last executing test programs:

19.915463004s ago: executing program 1 (id=929):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x29, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

19.528512877s ago: executing program 1 (id=940):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f00000001c0)})

19.410106107s ago: executing program 1 (id=932):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x687, &(0x7f0000000fc0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)

19.007465039s ago: executing program 1 (id=933):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x6, &(0x7f00000000c0)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@noquota}, {}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@noquota}, {@quota}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000cc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./file0/file0\x00')

18.196176305s ago: executing program 1 (id=937):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200082, 0x2, 0x0, 0x1, 0x4})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)

16.356009825s ago: executing program 1 (id=961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

16.234906266s ago: executing program 32 (id=961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

2.780845214s ago: executing program 4 (id=1087):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
close(r0)

2.322979066s ago: executing program 2 (id=1092):
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}})

2.170721737s ago: executing program 2 (id=1095):
r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000200), 0x80040, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ppoll(&(0x7f0000000440)=[{r1, 0x1000}, {r0, 0x23}], 0x2, 0x0, 0x0, 0x0)

1.959259229s ago: executing program 2 (id=1099):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000040)={[{@noblock_validity}, {@stripe}, {@jqfmt_vfsv1}]}, 0x0, 0x45d, &(0x7f0000001480)="$eJzs3MtvG0UYAPBvnTjpg5JQyqMvCBRExSNp0gc9cCkCiQNISHAo4hTStCp1G9QEiVYVFA7hiCpxRxyR+Au4UC4IOCFxhTtCqlAvFE5Gu95NXcd27MaNof79pFVndiee+XZ36vGM1wEMrImI2B0R90TErxExFhFJY4GJ2j83rl+a+/v6pbkkqtU3/kyycn9dvzRXFC3+bmstUx1qU+/y2xGzlcr8+Tw/tXT2vanFCxefO3129tT8qflzM0ePHjq4d+TIzOGexLktbeuuDxf27HzlrSuvzR2/8s6PXyd53NEQR69MZGctM7bccOzJXlfWZ9vq0slwHxtCV8YjIr1c5az/j8VQbF45NhYvf9LXxgF3VLVaqo7euqtcl75cBe5i6WgeGETFG336+bfYNnD40XfXjsXKPMaNfKsdGY5SXqZ8B+ufiIjjl//5It3iDs1DAADUu3osIp5tNv4rxYN15e7N14bGI+K+iNgeEfdHxI6IeCAiK/tQRDzcZf0TDfnV45/q2G0F1qF0/PdCvrZ16/ivGP3F+FCe25bFX05Onq7MH8jPyf4oj6b56TZ1fPfSL5+1OlY//ku3tP5iLJi344/hhgm6E7Pl2fXEXO/ax7UFgNXxJ1Es46Tj450RsauL1y1nc4s1p5/+ak+rcmvH30YP1pmqX0Y8Vbv+l6Mh/kLScn1y+vkjM4enNkVl/sBUcVes9tPPy6+3qn9d8ffAtavV2NL0/l+JfzzZFLF44eKZbL12sfs6ln/7tOVnmtu7/5dmR5I3s/RIvu+D2aWl89MRI8mrq/fP3PzbIl+UT+///fua9//tcfNM7I6I9CbeGxGPRMSjedsfi4jHI2Jfm/h/ePGJd1ca1HH8o21esXfS+E+sdf2j/vp3nxg68/03rerv7PofylL78z3p9V8rrk4buJ5zBwAAAP8Xpew78ElpciVdKk1O1r7DvyO2lCoLi0vPnFx4/9yJ2nflx6NcKma6xurmQ6fzueEiP9OQP5jPG38+tDnLT84tVLqZTwR6b2uL/p/6vd0DPMDdwfNaMLj0fxhc+j8MLv0fBpf+D4OrWf//qA/tADbeGu//mzeqHcDGM/6HwaX/w+DS/2EgtXw2vrSuR/4l+pT4dmR9v9XQeSJK/5GQ75pEOZoeGu74xyxuI5FExGjTQ/3+nwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA3/g0AAP//wMnoQw==")
setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00')

1.867967029s ago: executing program 5 (id=1100):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0936, {0x0, 0x6fd8e84b}, 0x3, 0xed}})

1.76871301s ago: executing program 5 (id=1102):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000003c0)=0x3)

1.73686565s ago: executing program 4 (id=1104):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)=@in6={0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x20, 0x40000}, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0)

1.62071486s ago: executing program 2 (id=1105):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x10000, 0x5, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000380)='GPL\x00', 0x1, 0xff4, &(0x7f0000002000)=""/4084}, 0x80)

1.551709391s ago: executing program 5 (id=1106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.541512531s ago: executing program 4 (id=1107):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00')
exit(0x8)
getdents(r0, 0x0, 0x48)

1.367828432s ago: executing program 2 (id=1108):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010006, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@discard_size={'discard', 0x3d, 0xc}}, {@grpquota}, {@discard_size={'discard', 0x3d, 0x8}}, {@usrquota}, {@nodiscard}, {@noquota}]}, 0x1, 0x6310, &(0x7f0000019f80)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')

1.363680462s ago: executing program 5 (id=1109):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4402}, 0x0)

1.201117002s ago: executing program 0 (id=1111):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x24, r1, 0x9197ec47cc236d3b, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

1.200347102s ago: executing program 3 (id=1112):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc)

1.155908823s ago: executing program 5 (id=1113):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x7, 0x2, 0x2, 0x0, {0x0, 0x4e21, [0x0, 0x1], [0x0, 0x0, 0x2], 0x0, [0x0, 0x7ff]}}}, 0x4c}}, 0x0)

1.056234674s ago: executing program 0 (id=1114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x48}}, 0x20000000)

1.045630954s ago: executing program 3 (id=1115):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
shutdown(r0, 0x0)

1.020032894s ago: executing program 5 (id=1116):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0xfffffffffffffffd)

893.583054ms ago: executing program 0 (id=1117):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xff, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xfd, 0x55, 0x9, 0xf7, 0x7}})

883.444635ms ago: executing program 3 (id=1118):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

769.614285ms ago: executing program 3 (id=1119):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)

643.872796ms ago: executing program 0 (id=1120):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a"], 0x24}}, 0x0)

634.349906ms ago: executing program 3 (id=1121):
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x30, 0x10}}], 0x1, 0x4080)

619.554156ms ago: executing program 4 (id=1122):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x8850)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)

447.919827ms ago: executing program 0 (id=1123):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

447.631997ms ago: executing program 4 (id=1124):
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffff8}, 0x0)

335.755537ms ago: executing program 4 (id=1125):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x40d})
close(r0)

121.614709ms ago: executing program 0 (id=1126):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0x3}}, 0xffff}, 0x90)

49.257779ms ago: executing program 3 (id=1127):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4)
close(r0)

0s ago: executing program 2 (id=1128):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20001)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00S'])

kernel console output (not intermixed with test programs):

