][ T6584] EXT4-fs warning (device loop0): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  140.923154][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  141.020087][ T6598] loop2: detected capacity change from 0 to 128
[  141.128312][ T6598] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.152016][ T6598] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.472753][ T6618] loop0: detected capacity change from 0 to 512
[  141.556476][ T6618] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.946: iget: bad i_size value: 38620345925642
[  141.757518][ T6618] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.946: couldn't read orphan inode 15 (err -117)
[  141.787775][ T6618] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  141.808427][    C1] vkms_vblank_simulate: vblank timer overrun
[  141.833201][ T6633] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  142.379319][ T6658] loop5: detected capacity change from 0 to 2048
[  142.538773][ T6658] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  142.599229][ T6658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.736570][ T6675] loop2: detected capacity change from 0 to 1024
[  142.955345][ T6675] hfsplus: b-tree write err: -5, ino 2
[  143.093588][ T6687] loop3: detected capacity change from 0 to 1024
[  143.109099][ T4248] hfsplus: b-tree write err: -5, ino 25
[  143.115080][ T4248] hfsplus: b-tree write err: -5, ino 4
[  143.141373][ T4248] hfsplus: b-tree write err: -5, ino 2
[  143.167852][ T4248] hfsplus: b-tree write err: -5, ino 26
[  143.330808][ T6699] loop0: detected capacity change from 0 to 128
[  143.514737][ T6699] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  143.565472][ T6699] hpfs: filesystem error: improperly stopped
[  143.584168][ T6699] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  143.667331][ T6699] hpfs: You really don't want any checks? You are crazy...
[  143.698121][ T6699] hpfs: hpfs_map_sector(): read error
[  143.703560][ T6699] hpfs: code page support is disabled
[  143.724830][ T6714] tipc: Invalid UDP bearer configuration
[  143.724870][ T6714] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  143.738536][ T6699] hpfs: hpfs_map_4sectors(): unaligned read
[  143.754124][ T6699] hpfs: hpfs_map_4sectors(): unaligned read
[  143.760191][ T6716] loop3: detected capacity change from 0 to 64
[  143.856533][ T6699] hpfs: filesystem error: unable to find root dir
[  144.115680][ T6719] loop5: detected capacity change from 0 to 4096
[  144.171837][ T6729] loop0: detected capacity change from 0 to 512
[  144.239399][ T6719] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  144.338930][ T6729] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  144.429240][ T6729] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,nouid32,init_itable=0x0000000000000006,sysvgroups,errors=remount-ro,jqfmt=vfsv0,. Quota mode: writeback.
[  144.478427][ T6729] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.507847][ T6719] ntfs: volume version 3.1.
[  144.647624][ T5466] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  144.808102][ T6745] loop0: detected capacity change from 0 to 256
[  144.887897][ T5466] usb 3-1: Using ep0 maxpacket: 8
[  144.891453][ T6745] FAT-fs (loop0): Directory bread(block 64) failed
[  144.931219][ T6745] FAT-fs (loop0): Directory bread(block 65) failed
[  144.969777][ T6745] FAT-fs (loop0): Directory bread(block 66) failed
[  144.976421][ T6745] FAT-fs (loop0): Directory bread(block 67) failed
[  145.024002][ T5466] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  145.044482][ T6745] FAT-fs (loop0): Directory bread(block 68) failed
[  145.078194][ T6745] FAT-fs (loop0): Directory bread(block 69) failed
[  145.100594][ T6745] FAT-fs (loop0): Directory bread(block 70) failed
[  145.140358][ T6745] FAT-fs (loop0): Directory bread(block 71) failed
[  145.158653][ T6745] FAT-fs (loop0): Directory bread(block 72) failed
[  145.182247][ T6745] FAT-fs (loop0): Directory bread(block 73) failed
[  145.197625][ T5466] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  145.224964][ T5466] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  145.264259][ T5466] usb 3-1: Product: syz
[  145.275837][ T5466] usb 3-1: Manufacturer: syz
[  145.303697][ T5466] usb 3-1: SerialNumber: syz
[  145.587543][ T5466] usb 3-1: Handspring Visor / Palm OS: No valid connect info available
[  145.602301][ T5466] usb 3-1: Handspring Visor / Palm OS: port 0, is for HotSync use
[  145.649463][ T5466] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  145.678874][ T5466] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[  145.797534][ T5466] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[  145.807453][ T5466] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  145.840721][ T6778] loop4: detected capacity change from 0 to 2048
[  145.876838][ T5466] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  145.904547][ T6778] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  145.927018][ T5466] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  145.987058][ T4181] udevd[4181]: incorrect nilfs2 checksum on /dev/loop4
[  145.993210][ T5466] usb 3-1: USB disconnect, device number 5
[  146.052369][ T6785] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.052665][ T5466] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  146.095546][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'.
[  146.181761][ T6777] loop0: detected capacity change from 0 to 8192
[  146.217497][ T5466] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  146.259402][ T5466] visor 3-1:1.0: device disconnected
[  146.387627][ T6777] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  146.396961][ T6777] REISERFS (device loop0): using ordered data mode
[  146.427270][ T6777] reiserfs: using flush barriers
[  146.446235][ T6765] loop5: detected capacity change from 0 to 32768
[  146.466118][ T6777] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.511413][ T6796] loop4: detected capacity change from 0 to 256
[  146.513375][ T6777] REISERFS (device loop0): checking transaction log (loop0)
[  146.551820][ T6765] (syz.5.998,6765,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  146.611438][ T6765] (syz.5.998,6765,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  146.629648][ T6796] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x65521afd, utbl_chksum : 0xe619d30d)
[  146.730202][ T6765] JBD2: Ignoring recovery information on journal
[  146.811145][   T26] audit: type=1800 audit(1779276414.122:20): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1009" name="file1" dev="loop4" ino=1048700 res=0 errno=0
[  146.822580][ T6777] REISERFS (device loop0): Using r5 hash to sort names
[  146.847905][ T6777] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  146.882399][ T6765] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  147.510251][ T6274] ocfs2: Unmounting device (7,5) on (node local)
[  147.731646][ T6803] 
[  147.731646][ T6803]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.731646][ T6803] 
[  147.750257][ T5466] Bluetooth: hci4: command 0x0405 tx timeout
[  147.763415][ T6803] 
[  147.763415][ T6803]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.763415][ T6803] 
[  147.783048][ T6803] 
[  147.783048][ T6803]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.783048][ T6803] 
[  147.847414][ T6803] 
[  147.847414][ T6803]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.847414][ T6803] 
[  147.889062][ T6803] 
[  147.889062][ T6803]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.889062][ T6803] 
[  147.934464][  T276] 
[  147.934464][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  147.934464][  T276] 
[  148.085366][ T3085] 
[  148.085366][ T3085]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.085366][ T3085] 
[  148.106694][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.130535][ T3085] 
[  148.130535][ T3085]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.130535][ T3085] 
[  148.167047][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  148.182518][  T276] 
[  148.182518][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.182518][  T276] 
[  148.199591][ T4195] 
[  148.199591][ T4195]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.199591][ T4195] 
[  148.237545][ T4195] 
[  148.237545][ T4195]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.237545][ T4195] 
[  148.248355][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  148.408738][ T6838] device gretap0 entered promiscuous mode
[  148.414890][ T6838] device vlan2 entered promiscuous mode
[  149.928679][ T6856] set_capacity_and_notify: 1 callbacks suppressed
[  149.928695][ T6856] loop5: detected capacity change from 0 to 32768
[  150.000128][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'.