city change from 0 to 512
[   82.922938][ T4889] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   82.931049][ T4898] loop3: detected capacity change from 0 to 512
[   83.025816][ T4889] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.210: iget: bad i_size value: 140737488355338
[   83.039267][ T4856] loop0: detected capacity change from 0 to 32768
[   83.055508][ T4898] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   83.091576][ T4898] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   83.124865][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[   83.152848][ T4889] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.210: couldn't read orphan inode 15 (err -117)
[   83.166348][ T4898] EXT4-fs (loop3): 1 truncate cleaned up
[   83.172399][ T4898] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[   83.177853][ T4856] JBD2: Ignoring recovery information on journal
[   83.227987][ T4889] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,dioread_nolock,,errors=continue. Quota mode: writeback.
[   83.249969][ T4889] EXT4-fs warning (device loop4): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[   83.271450][ T4898] EXT4-fs (loop3): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback.
[   83.387959][ T4914] kernel profiling enabled (shift: 9)
[   83.418243][ T4856] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   83.439750][ T4917] loop4: detected capacity change from 0 to 512
[   83.507498][ T4917] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   83.572228][ T4917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   83.627929][ T4917] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.217: inode has both inline data and extents flags
[   83.682914][ T4922] loop3: detected capacity change from 0 to 1024
[   83.702578][ T4917] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.217: couldn't read orphan inode 15 (err -117)
[   83.737870][ T4856] (syz.0.200,4856,1):ocfs2_remount:631 ERROR: Cannot change data mode on remount
[   83.809494][ T4917] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none.
[   83.817318][ T4856] syz.0.200 (4856) used greatest stack depth: 20864 bytes left
[   83.920808][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[   84.125849][ T1272] hfsplus: b-tree write err: -5, ino 4
[   84.160744][ T4938] loop2: detected capacity change from 0 to 64
[   84.253825][ T4940] tipc: Invalid UDP bearer configuration
[   84.253860][ T4940] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   84.466836][ T4948] loop4: detected capacity change from 0 to 64
[   84.592420][ T4948] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop4
[   84.600177][ T4954] loop2: detected capacity change from 0 to 4096
[   84.722130][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   84.761665][ T4967] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.001284][ T4977] loop0: detected capacity change from 0 to 2048
[   85.011328][   T23] usb 2-1: Using ep0 maxpacket: 32
[   85.064693][ T4977] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   85.088977][ T4977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.122181][ T4559] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   85.142484][   T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   85.151093][ T4983] loop2: detected capacity change from 0 to 256
[   85.152386][   T23] usb 2-1: config 0 has no interface number 0
[   85.187457][ T4247] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   85.198879][ T4983] exfat: Deprecated parameter 'utf8'
[   85.265996][ T4983] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   85.344537][   T23] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[   85.381657][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.399811][   T23] usb 2-1: Product: syz
[   85.411581][   T23] usb 2-1: Manufacturer: syz
[   85.426711][   T23] usb 2-1: SerialNumber: syz
[   85.447839][   T23] usb 2-1: config 0 descriptor??
[   85.482260][ T4247] usb 4-1: Using ep0 maxpacket: 8
[   85.509110][   T23] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[   85.541947][   T23] usb 2-1: selecting invalid altsetting 1
[   85.547750][   T23] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[   85.555576][ T4559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   85.557609][ T4989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'.
[   85.571077][ T4559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   85.590982][   T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   85.602449][   T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[   85.610953][   T23] usb 2-1: media controller created
[   85.616749][ T4559] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[   85.626267][ T4247] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.637554][ T4559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.652035][ T4247] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.666836][ T4559] usb 5-1: config 0 descriptor??
[   85.678627][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.687931][ T4247] usb 4-1: config 0 interface 0 has no altsetting 0
[   85.694995][ T4247] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[   85.719158][ T4247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.727797][ T4973] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   85.739049][ T4991] loop0: detected capacity change from 0 to 4096
[   85.749066][ T4247] usb 4-1: config 0 descriptor??
[   85.783096][ T4995] xt_HMARK: proto mask must be zero with L3 mode
[   85.802899][   T23] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[   85.813149][   T23] zl10353_read_register: readreg error (reg=127, ret==-71)
[   85.842173][   T23] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[   85.868769][ T4991] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   85.895129][   T23] usb 2-1: USB disconnect, device number 3
[   86.029681][ T4991] ntfs3: loop0: MFT: r=b, expect seq=0 instead of b!
[   86.206716][ T4559] glorious 0003:22D4:1503.0004: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.4-1/input0
[   86.254519][ T5013] loop0: detected capacity change from 0 to 128
[   86.270220][ T4247] hid-generic 0003:28BD:0905.0005: unbalanced collection at end of report description
[   86.286103][ T4247] hid-generic: probe of 0003:28BD:0905.0005 failed with error -22
[   86.356232][ T5013] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none.
[   86.381621][ T5013] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.424953][ T4247] usb 5-1: USB disconnect, device number 3
[   86.564431][ T1107] usb 4-1: USB disconnect, device number 3
[   86.598102][ T5024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.267'.
[   86.784930][ T5022] loop1: detected capacity change from 0 to 32768
[   86.798967][ T5022] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.268 (5022)
[   86.822092][ T5022] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   86.831673][ T5022] BTRFS info (device loop1): using free space tree
[   86.838402][ T5022] BTRFS info (device loop1): has skinny extents
[   86.869941][ T5022] BTRFS info (device loop1): enabling ssd optimizations
[   86.961942][ T4442] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   87.234233][ T4442] usb 1-1: Using ep0 maxpacket: 16
[   87.382162][ T4442] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.399431][ T4442] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   87.622225][ T4442] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   87.631527][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.276'.
[   87.645906][ T5051] loop3: detected capacity change from 0 to 32768
[   87.654146][ T4442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.662205][ T4442] usb 1-1: Product: syz
[   87.673028][ T5060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.276'.
[   87.684103][ T4442] usb 1-1: Manufacturer: syz
[   87.698808][ T4442] usb 1-1: SerialNumber: syz
[   87.751114][ T5060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.276'.
[   87.771554][ T5051] XFS (loop3): Mounting V5 Filesystem
[   87.821202][ T5049] loop2: detected capacity change from 0 to 32768
[   87.845451][ T5051] XFS (loop3): Ending clean mount
[   87.856752][ T5051] XFS (loop3): Quotacheck needed: Please wait.
[   87.908252][ T5051] XFS (loop3): Quotacheck: Done.
[   87.959778][ T5049] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   87.975585][ T4197] XFS (loop3): Unmounting Filesystem
[   88.023314][ T5052] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   88.074186][ T4184] ocfs2: Unmounting device (7,2) on (node local)
[   88.082116][ T4442] usb 1-1: 0:2 : does not exist
[   88.142435][ T4442] usb 1-1: USB disconnect, device number 4
[   88.196889][ T5000] udevd[5000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   88.446705][ T5052] usb 2-1: unable to get BOS descriptor or descriptor too short
[   88.513275][ T5052] usb 2-1: not running at top speed; connect to a high speed hub
[   88.592421][ T5052] usb 2-1: config 8 has an invalid interface number: 185 but max is 1
[   88.615273][ T5094] loop2: detected capacity change from 0 to 2048
[   88.619686][ T5052] usb 2-1: config 8 has an invalid interface number: 135 but max is 1
[   88.672466][ T5052] usb 2-1: config 8 has an invalid descriptor of length 125, skipping remainder of the config
[   88.673299][ T5095] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.719856][ T5052] usb 2-1: config 8 has no interface number 0
[   88.750259][ T5052] usb 2-1: config 8 has no interface number 1
[   88.768163][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'.
[   88.780500][ T5052] usb 2-1: config 8 interface 135 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   88.828992][ T5052] usb 2-1: config 8 interface 185 has no altsetting 0
[   88.856053][ T5052] usb 2-1: config 8 interface 135 has no altsetting 0
[   89.106320][ T5052] usb 2-1: string descriptor 0 read error: -22
[   89.132811][ T5052] usb 2-1: New USB device found, idVendor=2040, idProduct=7270, bcdDevice=ae.97
[   89.154841][ T5052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.177141][ T5125] openvswitch: netlink: Actions may not be safe on all matching packets
[   89.239313][ T5052] usb 2-1: unknown interface protocol 0x4f, assuming v1
[   89.240401][ T5119] loop2: detected capacity change from 0 to 4096
[   89.279340][ T5052] usb 2-1: 135:2 : does not exist
[   89.284432][ T5128] netlink: 232 bytes leftover after parsing attributes in process `syz.3.306'.
[   89.284483][ T5128] netlink: 56 bytes leftover after parsing attributes in process `syz.3.306'.
[   89.319641][ T5119] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[   89.505826][ T5139] loop0: detected capacity change from 0 to 256
[   89.520550][ T4261] usb 2-1: USB disconnect, device number 4
[   89.563354][ T5142] loop3: detected capacity change from 0 to 16
[   89.635108][ T5142] erofs: (device loop3): mounted with root inode @ nid 36.
[   89.659306][ T5139] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d)
[   89.760227][ T5000] udevd[5000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.135/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.940586][ T5154] netlink: 19 bytes leftover after parsing attributes in process `syz.0.317'.
[   90.160072][ T5162] netlink: 'syz.1.320': attribute type 2 has an invalid length.
[   90.237069][ T5166] loop3: detected capacity change from 0 to 512
[   90.242567][ T5169] netlink: 'syz.0.324': attribute type 2 has an invalid length.
[   90.302206][ T5171] loop1: detected capacity change from 0 to 1024
[   90.367890][ T5166] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.472434][ T5166] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.635983][ T5190] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[   90.653605][    T9] hfsplus: b-tree write err: -5, ino 4
[   90.677029][ T5166] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[   90.692152][ T5190] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   90.738224][ T5190] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   90.742417][ T5166] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   90.759889][ T5190] comedi comedi3: 8255: I/O port conflict (0xc,4)
[   90.796495][ T5190] comedi comedi3: 8255: I/O port conflict (0x9,4)
[   90.804881][ T5166] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.323: Failed to acquire dquot type 0
[   90.828991][ T5190] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[   90.844465][ T5190] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   90.851077][ T5190] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[   90.856424][ T5166] overlayfs: failed to verify origin (/, ino=2, err=-117)
[   90.858844][ T5190] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   90.873912][ T5190] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[   90.881046][ T5190] comedi comedi3: 8255: I/O port conflict (0x9,4)
[   90.887770][ T5190] comedi comedi3: 8255: I/O port conflict (0x6,4)
[   90.894465][ T5166] overlayfs: failed to verify upper root origin
[   91.072169][ T4292] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   91.311995][ T4292] usb 3-1: Using ep0 maxpacket: 32
[   91.381851][ T5222] netlink: 'syz.3.349': attribute type 1 has an invalid length.
[   91.432130][ T4292] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.457310][ T4292] usb 3-1: config 0 interface 0 has no altsetting 0
[   91.486888][ T4292] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[   91.529087][ T4292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.541640][ T5228] loop3: detected capacity change from 0 to 1024
[   91.561032][ T4292] usb 3-1: config 0 descriptor??
[   91.711655][ T5228] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   92.022348][ T5214] loop1: detected capacity change from 0 to 32768
[   92.064870][ T4292] lg-g15 0003:046D:C225.0006: item fetching failed at offset 3/6
[   92.090813][ T4292] lg-g15: probe of 0003:046D:C225.0006 failed with error -22
[   92.172031][ T5214] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   92.272158][ T4439] usb 3-1: USB disconnect, device number 4
[   92.314686][ T4186] ocfs2: Unmounting device (7,1) on (node local)
[   92.446404][ T5263] loop4: detected capacity change from 0 to 16
[   92.466475][ T5245] loop0: detected capacity change from 0 to 32768
[   92.502198][ T5263] erofs: (device loop4): mounted with root inode @ nid 36.
[   92.556494][ T5265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'.
[   92.558823][ T5263] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   92.600530][ T5245] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   92.624695][ T5263] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851]
[   92.668979][ T5263] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117]
[   92.720590][ T5245] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   92.731298][ T5254] loop3: detected capacity change from 0 to 32768
[   92.774269][  T154] (kworker/u4:2,154,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[   92.797408][ T5254] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   92.954791][ T5254] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[   93.020774][    T9] (kworker/u4:0,9,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[   93.025355][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[   93.156361][ T4197] ocfs2: Unmounting device (7,3) on (node local)
[   93.614889][ T5301] loop2: detected capacity change from 0 to 16
[   93.689289][ T5301] erofs: (device loop2): mounted with root inode @ nid 36.
[   93.958069][ T5320] loop3: detected capacity change from 0 to 1024
[   94.263468][ T5335] loop3: detected capacity change from 0 to 64
[   94.509420][ T5347] loop1: detected capacity change from 0 to 16
[   94.557774][ T5347] erofs: (device loop1): mounted with root inode @ nid 36.
[   94.596470][ T5347] attempt to access beyond end of device
[   94.596470][ T5347] loop1: rw=524288, want=3145744, limit=16
[   94.702222][ T5347] attempt to access beyond end of device
[   94.702222][ T5347] loop1: rw=524288, want=524296, limit=16
[   94.758773][ T5350] loop4: detected capacity change from 0 to 32768
[   94.778133][ T5347] attempt to access beyond end of device
[   94.778133][ T5347] loop1: rw=0, want=3145744, limit=16
[   94.799765][ T5354] loop3: detected capacity change from 0 to 1024
[   94.827061][ T5350] (syz.4.407,5350,0):ocfs2_check_set_options:1220 ERROR: ACL support requested but extended attributes feature is not enabled
[   94.843018][ T5350] (syz.4.407,5350,0):ocfs2_fill_super:1177 ERROR: status = -22
[   94.860413][ T5357] loop2: detected capacity change from 0 to 16
[   94.896029][   T26] audit: type=1800 audit(2000000002.550:2): pid=5347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.406" name="file3" dev="loop1" ino=89 res=0 errno=0
[   94.934949][ T5357] erofs: (device loop2): mounted with root inode @ nid 36.
[   95.033360][ T5354] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[   95.043140][ T5357] Invalid ELF header len 10
[   95.242275][ T5363] loop3: detected capacity change from 0 to 512
[   95.334589][ T5363] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,usrquota,bsdgroups,,errors=continue. Quota mode: writeback.
[   95.439775][ T5363] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   95.483691][ T5374] overlayfs: unrecognized mount option "\loc" or missing value
[   95.728272][ T5363] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #2: comm syz.3.413: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   96.112119][ T5368] loop1: detected capacity change from 0 to 32768
[   96.121285][ T5386] loop3: detected capacity change from 0 to 8192
[   96.201130][ T5386] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   96.247187][ T5386] REISERFS (device loop3): using ordered data mode
[   96.310562][ T5386] reiserfs: using flush barriers
[   96.381727][ T5386] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   96.415826][ T5386] REISERFS (device loop3): checking transaction log (loop3)
[   96.448028][ T5386] REISERFS (device loop3): Using r5 hash to sort names
[   96.460992][ T5400] sg_write: process 156 (syz.0.429) changed security contexts after opening file descriptor, this is not allowed.
[   96.482292][ T5386] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   96.512143][ T5386] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   96.622860][ T5402] loop1: detected capacity change from 0 to 512
[   96.813797][ T5406] loop0: detected capacity change from 0 to 4096
[   96.882470][ T5402] EXT4-fs (loop1): Test dummy encryption mode enabled
[   96.886049][ T5406] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   96.908703][ T5402] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   96.955273][ T5402] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.430: bad orphan inode 131083
[   96.968474][ T5406] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   97.040535][ T5402] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[   97.086137][ T5406] ntfs3: loop0: ino=5, "/" directory corrupted
[   97.215878][ T5424] loop4: detected capacity change from 0 to 512
[   97.251358][ T5417] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.346391][ T5402] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   97.357025][ T5424] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   97.409715][ T5424] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   97.482492][ T5424] EXT4-fs (loop4): 1 truncate cleaned up
[   97.488279][ T5424] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nombcache,debug_want_extra_isize=0x0000000000000068,i_version,bsdgroups,nodioread_nolock,,errors=continue. Quota mode: none.
[   97.525848][   T26] audit: type=1326 audit(2000000005.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff66aee0fc9 code=0x0
[   97.687494][ T5442] mkiss: ax0: crc mode is auto.
[   97.943373][ T5458] loop0: detected capacity change from 0 to 512
[   97.949727][   T26] audit: type=1800 audit(2000000005.600:4): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.451" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   98.042181][ T5458] EXT4-fs (loop0): Ignoring removed nobh option
[   98.068416][ T5458] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[   98.124776][ T5458] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.450: attempt to clear invalid blocks 1 len 1
[   98.146458][ T5458] EXT4-fs (loop0): Remounting filesystem read-only
[   98.198845][ T5458] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   98.257844][ T5458] EXT4-fs (loop0): Remounting filesystem read-only
[   98.278205][ T5458] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.450: invalid indirect mapped block 1819239214 (level 0)
[   98.326831][ T5458] EXT4-fs (loop0): Remounting filesystem read-only
[   98.338869][ T5458] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.450: invalid indirect mapped block 1819239214 (level 1)
[   98.368538][ T5458] EXT4-fs (loop0): Remounting filesystem read-only
[   98.392705][ T5458] EXT4-fs (loop0): 1 truncate cleaned up
[   98.406216][ T5458] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback.
[   98.970202][ T5501] netlink: 72 bytes leftover after parsing attributes in process `syz.0.467'.
[   99.010742][ T5478] loop3: detected capacity change from 0 to 32768
[   99.105994][ T5478] XFS (loop3): Mounting V5 Filesystem
[   99.362729][ T5526] loop1: detected capacity change from 0 to 16
[   99.369111][ T5530] loop0: detected capacity change from 0 to 256
[   99.375531][ T5478] XFS (loop3): Ending clean mount
[   99.392846][ T5478] XFS (loop3): Quotacheck needed: Please wait.
[   99.428047][ T5526] erofs: (device loop1): mounted with root inode @ nid 36.
[   99.461819][ T5478] XFS (loop3): Quotacheck: Done.
[   99.478318][ T5526] attempt to access beyond end of device
[   99.478318][ T5526] loop1: rw=0, want=24, limit=16
[   99.580549][ T5526] attempt to access beyond end of device
[   99.580549][ T5526] loop1: rw=0, want=24, limit=16
[   99.686864][ T4197] XFS (loop3): Unmounting Filesystem
[   99.951960][ T4439] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  100.037172][ T5524] loop2: detected capacity change from 0 to 32768
[  100.149416][ T5524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.475 (5524)
[  100.190488][ T5524] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  100.242128][ T4439] usb 1-1: Using ep0 maxpacket: 32
[  100.247485][ T5524] BTRFS info (device loop2): using free space tree
[  100.275473][ T5524] BTRFS info (device loop2): has skinny extents
[  100.382095][ T4439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.394492][ T4439] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  100.404043][ T4439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.429368][ T4439] usb 1-1: config 0 descriptor??
[  100.506249][ T5542] loop4: detected capacity change from 0 to 32768
[  100.509455][ T5554] loop3: detected capacity change from 0 to 8192
[  100.556972][ T5554] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  100.605813][ T5554] REISERFS (device loop3): using ordered data mode
[  100.628150][ T5542] ERROR: (device loop4): dtReadFirst: DT_GETPAGE: dtree page corrupt
[  100.628150][ T5542] 
[  100.645763][ T5542] ERROR: (device loop4): remounting filesystem as read-only
[  100.652019][ T5554] reiserfs: using flush barriers
[  100.658261][ T5542] jfs_readdir: unexpected rc = -5 from dtReadNext
[  100.689153][ T5554] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  100.735148][ T5524] BTRFS info (device loop2): enabling ssd optimizations
[  100.752685][ T5554] REISERFS (device loop3): checking transaction log (loop3)
[  100.767980][ T5546] loop1: detected capacity change from 0 to 32768
[  100.848043][ T5546] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.487 (5546)
[  100.929738][ T5554] REISERFS (device loop3): Using tea hash to sort names
[  100.938958][ T4439] kye 0003:0458:5013.0007: hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0