[  150.034296][ T6856] 
[  150.034296][ T6856]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.034296][ T6856] 
[  150.104593][ T6856] 
[  150.104593][ T6856]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.104593][ T6856] 
[  150.158116][ T6856] 
[  150.158116][ T6856]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.158116][ T6856] 
[  150.212191][ T6899] loop3: detected capacity change from 0 to 256
[  150.231092][ T6856] 
[  150.231092][ T6856]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.231092][ T6856] 
[  150.287479][ T6856] 
[  150.287479][ T6856]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.287479][ T6856] 
[  150.344825][  T276] 
[  150.344825][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.344825][  T276] 
[  150.426780][ T4725] 
[  150.426780][ T4725]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.426780][ T4725] 
[  150.453317][ T4725] 
[  150.453317][ T4725]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.453317][ T4725] 
[  150.502249][ T6274] 
[  150.502249][ T6274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.502249][ T6274] 
[  150.530263][ T6274] 
[  150.530263][ T6274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.530263][ T6274] 
[  150.563717][  T277] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN
[  150.575496][  T277] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  150.583934][  T277] CPU: 0 PID: 277 Comm: jfsCommit Not tainted syzkaller #0
[  150.591167][  T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  150.601247][  T277] RIP: 0010:lmLogSync+0x137/0x9e0
[  150.606310][  T277] Code: 59 cc fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 97 73 ec fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 7b 73 ec fe 49 8b 3f e8 33 59 cc fe
[  150.625947][  T277] RSP: 0018:ffffc90002d0fc60 EFLAGS: 00010206
[  150.632044][  T277] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: d49b1cda019c2800
[  150.640138][  T277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  150.648256][  T277] RBP: ffffc90002d0fd68 R08: ffffc90002d0fbdf R09: ffffc90002d0fba4
[  150.656350][  T277] R10: dffffc0000000000 R11: fffff520005a1f7c R12: 1ffff920004cc227
[  150.664352][  T277] R13: ffff888025564800 R14: ffff88807a642238 R15: 0000000000000030
[  150.672350][  T277] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  150.681355][  T277] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  150.687977][  T277] CR2: 00007f48c040edac CR3: 0000000024faf000 CR4: 00000000003506f0
[  150.695981][  T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  150.703976][  T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  150.711981][  T277] Call Trace:
[  150.715279][  T277]  <TASK>
[  150.718238][  T277]  ? mutex_lock_io_nested+0x60/0x60
[  150.723478][  T277]  ? lmWriteRecord+0x1aa0/0x1aa0
[  150.728449][  T277]  ? __lock_acquire+0x7d10/0x7d10
[  150.733503][  T277]  ? do_raw_spin_lock+0x128/0x2f0
[  150.738564][  T277]  ? __rwlock_init+0x140/0x140
[  150.743370][  T277]  jfs_syncpt+0x77/0x90
[  150.747737][  T277]  txEnd+0x2e1/0x520
[  150.751666][  T277]  jfs_lazycommit+0x5b8/0xb40
[  150.756379][  T277]  ? txFreelock+0x5a0/0x5a0
[  150.760910][  T277]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  150.766836][  T277]  ? sched_dynamic_update+0x210/0x210
[  150.772246][  T277]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  150.778355][  T277]  ? __kthread_parkme+0x157/0x1b0
[  150.783447][  T277]  kthread+0x436/0x520
[  150.787544][  T277]  ? txFreelock+0x5a0/0x5a0
[  150.787913][ T6907] loop4: detected capacity change from 0 to 4096
[  150.792152][  T277]  ? kthread_blkcg+0xd0/0xd0
[  150.792181][  T277]  ret_from_fork+0x1f/0x30
[  150.807550][  T277]  </TASK>
[  150.810595][  T277] Modules linked in:
[  150.814530][    C0] vkms_vblank_simulate: vblank timer overrun
[  150.830785][ T6907] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  150.949717][ T6907] ntfs3: loop4: Failed to load $Extend.
[  151.023929][ T6910] loop2: detected capacity change from 0 to 4096
[  151.180525][  T277] ---[ end trace 9a88abcf08a903d1 ]---
[  151.186236][  T277] RIP: 0010:lmLogSync+0x137/0x9e0
[  151.191661][  T277] Code: 59 cc fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 97 73 ec fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 7b 73 ec fe 49 8b 3f e8 33 59 cc fe
[  151.213648][  T277] RSP: 0018:ffffc90002d0fc60 EFLAGS: 00010206
[  151.220507][  T277] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: d49b1cda019c2800
[  151.228931][  T277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  151.236955][  T277] RBP: ffffc90002d0fd68 R08: ffffc90002d0fbdf R09: ffffc90002d0fba4
[  151.245681][  T277] R10: dffffc0000000000 R11: fffff520005a1f7c R12: 1ffff920004cc227
[  151.253947][  T277] R13: ffff888025564800 R14: ffff88807a642238 R15: 0000000000000030
[  151.264933][  T277] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  151.273998][  T277] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  151.282091][  T277] CR2: 00007f75251de2f8 CR3: 000000007e5e2000 CR4: 00000000003506f0
[  151.290175][  T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  151.298310][  T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  151.306321][  T277] Kernel panic - not syncing: Fatal exception
[  151.312759][  T277] Kernel Offset: disabled
[  151.317260][  T277] Rebooting in 86400 seconds..