[  100.944581][ T5554] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  100.980661][ T4354] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4354)
[  101.003410][ T4439] kye 0003:0458:5013.0007: tablet-enabling feature report not found
[  101.012574][ T4439] kye 0003:0458:5013.0007: tablet enabling failed
[  101.241633][ T1107] usb 1-1: USB disconnect, device number 5
[  101.271760][ T5578] fido_id[5578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  101.765774][ T4233] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  102.033259][ T4233] usb 5-1: Using ep0 maxpacket: 16
[  102.154589][ T4233] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.173760][ T5626] netlink: 'syz.0.511': attribute type 298 has an invalid length.
[  102.184852][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0
[  102.211820][ T4233] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  102.251146][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.297321][ T4233] usb 5-1: config 0 descriptor??
[  102.820645][ T4233] thrustmaster 0003:044F:B304.0008: item fetching failed at offset 5/7
[  102.842933][ T4233] thrustmaster 0003:044F:B304.0008: parse failed
[  102.878765][ T4233] thrustmaster: probe of 0003:044F:B304.0008 failed with error -22
[  103.024058][ T5588] usb 5-1: USB disconnect, device number 4
[  103.165098][ T5635] loop2: detected capacity change from 0 to 40427
[  103.214734][ T5635] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  103.221411][ T5635] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  103.320428][ T5648] loop1: detected capacity change from 0 to 32768
[  103.340253][ T5642] loop3: detected capacity change from 0 to 32768
[  103.350603][ T5635] F2FS-fs (loop2): Found nat_bits in checkpoint
[  103.420085][ T5635] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  103.422623][ T5667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'.
[  103.437457][ T5635] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  103.480622][ T5642] XFS (loop3): Mounting V5 Filesystem
[  103.624270][ T4184] attempt to access beyond end of device
[  103.624270][ T4184] loop2: rw=2049, want=45104, limit=40427
[  103.652708][ T5648] XFS (loop1): Mounting V5 Filesystem
[  103.711751][ T5642] XFS (loop3): Ending clean mount
[  103.723148][ T5684] netlink: 277 bytes leftover after parsing attributes in process `syz.4.532'.
[  103.805893][ T4197] XFS (loop3): Unmounting Filesystem
[  103.861426][ T5648] XFS (loop1): Ending clean mount
[  103.892740][ T5688] loop0: detected capacity change from 0 to 512
[  103.932475][ T5648] XFS (loop1): Quotacheck needed: Please wait.
[  103.968685][ T5688] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  104.016032][ T5688] EXT4-fs (loop0): orphan cleanup on readonly fs
[  104.037651][ T5688] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.533: bad orphan inode 15
[  104.037769][ T5648] XFS (loop1): Quotacheck: Done.
[  104.068017][ T5688] ext4_test_bit(bit=14, block=18) = 1
[  104.074026][ T5688] is_bad_inode(inode)=0
[  104.078722][ T5688] NEXT_ORPHAN(inode)=1023
[  104.083159][ T5688] max_ino=32
[  104.086368][ T5688] i_nlink=0
[  104.091776][ T5688] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2942: inode #15: comm syz.0.533: corrupted xattr block 19
[  104.109935][ T5688] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117)
[  104.175584][ T5688] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  104.212312][ T4292] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  104.330277][ T4186] XFS (loop1): Unmounting Filesystem
[  104.452833][ T5698] loop2: detected capacity change from 0 to 1024
[  104.568237][ T2339] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  104.610491][  T154] hfsplus: b-tree write err: -5, ino 4
[  104.762200][ T4292] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  104.776040][ T5704] loop3: detected capacity change from 0 to 4096
[  104.781573][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.807889][ T4292] usb 5-1: Product: syz
[  104.821993][ T2339] usb 1-1: Using ep0 maxpacket: 32
[  104.828973][ T4292] usb 5-1: Manufacturer: syz
[  104.847170][ T4292] usb 5-1: SerialNumber: syz
[  104.847175][ T5708] ALSA: mixer_oss: invalid OSS volume 'LIøÄ'
[  104.884406][ T5704] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  104.900233][ T5710] loop1: detected capacity change from 0 to 1024
[  104.908715][ T4292] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  104.942194][ T2339] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.968758][ T2339] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.102339][ T2339] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  105.122800][ T2339] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  105.131205][ T2339] usb 1-1: Product: syz
[  105.166340][ T2339] usb 1-1: Manufacturer: syz
[  105.193795][ T5704] ntfs3: Cannot use different iocharset when remounting!
[  105.213017][ T2339] hub 1-1:4.0: USB hub found
[  105.273546][ T4272] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  105.280956][ T4197] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  105.293085][ T4197] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  105.311229][ T4197] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  105.318453][  T154] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  105.331216][ T4197] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22.
[  105.434553][ T2339] hub 1-1:4.0: 2 ports detected
[  105.562103][ T4292] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  105.642172][ T2339] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  105.660617][ T2339] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  105.729929][ T2339] usb 1-1: USB disconnect, device number 6
[  106.045705][ T5731] loop2: detected capacity change from 0 to 32768
[  106.085284][ T5731] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.552 (5731)
[  106.229739][ T5749] loop3: detected capacity change from 0 to 32768
[  106.230520][ T2339] usb 5-1: USB disconnect, device number 5
[  106.266003][ T5731] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  106.305207][ T5731] BTRFS info (device loop2): using free space tree
[  106.311766][ T5731] BTRFS info (device loop2): has skinny extents
[  106.322217][ T5749] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  106.330708][ T5749] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  106.360734][ T5749] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms
[  106.370574][ T5749] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent points beyond end of block (not first in block)
[  106.381910][ T5749] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  106.381910][ T5749]   inode = 4 4153
[  106.381910][ T5749]   function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602
[  106.400679][ T5749] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  106.419987][ T5749] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  106.429531][ T5749] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  106.437483][ T5749] gfs2: fsid=syz:syz.0: File system withdrawn
[  106.443628][ T5749] CPU: 0 PID: 5749 Comm: syz.3.561 Not tainted syzkaller #0
[  106.450929][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  106.461008][ T5749] Call Trace:
[  106.464308][ T5749]  <TASK>
[  106.467260][ T5749]  dump_stack_lvl+0x168/0x230
[  106.471968][ T5749]  ? kobject_uevent_env+0x371/0x890
[  106.477195][ T5749]  ? show_regs_print_info+0x20/0x20
[  106.482434][ T5749]  ? load_image+0x3b0/0x3b0
[  106.486969][ T5749]  ? kobject_uevent_env+0x371/0x890
[  106.492193][ T5749]  ? lockref_put_or_lock+0x6e/0xb0
[  106.497351][ T5749]  gfs2_withdraw+0x111b/0x1460
[  106.502153][ T5749]  ? gfs2_lm+0x220/0x220
[  106.506425][ T5749]  ? gfs2_consist_inode_i+0xc0/0xe0
[  106.511644][ T5749]  gfs2_dirent_scan+0x525/0x650
[  106.516518][ T5749]  ? gfs2_dirent_search+0x7e0/0x7e0
[  106.521750][ T5749]  ? gfs2_dirent_search+0x7e0/0x7e0
[  106.526982][ T5749]  gfs2_dirent_search+0x2dd/0x7e0
[  106.532051][ T5749]  ? __might_sleep+0xf0/0xf0
[  106.536664][ T5749]  ? gfs2_dir_search+0x220/0x220
[  106.541618][ T5749]  ? _raw_spin_unlock+0x24/0x40
[  106.546493][ T5749]  ? gfs2_glock_nq+0xcb0/0x1550
[  106.551385][ T5749]  gfs2_dir_search+0x49/0x220
[  106.556093][ T5749]  gfs2_lookupi+0x45c/0x5e0
[  106.560625][ T5749]  ? gfs2_lookup_simple+0xf0/0xf0
[  106.565677][ T5749]  ? gfs2_lookupi+0x3fe/0x5e0
[  106.570381][ T5749]  ? crc32_le_base+0x755/0xcf0
[  106.575185][ T5749]  ? sprintf+0xd6/0x120
[  106.579394][ T5749]  gfs2_lookup_simple+0xa3/0xf0
[  106.584282][ T5749]  ? gfs2_lookup_by_inum+0xf0/0xf0
[  106.589428][ T5749]  init_journal+0x1252/0x2220
[  106.594139][ T5749]  ? end_bio_io_page+0x100/0x100
[  106.599100][ T5749]  ? snprintf+0xd7/0x120
[  106.603373][ T5749]  ? init_journal+0x710/0x2220
[  106.608162][ T5749]  ? vscnprintf+0x80/0x80
[  106.612516][ T5749]  ? gfs2_glock_nq_num+0x17a/0x1b0
[  106.617680][ T5749]  init_inodes+0xdb/0x320
[  106.618091][ T5731] BTRFS info (device loop2): enabling ssd optimizations
[  106.622035][ T5749]  gfs2_fill_super+0x1701/0x1f50
[  106.622111][ T5749]  ? gfs2_reconfigure+0xcd0/0xcd0
[  106.622137][ T5749]  ? gfs2_glock_nq_num+0x82/0x1b0
[  106.622159][ T5749]  ? preempt_count_add+0x8d/0x190
[  106.622193][ T5749]  ? sb_set_blocksize+0xa5/0xe0
[  106.653954][ T5749]  get_tree_bdev+0x3f1/0x610
[  106.658575][ T5749]  ? gfs2_reconfigure+0xcd0/0xcd0
[  106.663623][ T5749]  gfs2_get_tree+0x4d/0x1e0
[  106.668155][ T5749]  vfs_get_tree+0x88/0x270
[  106.672596][ T5749]  do_new_mount+0x24a/0xa40
[  106.677131][ T5749]  __se_sys_mount+0x2d6/0x3c0
[  106.681848][ T5749]  ? __x64_sys_mount+0xc0/0xc0
[  106.686642][ T5749]  ? lockdep_hardirqs_on+0x94/0x140
[  106.691873][ T5749]  ? __x64_sys_mount+0x1c/0xc0
[  106.696679][ T5749]  do_syscall_64+0x4c/0xa0
[  106.701115][ T5749]  ? clear_bhb_loop+0x30/0x80
[  106.705813][ T5749]  ? clear_bhb_loop+0x30/0x80
[  106.710537][ T5749]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  106.716498][ T5749] RIP: 0033:0x7f485b67376a
[  106.720946][ T5749] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.740712][ T5749] RSP: 002b:00007f48598d8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  106.749153][ T5749] RAX: ffffffffffffffda RBX: 00007f48598d8ef0 RCX: 00007f485b67376a
[  106.757162][ T5749] RDX: 0000200000000340 RSI: 0000200000000440 RDI: 00007f48598d8eb0
[  106.765158][ T5749] RBP: 0000200000000340 R08: 00007f48598d8ef0 R09: 0000000000000000
[  106.773147][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000440
[  106.781136][ T5749] R13: 00007f48598d8eb0 R14: 000000000001f803 R15: 0000200000000000
[  106.789147][ T5749]  </TASK>
[  106.793314][ T5749] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5
[  106.821925][ T4442] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  106.852071][ T4292] usb 5-1: Service connection timeout for: 256
[  106.859159][ T4292] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  106.886306][ T5772] loop0: detected capacity change from 0 to 512
[  106.926645][ T4292] ath9k_htc: Failed to initialize the device
[  106.944203][ T2339] usb 5-1: ath9k_htc: USB layer deinitialized
[  106.987879][ T5772] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  106.992062][ T5774] loop4: detected capacity change from 0 to 4096
[  107.012319][ T5772] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.142453][ T4442] usb 2-1: Using ep0 maxpacket: 16
[  107.197968][ T5772] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on
[  107.225596][ T5780] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.294031][ T4442] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  107.310729][ T4442] usb 2-1: config 0 interface 0 has no altsetting 0
[  107.496835][ T4442] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  107.531942][ T4442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.540284][ T4442] usb 2-1: Product: syz
[  107.591430][ T4442] usb 2-1: Manufacturer: syz
[  107.609401][ T4442] usb 2-1: SerialNumber: syz
[  107.625116][ T4442] usb 2-1: config 0 descriptor??
[  107.900073][ T5804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.576'.
[  107.943370][ T4442] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[  108.019866][ T4442] imon:send_packet: packet tx failed (-71)
[  108.032276][ T5808] loop2: detected capacity change from 0 to 1024
[  108.072129][ T4442] imon 2-1:0.0: panel buttons/knobs setup failed
[  108.172104][ T4442] rc_core: IR keymap rc-imon-pad not found
[  108.177953][ T4442] Registered IR keymap rc-empty
[  108.208129][ T4442] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  108.240432][ T4442] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  108.252170][ T5782] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  108.262199][ T4442] imon:send_packet: packet tx failed (-71)
[  108.282153][ T4442] imon 2-1:0.0: remote input dev register failed
[  108.290621][ T4442] imon 2-1:0.0: imon_init_intf0: rc device setup failed
[  108.332162][    T9] hfsplus: b-tree write err: -5, ino 4
[  108.343085][ T5790] loop0: detected capacity change from 0 to 32768
[  108.402526][ T4442] imon 2-1:0.0: unable to initialize intf0, err 0
[  108.408987][ T4442] imon:imon_probe: failed to initialize context!
[  108.426135][ T4442] imon 2-1:0.0: unable to register, err -19
[  108.455229][ T5816] loop2: detected capacity change from 0 to 128
[  108.485725][ T4442] usb 2-1: USB disconnect, device number 5
[  108.526448][ T5816] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  108.560431][ T5790] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  108.642076][ T5782] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  108.650815][ T5782] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  108.658645][ T5816] hpfs: filesystem error: improperly stopped
[  108.687173][ T5782] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  108.696615][ T5816] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  108.716845][ T5816] hpfs: You really don't want any checks? You are crazy...
[  108.726999][ T5782] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  108.769299][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[  108.771967][ T5782] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  108.789057][ T5816] hpfs: hpfs_map_sector(): read error
[  108.801294][ T5816] hpfs: code page support is disabled
[  108.830733][ T5816] hpfs: hpfs_map_4sectors(): unaligned read
[  108.857126][ T5816] hpfs: hpfs_map_4sectors(): unaligned read
[  108.877512][ T5816] hpfs: filesystem error: unable to find root dir
[  108.962236][ T5782] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  108.984139][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  109.021982][ T5782] usb 4-1: Product: syz
[  109.030067][ T5782] usb 4-1: Manufacturer: syz
[  109.082988][ T5782] cdc_wdm 4-1:1.0: skipping garbage
[  109.114605][ T5782] cdc_wdm 4-1:1.0: skipping garbage
[  109.164879][ T5782] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  109.194936][ T5782] cdc_wdm 4-1:1.0: Unknown control protocol
[  109.577621][ T5856] netlink: 766 bytes leftover after parsing attributes in process `syz.1.600'.
[  109.678411][ T5860] loop2: detected capacity change from 0 to 1024
[  109.761122][ T5860] hfsplus: bad catalog entry type
[  109.872604][ T3081] hfsplus: b-tree write err: -5, ino 4
[  110.150762][ T5840] loop0: detected capacity change from 0 to 32768
[  110.186064][ T5883] loop2: detected capacity change from 0 to 1024
[  110.251952][ T5840] XFS (loop0): Mounting V5 Filesystem
[  110.351083][    T9] hfsplus: b-tree write err: -5, ino 4
[  110.379314][ T5840] XFS (loop0): Ending clean mount
[  110.528949][ T4185] XFS (loop0): Unmounting Filesystem
[  110.823216][ T5900] loop2: detected capacity change from 0 to 4096
[  110.914652][ T5900] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  110.941636][ T5900] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  111.020529][ T4261] usb 4-1: USB disconnect, device number 4
[  111.031447][ T5900] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  111.078484][ T5900] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  111.089977][ T5908] loop3: detected capacity change from 0 to 512
[  111.112256][ T5900] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  111.184878][ T5900] ntfs: volume version 3.1.
[  111.216057][ T5900] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  111.260089][ T5900] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  111.283564][ T5908] EXT4-fs (loop3): Ignoring removed bh option
[  111.289698][ T5908] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  111.294268][ T5900] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  111.332081][ T5908] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  111.354612][ T5900] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  111.368185][ T5900] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  111.399194][ T5918] loop4: detected capacity change from 0 to 512
[  111.424523][ T5908] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  111.437551][ T4261] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  111.446869][ T5908] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  111.472207][ T5918] EXT4-fs (loop4): Ignoring removed oldalloc option
[  111.506838][ T5908] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none.
[  111.564413][ T5908] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none.
[  111.598486][ T5918] EXT4-fs (loop4): 1 truncate cleaned up
[  111.608176][ T5918] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  111.608603][ T5923] loop0: detected capacity change from 0 to 8192
[  111.703579][ T4261] usb 2-1: Using ep0 maxpacket: 16
[  111.713980][ T5923] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  111.772994][ T5923] REISERFS (device loop0): using ordered data mode
[  111.779544][ T5923] reiserfs: using flush barriers
[  111.801221][ T5928] loop3: detected capacity change from 0 to 128
[  111.813573][ T5923] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  111.842152][ T4261] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  111.859064][ T4261] usb 2-1: config 0 has no interface number 0
[  111.885417][ T5928] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  111.898604][ T5923] REISERFS (device loop0): checking transaction log (loop0)
[  111.909515][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.629'.
[  111.929136][ T5923] REISERFS (device loop0): Using r5 hash to sort names
[  111.949654][ T5928] hpfs: filesystem error: improperly stopped
[  111.962449][ T5923] reiserfs: enabling write barrier flush mode
[  111.973994][ T5928] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  112.021162][ T5928] hpfs: You really don't want any checks? You are crazy...
[  112.032549][ T5923] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  112.072249][ T4261] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  112.100088][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.107006][ T5928] hpfs: hpfs_map_sector(): read error
[  112.122619][ T4261] usb 2-1: Product: syz
[  112.126822][ T4261] usb 2-1: Manufacturer: syz
[  112.146213][ T5928] hpfs: code page support is disabled
[  112.149329][ T4261] usb 2-1: SerialNumber: syz
[  112.151731][ T5928] hpfs: hpfs_map_4sectors(): unaligned read
[  112.163284][ T5923] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  112.180403][ T4261] usb 2-1: config 0 descriptor??
[  112.189410][ T5923] REISERFS (device loop0): Remounting filesystem read-only
[  112.207144][ T5928] hpfs: hpfs_map_4sectors(): unaligned read
[  112.224165][ T4261] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  112.229902][ T5923] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  112.252656][ T5928] hpfs: filesystem error: unable to find root dir
[  112.300004][ T5923] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  112.349304][ T5923] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  112.382018][ T5923] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error
[  112.392460][ T5923] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  112.428319][ T5923] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  112.472261][ T5923] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  112.472298][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'.
[  112.502728][ T5923] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  112.545648][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'.
[  112.555888][ T5923] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  112.587791][ T5923] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  112.602169][ T5938] device macvlan2 entered promiscuous mode
[  112.609847][ T5923] REISERFS (device loop0): Remounting filesystem read-only
[  112.642053][ T5923] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error
[  112.692200][ T5934] loop2: detected capacity change from 0 to 32768
[  112.747845][ T5934] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.631 (5934)
[  112.784670][ T5936] loop4: detected capacity change from 0 to 32768
[  112.806050][ T5934] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  112.846989][ T5934] BTRFS info (device loop2): using free space tree
[  112.872116][ T4261] gspca_spca1528: reg_w err -71
[  112.872167][ T5934] BTRFS info (device loop2): has skinny extents
[  112.912047][ T4261] spca1528: probe of 2-1:0.1 failed with error -71
[  112.929006][ T4261] usb 2-1: USB disconnect, device number 6
[  113.190914][ T5934] BTRFS info (device loop2): enabling ssd optimizations
[  113.365199][ T5945] loop0: detected capacity change from 0 to 32768
[  113.564242][ T5945] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  113.638873][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'.
[  113.747931][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'.
[  113.777437][ T5976] netlink: 'syz.1.642': attribute type 12 has an invalid length.
[  113.831123][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[  114.161966][ T5592] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  114.238137][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'.
[  114.409224][ T5978] loop3: detected capacity change from 0 to 32768
[  114.416660][ T5592] usb 5-1: Using ep0 maxpacket: 8
[  114.437035][ T5978] XFS: ikeep mount option is deprecated.
[  114.554254][ T5978] XFS (loop3): Mounting V5 Filesystem
[  114.560068][ T5592] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  114.594094][ T5592] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  114.687298][ T5997] loop1: detected capacity change from 0 to 32768
[  114.721388][ T5592] usb 5-1: config 0 interface 0 has no altsetting 0
[  114.737641][ T5592] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  114.738677][ T6017] loop0: detected capacity change from 0 to 1024
[  114.749872][ T5592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.783562][ T6017] EXT4-fs (loop0): inline encryption not supported
[  114.791309][ T5592] usb 5-1: config 0 descriptor??
[  114.818227][ T5978] XFS (loop3): Ending clean mount
[  114.828711][ T5978] XFS (loop3): Quotacheck needed: Please wait.
[  114.883848][ T5978] XFS (loop3): Quotacheck: Done.
[  114.919840][ T6017] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.656: lblock 2 mapped to illegal pblock 2 (length 1)
[  114.984612][ T4197] XFS (loop3): Unmounting Filesystem
[  115.034680][ T6017] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.656: lblock 0 mapped to illegal pblock 48 (length 1)
[  115.074563][ T6017] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.656: Failed to acquire dquot type 0
[  115.097777][ T6017] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem
[  115.098528][ T6023] loop1: detected capacity change from 0 to 512
[  115.116548][ T5588] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  115.141623][ T6017] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.656: mark_inode_dirty error
[  115.159103][ T6017] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  115.169851][ T6017] EXT4-fs (loop0): 1 orphan inode deleted
[  115.175610][ T6017] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: none.
[  115.178769][ T6023] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  115.199613][    T9] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  115.224201][    T9] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:0: Failed to release dquot type 0
[  115.266352][ T5592] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0
[  115.285029][ T6023] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback.
[  115.302190][ T6023] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.311581][ T5592] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0
[  115.331738][ T5592] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0
[  115.339081][ T5592] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0
[  115.354118][ T5592] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x0
[  115.367097][ T5592] gt683r_led 0003:1770:FF00.0009: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0
[  115.400111][    T9] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm kworker/u4:0: lblock 2 mapped to illegal pblock 2 (length 1)
[  115.426771][    T9] EXT4-fs error (device loop0): ext4_write_dquot:6189: comm kworker/u4:0: Failed to commit dquot type 0
[  115.446356][ T4185] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0
[  115.506411][ T4185] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem
[  115.509642][ T5592] usb 5-1: USB disconnect, device number 6
[  115.545485][ T4185] EXT4-fs error (device loop0): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error
[  115.570739][ T5588] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  115.585205][ T5588] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  115.604376][ T6028] comedi comedi3: rti802: a I/O base address must be specified
[  115.617835][ T5588] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  115.630967][ T5588] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  115.656326][ T5588] usb 3-1: config 220 has no interface number 2
[  115.665400][ T5588] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  115.680713][ T5588] usb 3-1: config 220 interface 0 has no altsetting 0
[  115.687983][ T5588] usb 3-1: config 220 interface 76 has no altsetting 0
[  115.695322][ T5588] usb 3-1: config 220 interface 1 has no altsetting 1
[  115.705350][ T4442] gt683r_led 0003:1770:FF00.0009: failed to send set report request: -19
[  115.849196][  T150] block nbd0: Attempted send on invalid socket
[  115.856832][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  115.873474][ T6036] efs: cannot read volume header
[  115.885702][ T5588] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  115.896308][ T5588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.906255][ T5588] usb 3-1: Product: syz
[  115.910453][ T5588] usb 3-1: Manufacturer: syz
[  115.924771][ T5588] usb 3-1: SerialNumber: syz
[  115.933982][   T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  116.263441][ T6052] loop4: detected capacity change from 0 to 764
[  116.293609][   T21] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  116.298821][ T5588] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  116.312938][   T21] usb 2-1: config 0 interface 0 has no altsetting 0
[  116.326144][ T5588] usb 3-1: No valid video chain found.
[  116.346050][   T21] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  116.365286][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.385310][ T6052] rock: directory entry would overflow storage
[  116.406343][ T5588] usb 3-1: USB disconnect, device number 5
[  116.419512][   T21] usb 2-1: config 0 descriptor??
[  116.436477][ T6052] rock: sig=0x5245, size=8, remaining=5
[  116.517151][ T5592] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  116.548454][ T6054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.658'.
[  116.561455][ T6054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.658'.
[  116.578674][ T6054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.658'.
[  116.753518][ T6064] loop3: detected capacity change from 0 to 256
[  116.790920][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.678'.
[  116.824816][ T6064] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d)
[  116.891234][   T21] ntrig 0003:1B96:0004.000A: hidraw0: USB HID v0.06 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0
[  116.906935][ T5592] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  116.952150][ T5592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.988570][ T5592] usb 1-1: config 0 descriptor??
[  117.048117][ T5592] gspca_main: spca508-2.14.0 probing 8086:0110
[  117.099943][   T21] usb 2-1: USB disconnect, device number 7
[  117.106845][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'.
[  117.167375][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'.
[  117.193609][ T6076] netlink: 'syz.4.683': attribute type 13 has an invalid length.
[  117.220102][ T6076] netlink: 'syz.4.683': attribute type 11 has an invalid length.
[  117.252407][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  117.252422][   T26] audit: type=1326 audit(2000000024.991:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.280667][ T5592] gspca_spca508: reg_read err -32
[  117.326927][ T6081] fido_id[6081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  117.344576][   T26] audit: type=1326 audit(2000000025.032:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.387603][   T26] audit: type=1326 audit(2000000025.042:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.414961][   T26] audit: type=1326 audit(2000000025.042:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.458382][   T26] audit: type=1326 audit(2000000025.042:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.481731][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'.
[  117.511701][   T26] audit: type=1326 audit(2000000025.042:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.539760][ T5592] gspca_spca508: reg_read err -71
[  117.546042][   T26] audit: type=1326 audit(2000000025.042:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.578736][ T5592] gspca_spca508: reg_read err -71
[  117.591438][   T26] audit: type=1326 audit(2000000025.042:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.614852][ T5592] gspca_spca508: reg_read err -71
[  117.621173][   T26] audit: type=1326 audit(2000000025.042:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.643512][ T5592] gspca_spca508: reg write: error -71
[  117.649306][ T5592] spca508: probe of 1-1:0.0 failed with error -71
[  117.657383][ T1107] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  117.690853][ T5592] usb 1-1: USB disconnect, device number 7
[  117.700560][   T26] audit: type=1326 audit(2000000025.042:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f485b671fc9 code=0x50000
[  117.859114][ T6103] tipc: MTU too low for tipc bearer
[  117.901693][ T6101] loop3: detected capacity change from 0 to 4096
[  117.929453][ T1107] usb 5-1: Using ep0 maxpacket: 32
[  118.066935][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.102940][ T1107] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  118.149894][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.188395][ T1107] usb 5-1: config 0 descriptor??
[  118.244251][ T1107] dw2102: su3000_identify_state
[  118.249146][ T1107] dvb-usb: found a 'TeVii S662' in warm state.
[  118.274785][ T1107] dw2102: su3000_power_ctrl: 1, initialized 0
[  118.301935][ T1107] dvb-usb: bulk message failed: -22 (2/0)
[  118.348751][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  118.424285][ T1107] dvbdev: DVB: registering new adapter (TeVii S662)
[  118.433765][ T1107] usb 5-1: media controller created
[  118.453784][ T6086] dvb-usb: bulk message failed: -22 (4/0)
[  118.476000][ T6086] dw2102: i2c transfer failed.
[  118.492018][ T1107] dvb-usb: bulk message failed: -22 (6/0)
[  118.510961][ T1107] dw2102: i2c transfer failed.
[  118.524836][ T1107] dvb-usb: bulk message failed: -22 (6/0)
[  118.530594][ T1107] dw2102: i2c transfer failed.
[  118.554122][ T1107] dvb-usb: bulk message failed: -22 (6/0)
[  118.607255][ T1107] dw2102: i2c transfer failed.
[  118.623001][ T1107] dvb-usb: bulk message failed: -22 (6/0)
[  118.628772][ T1107] dw2102: i2c transfer failed.
[  118.668336][ T1107] dvb-usb: bulk message failed: -22 (6/0)
[  118.704406][ T1107] dw2102: i2c transfer failed.
[  118.724481][ T1107] dvb-usb: bulk message failed: -22 (6/0)
[  118.749463][ T1107] dw2102: i2c transfer failed.
[  118.754364][ T1107] dvb-usb: MAC address: 02:02:02:02:02:02
[  118.846058][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  118.893961][ T1107] dvb-usb: bulk message failed: -22 (3/0)
[  118.937067][ T1107] dw2102: command 0x0e transfer failed.
[  118.943072][ T1107] dvb-usb: bulk message failed: -22 (3/0)
[  118.966166][ T1107] dw2102: command 0x0e transfer failed.
[  119.180477][ T6121] loop3: detected capacity change from 0 to 32768
[  119.280904][ T6121] XFS (loop3): Mounting V5 Filesystem
[  119.287130][ T1107] dvb-usb: bulk message failed: -22 (3/0)
[  119.295110][ T1107] dw2102: command 0x0e transfer failed.
[  119.337516][ T1107] dvb-usb: bulk message failed: -22 (3/0)
[  119.379248][ T1107] dw2102: command 0x0e transfer failed.
[  119.413992][ T1107] dvb-usb: bulk message failed: -22 (1/0)
[  119.449430][ T1107] dw2102: command 0x51 transfer failed.
[  119.486005][ T1107] dvb-usb: bulk message failed: -22 (5/0)
[  119.514802][ T1107] dw2102: i2c probe for address 0x68 failed.
[  119.540071][ T1107] dvb-usb: bulk message failed: -22 (5/0)
[  119.559699][ T1107] dw2102: i2c probe for address 0x69 failed.
[  119.578267][ T1107] dvb-usb: bulk message failed: -22 (5/0)
[  119.598537][ T1107] dw2102: i2c probe for address 0x6a failed.
[  119.619414][ T1107] dw2102: probing for demodulator failed. Is the external power switched on?
[  119.638333][ T1107] dvb-usb: no frontend was attached by 'TeVii S662'
[  119.659578][ T6121] XFS (loop3): Ending clean mount
[  119.674408][ T6121] XFS (loop3): Quotacheck needed: Please wait.
[  119.769389][ T6121] XFS (loop3): Quotacheck: Done.
[  119.814317][ T1107] rc_core: IR keymap rc-tt-1500 not found
[  119.824495][ T1107] Registered IR keymap rc-empty
[  119.827296][ T6181] loop0: detected capacity change from 0 to 32768
[  119.842139][ T1107] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  119.886025][ T4197] XFS (loop3): Unmounting Filesystem
[  119.918550][ T1107] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7
[  120.037392][ T1107] dvb-usb: schedule remote query interval to 250 msecs.
[  120.064953][ T1107] dw2102: su3000_power_ctrl: 0, initialized 1
[  120.084982][ T1107] dvb-usb: TeVii S662 successfully initialized and connected.
[  120.125445][ T1107] usb 5-1: USB disconnect, device number 7
[  120.173323][ T6181] XFS (loop0): Mounting V5 Filesystem
[  120.279454][ T6201] loop2: detected capacity change from 0 to 512
[  120.290572][ T1107] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  120.364209][ T6181] XFS (loop0): Ending clean mount
[  120.382101][ T6181] XFS (loop0): Quotacheck needed: Please wait.
[  120.491975][ T6201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  120.527593][ T6181] XFS (loop0): Quotacheck: Done.
[  120.541929][ T6201] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.583272][ T6194] loop4: detected capacity change from 0 to 32768
[  120.622396][ T4185] XFS (loop0): Unmounting Filesystem
[  120.745059][ T6201] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.734: Failed to acquire dquot type 0
[  120.832404][ T4261] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  120.843894][ T6201] overlayfs: failed to verify origin (/, ino=2, err=-117)
[  120.851074][ T6201] overlayfs: failed to verify upper root origin
[  120.999783][ T6212] netlink: 'syz.3.729': attribute type 2 has an invalid length.
[  121.185470][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  121.224235][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  121.253938][ T4261] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  121.299807][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.352608][ T4261] usb 2-1: config 0 descriptor??
[  121.371323][ T6210] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  121.588384][ T6234] tipc: Enabling of bearer <euh:v> rejected, media not registered
[  121.740264][ T6240] loop4: detected capacity change from 0 to 1024
[  121.751491][ T6241] netlink: 'syz.3.750': attribute type 1 has an invalid length.
[  121.808500][ T6243] netlink: 'syz.0.751': attribute type 6 has an invalid length.
[  121.825144][ T4261] glorious 0003:22D4:1503.000B: item fetching failed at offset 0/7
[  121.855217][ T6240] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  121.886098][ T6218] loop2: detected capacity change from 0 to 32768
[  121.908476][ T4261] glorious: probe of 0003:22D4:1503.000B failed with error -22
[  121.930471][ T6249] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  122.016059][ T6218] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  122.048631][ T4442] usb 2-1: USB disconnect, device number 8
[  122.165140][ T6218] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  122.197744][  T144] (kworker/u4:1,144,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  122.314945][ T4184] ocfs2: Unmounting device (7,2) on (node local)
[  122.901241][ T6248] loop0: detected capacity change from 0 to 32768
[  123.097528][ T1107] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  123.386388][ T1107] usb 3-1: Using ep0 maxpacket: 32
[  123.446789][ T6248] XFS (loop0): Mounting V5 Filesystem
[  123.511015][ T1107] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 3.a7
[  123.520133][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.634749][ T1107] usb 3-1: config 0 descriptor??
[  123.656038][ T6248] XFS (loop0): Ending clean mount
[  123.778492][ T4185] XFS (loop0): Unmounting Filesystem
[  123.923628][ T1107] usb 3-1: string descriptor 0 read error: -71
[  123.931585][ T1107] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X3A7): Eagle II
[  124.382934][ T1107] usb 3-1: reset high-speed USB device number 6 using dummy_hcd
[  124.565288][ T6321] loop3: detected capacity change from 0 to 8192
[  124.745103][ T6336] loop0: detected capacity change from 0 to 512
[  124.809654][ T1107] usb 3-1: [UEAGLE-ATM] interface 1 not found
[  124.816973][ T1107] ueagle-atm 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  124.950771][ T6336] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  125.038405][ T6336] EXT4-fs (loop0): 1 truncate cleaned up
[  125.060664][ T4261] usb 3-1: USB disconnect, device number 6
[  125.087146][ T6336] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none.
[  125.133341][ T4551] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  125.165199][ T6336] EXT4-fs error (device loop0): ext4_get_parent:1910: comm syz.0.799: inode #2: comm syz.0.799: iget: illegal inode #
[  125.348679][ T6354] __nla_validate_parse: 2 callbacks suppressed
[  125.348697][ T6354] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.796'.
[  125.369864][ T4551] usb 2-1: Using ep0 maxpacket: 8
[  125.371514][ T6354] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  125.482033][ T6358] loop0: detected capacity change from 0 to 1024
[  125.559968][ T6349] loop4: detected capacity change from 0 to 32768
[  125.572210][ T6362] loop3: detected capacity change from 0 to 164
[  125.633571][ T6358] hfsplus: bad catalog entry type
[  125.647571][ T6362] rock: directory entry would overflow storage
[  125.661090][ T4551] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  125.685021][ T6362] rock: sig=0x4d4e, size=5, remaining=4
[  125.687879][ T4551] usb 2-1: New USB device strings: Mfr=32, Product=2, SerialNumber=3
[  125.762565][ T4551] usb 2-1: Product: syz
[  125.772358][  T154] hfsplus: b-tree write err: -5, ino 4
[  125.780106][ T4551] usb 2-1: Manufacturer: syz
[  125.803398][ T4551] usb 2-1: SerialNumber: syz
[  125.846748][ T4551] usb 2-1: config 0 descriptor??
[  125.863495][ T6369] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  125.916202][ T6373] loop0: detected capacity change from 0 to 256
[  125.940365][ T6373] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.061614][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.808'.
[  126.097580][ T4551] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  126.423905][ T2339] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  126.532396][ T4551] usb write operation failed. (-71)
[  126.545391][ T4551] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  126.568354][ T4551] dvbdev: DVB: registering new adapter (Terratec H7)
[  126.583031][ T4551] usb 2-1: media controller created
[  126.611186][ T4551] usb read operation failed. (-71)
[  126.630905][ T4551] usb write operation failed. (-71)
[  126.641226][ T4551] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5
[  126.656404][ T6390] loop3: detected capacity change from 0 to 32768
[  126.661009][ T4551] usb 2-1: USB disconnect, device number 9
[  126.688695][ T6392] loop0: detected capacity change from 0 to 32768
[  126.788923][ T2339] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  126.833441][ T2339] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  126.848739][ T2339] usb 5-1: config 0 interface 0 has no altsetting 0
[  126.855900][ T2339] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  126.868618][ T2339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.894707][ T2339] usb 5-1: config 0 descriptor??
[  127.268022][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  127.319494][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  127.337632][ T6413] netlink: 'syz.1.825': attribute type 3 has an invalid length.
[  127.358511][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  127.384507][ T2339] holtek 0003:1241:5015.000C: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0
[  127.411943][ T2339] holtek 0003:1241:5015.000C: no inputs found
[  127.608577][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.830'.
[  127.609464][ T4261] usb 5-1: USB disconnect, device number 8
[  127.721711][ T6421] loop2: detected capacity change from 0 to 4096
[  127.832972][ T6435] netlink: 104 bytes leftover after parsing attributes in process `syz.3.835'.
[  127.953134][ T6421] ntfs3: loop2: failed to convert name for inode 1e.
[  128.136972][ T6443] loop0: detected capacity change from 0 to 1764
[  128.143665][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.840'.
[  128.263363][ T6443] isofs: isofs_export_get_parent(): child directory not normalized!
[  128.621963][ T6457] loop0: detected capacity change from 0 to 4096
[  128.775204][ T6460] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.880664][ T6453] loop4: detected capacity change from 0 to 32768
[  128.916301][ T6451] loop1: detected capacity change from 0 to 32768
[  128.937211][ T6457] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  128.978992][ T6457] Remounting filesystem read-only
[  129.004389][ T6453] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.843 (6453)
[  129.044366][ T6453] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  129.102748][ T4185] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  129.123827][ T6453] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  129.143407][ T6451] XFS (loop1): Mounting V5 Filesystem
[  129.216743][ T6453] BTRFS info (device loop4): trying to use backup root at mount time
[  129.224885][ T6453] BTRFS info (device loop4): using free space tree
[  129.240820][ T6451] XFS (loop1): Ending clean mount
[  129.287951][ T6451] XFS (loop1): Quotacheck needed: Please wait.
[  129.305772][ T6453] BTRFS info (device loop4): has skinny extents
[  129.313928][ T6472] loop0: detected capacity change from 0 to 1024
[  129.358881][ T6462] loop3: detected capacity change from 0 to 32768
[  129.379119][ T6462] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.847 (6462)
[  129.403786][ T6462] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  129.419394][ T6472] EXT4-fs (loop0): Ignoring removed bh option
[  129.440163][ T6472] EXT4-fs (loop0): inline encryption not supported
[  129.447629][ T6462] BTRFS info (device loop3): using free space tree
[  129.476275][ T6462] BTRFS info (device loop3): has skinny extents
[  129.522523][ T6472] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  129.532533][ T6451] XFS (loop1): Quotacheck: Done.
[  129.634048][ T6472] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.848: lblock 2 mapped to illegal pblock 2 (length 1)
[  129.661754][ T6472] __quota_error: 57 callbacks suppressed
[  129.661769][ T6472] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  129.695027][ T4186] XFS (loop1): Unmounting Filesystem
[  129.711042][ T6472] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.848: lblock 0 mapped to illegal pblock 48 (length 1)
[  129.725401][ T6459] loop2: detected capacity change from 0 to 32768
[  129.741075][ T6472] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  129.806699][ T6453] BTRFS info (device loop4): enabling ssd optimizations
[  129.816316][ T6472] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.848: Failed to acquire dquot type 0
[  129.835734][ T6472] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem
[  129.845849][  T144] BTRFS error (device loop4): bad tree block start, want 5255168 have 21480091648
[  129.922912][ T6472] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.848: mark_inode_dirty error
[  129.934420][ T6453] BTRFS warning (device loop4): failed to read fs tree: -5
[  129.988885][ T6459] XFS (loop2): Mounting V5 Filesystem
[  130.034837][ T6462] BTRFS info (device loop3): enabling ssd optimizations
[  130.090115][ T6472] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  130.190054][ T6472] EXT4-fs (loop0): 1 orphan inode deleted
[  130.191722][ T6453] BTRFS error (device loop4): open_ctree failed: -5
[  130.228947][ T6472] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback.
[  130.244575][ T3081] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  130.305170][ T3081] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  130.325101][ T3081] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:5: Failed to release dquot type 0
[  130.411909][ T6459] XFS (loop2): Ending clean mount
[  130.423101][ T6459] XFS (loop2): Quotacheck needed: Please wait.
[  130.479355][ T6472] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm syz.0.848: lblock 1 mapped to illegal pblock 1 (length 1)
[  130.529655][ T6472] Quota error (device loop0): find_next_id: Can't read quota tree block 1
[  130.562864][ T6459] XFS (loop2): Quotacheck: Done.
[  131.002309][ T4185] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0
[  131.060142][ T4185] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem
[  131.118224][ T4185] EXT4-fs error (device loop0): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error
[  131.149364][ T4184] XFS (loop2): Unmounting Filesystem
[  131.313314][ T4290] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  131.627938][ T6531] loop4: detected capacity change from 0 to 32768
[  131.699205][ T4290] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30
[  131.713868][ T6535] loop1: detected capacity change from 0 to 32768
[  131.715362][ T6541] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  131.721192][ T4290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193
[  131.727335][ T6541] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  131.775035][ T4290] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  131.785605][ T4290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.805605][ T6541] vhci_hcd vhci_hcd.0: Device attached
[  131.845953][ T6535] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.856 (6535)
[  131.865098][ T4290] usb 4-1: config 0 descriptor??
[  131.984364][ T6531] XFS (loop4): Mounting V5 Filesystem
[  131.993787][ T6535] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  132.015087][ T6535] BTRFS info (device loop1): enabling auto defrag
[  132.025885][ T6535] BTRFS info (device loop1): force clearing of disk cache
[  132.033057][ T6535] BTRFS info (device loop1): max_inline at 0
[  132.039508][ T6535] BTRFS info (device loop1): turning on sync discard
[  132.046318][ T6535] BTRFS info (device loop1): disabling free space tree
[  132.053185][ T6535] BTRFS info (device loop1): has skinny extents
[  132.075889][ T5589] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  132.085111][ T1107] usb 34-1: SetAddress Request (2) to port 0
[  132.091755][ T1107] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  132.143277][ T6531] XFS (loop4): Ending clean mount
[  132.159300][ T6531] XFS (loop4): Quotacheck needed: Please wait.
[  132.207647][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.215059][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.223174][ T6535] BTRFS info (device loop1): enabling ssd optimizations
[  132.237476][ T6535] BTRFS info (device loop1): clearing free space tree
[  132.245256][ T6535] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  132.256444][ T6535] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  132.259292][ T6531] XFS (loop4): Quotacheck: Done.
[  132.355281][ T4290] magicmouse 0003:05AC:0269.000D: collection stack underflow
[  132.411913][ T4290] magicmouse 0003:05AC:0269.000D: item 0 0 0 12 parsing failed
[  132.437803][ T6542] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1
[  132.462426][ T1272] vhci_hcd: stop threads
[  132.467318][ T1272] vhci_hcd: release socket
[  132.476628][ T1272] vhci_hcd: disconnect device
[  132.481694][ T4290] magicmouse 0003:05AC:0269.000D: magicmouse hid parse failed
[  132.502459][ T4290] magicmouse: probe of 0003:05AC:0269.000D failed with error -22
[  132.504368][ T5589] usb 1-1: unable to get BOS descriptor or descriptor too short
[  132.575177][ T4187] XFS (loop4): Unmounting Filesystem
[  132.589432][ T4560] usb 4-1: USB disconnect, device number 5
[  132.610204][ T5589] usb 1-1: unable to read config index 0 descriptor/start: -71
[  132.617890][ T5589] usb 1-1: can't read configurations, error -71
[  133.318899][ T6605] loop1: detected capacity change from 0 to 1024
[  133.424180][ T6608] loop4: detected capacity change from 0 to 4096
[  133.438472][ T6605] attempt to access beyond end of device
[  133.438472][ T6605] loop1: rw=0, want=5780, limit=1024
[  133.451888][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  133.472093][ T6610] attempt to access beyond end of device
[  133.472093][ T6610] loop1: rw=0, want=5780, limit=1024
[  133.522654][ T6608] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  133.606938][ T6608] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  133.618510][ T6608] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  133.688221][ T6618] ntfs3: Volume is dirty and "force" flag is not set!
[  133.696726][ T6619] loop1: detected capacity change from 0 to 2048
[  133.709503][   T23] usb 3-1: Using ep0 maxpacket: 8
[  133.760900][ T6619] EXT4-fs (loop1): Unrecognized mount option "obj_role=seclabel" or missing value
[  133.872314][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  133.925372][ T6623] loop3: detected capacity change from 0 to 2048
[  133.963205][ T6627] loop1: detected capacity change from 0 to 1024
[  133.972503][   T23] usb 3-1: config 4 interface 0 has no altsetting 0
[  134.084405][ T6634] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.132601][ T6623] NILFS error (device loop3): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  134.171784][ T6623] Remounting filesystem read-only
[  134.193604][ T6637] loop0: detected capacity change from 0 to 2048
[  134.234652][   T23] usb 3-1: string descriptor 0 read error: -22
[  134.244774][   T23] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  134.269996][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.284618][ T6637]  loop0: p1 < > p3 p4 < >
[  134.306958][ T6637] loop0: p3 start 4284289 is beyond EOD, truncated
[  134.320944][ T4560] kernel write not supported for file /snd/seq (pid: 4560 comm: kworker/1:16)
[  134.343308][ T4197] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  134.356251][   T23] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  134.407207][   T23] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  134.434051][ T3562]  loop0: p1 < > p3 p4 < >
[  134.439746][ T3562] loop0: p3 start 4284289 is beyond EOD, truncated
[  134.467555][   T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  134.483294][ T6650] loop4: detected capacity change from 0 to 512
[  134.485266][   T23] usb 3-1: media controller created
[  134.507905][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  134.551113][ T6652] loop3: detected capacity change from 0 to 512
[  134.585220][ T6650] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  134.612149][   T23] zl10353_read_register: readreg error (reg=127, ret==0)
[  134.626089][ T6652] EXT4-fs (loop3): Ignoring removed nobh option
[  134.659581][ T6652] EXT4-fs (loop3): inline encryption not supported
[  134.683503][ T6652] EXT4-fs (loop3): Test dummy encryption mode enabled
[  134.688403][ T5000] udevd[5000]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  134.712661][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  134.723696][ T5592] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  134.786055][ T6652] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  134.828578][   T23] usb 3-1: USB disconnect, device number 7
[  134.847533][ T6652] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.893: invalid indirect mapped block 2683928664 (level 1)
[  134.863644][ T6660] loop4: detected capacity change from 0 to 64
[  134.880060][ T6658] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  134.934656][ T6652] EXT4-fs (loop3): Remounting filesystem read-only
[  134.972882][ T4291] udevd[4291]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  134.982680][ T6652] EXT4-fs (loop3): 1 truncate cleaned up
[  134.982705][ T6652] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,errors=remount-ro,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,test_dummy_encryption,,. Quota mode: writeback.
[  135.015025][   T26] audit: type=1800 audit(2000000042.979:70): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.894" name="bus" dev="loop4" ino=21 res=0 errno=0
[  135.046961][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  135.139932][ T6652] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  135.143807][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.898'.
[  135.163045][ T6652] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.893: Invalid block bitmap block 3 in block_group 0
[  135.216847][ T5592] usb 2-1: config 0 interface 0 has no altsetting 0
[  135.227224][ T5592] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  135.242193][ T6652] EXT4-fs (loop3): Remounting filesystem read-only
[  135.266224][ T5592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.307161][ T5592] usb 2-1: config 0 descriptor??
[  135.813837][ T5592] zeroplus 0003:0C12:0005.000E: unknown main item tag 0x2
[  135.838193][ T5592] zeroplus 0003:0C12:0005.000E: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.1-1/input0
[  135.838468][ T6686] loop3: detected capacity change from 0 to 512
[  135.875688][ T5592] zeroplus 0003:0C12:0005.000E: no inputs found
[  135.966865][ T6686] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback.
[  136.013736][ T2339] usb 2-1: USB disconnect, device number 10
[  136.109655][ T6686] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.135477][ T6687] fido_id[6687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  136.212523][ T6686] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.906: bg 0: block 145: padding at end of block bitmap is not set
[  136.288184][ T6675] loop0: detected capacity change from 0 to 32768
[  136.288347][ T6686] Quota error (device loop3): write_blk: dquota write failed
[  136.300939][ T6680] loop4: detected capacity change from 0 to 32768
[  136.340837][ T6686] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  136.367726][ T6686] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.906: Failed to acquire dquot type 1
[  136.415581][ T6680] 
[  136.415581][ T6680]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  136.415581][ T6680] 
[  136.441845][ T6675] XFS (loop0): Mounting V5 Filesystem
[  136.442349][ T6680] 
[  136.442349][ T6680]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  136.442349][ T6680] 
[  136.459174][ T6680] 
[  136.459174][ T6680]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  136.459174][ T6680] 
[  136.480176][  T277] 
[  136.480176][  T277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  136.480176][  T277] 
[  136.499367][ T6695] loop2: detected capacity change from 0 to 1024
[  136.523014][ T4187] 
[  136.523014][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  136.523014][ T4187] 
[  136.541198][ T4187] 
[  136.541198][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  136.541198][ T4187] 
[  136.614199][ T6675] XFS (loop0): Ending clean mount
[  136.622179][ T6695] hfsplus: bad catalog file entry
[  136.650919][ T6675] XFS (loop0): Quotacheck needed: Please wait.
[  136.677887][ T6695] hfsplus: failed to load root directory
[  136.772559][ T6703] loop1: detected capacity change from 0 to 2048
[  136.779720][ T6675] XFS (loop0): Quotacheck: Done.
[  136.878467][ T6703] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.025765][ T4185] XFS (loop0): Unmounting Filesystem
[  137.117233][ T1107] usb 34-1: device descriptor read/8, error -110
[  137.218087][ T6713] loop1: detected capacity change from 0 to 512
[  137.543324][ T1107] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  137.556856][ T1107] usb usb34-port1: attempt power cycle
[  137.786117][ T6730] loop1: detected capacity change from 0 to 4096
[  137.823280][ T6730] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  137.916495][ T1107] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  137.965321][ T6705] loop3: detected capacity change from 0 to 40427
[  138.027751][ T6705] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  138.048436][ T6705] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  138.123880][ T6705] F2FS-fs (loop3): invalid crc value
[  138.213569][ T6705] F2FS-fs (loop3): Found nat_bits in checkpoint
[  138.264464][ T1107] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  138.300201][ T1107] usb usb34-port1: unable to enumerate USB device
[  138.372546][ T6746] loop4: detected capacity change from 0 to 1024
[  138.393756][ T6705] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  138.401573][ T6705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  138.512034][ T6746] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,errors=continue,. Quota mode: none.
[  138.614538][ T6733] loop2: detected capacity change from 0 to 32768
[  138.629047][ T6731] loop0: detected capacity change from 0 to 32768
[  138.649121][ T4197] attempt to access beyond end of device
[  138.649121][ T4197] loop3: rw=2049, want=45104, limit=40427
[  138.709901][ T6731] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.923 (6731)
[  138.809576][ T6733] XFS (loop2): Mounting V5 Filesystem
[  138.834340][ T6731] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  138.864807][ T6731] BTRFS info (device loop0): enabling auto defrag
[  138.874090][ T6731] BTRFS info (device loop0): force clearing of disk cache
[  138.878995][ T6759] loop1: detected capacity change from 0 to 1024
[  138.881606][ T6731] BTRFS info (device loop0): max_inline at 0
[  138.894894][ T6731] BTRFS info (device loop0): turning on sync discard
[  138.901924][ T6731] BTRFS info (device loop0): disabling free space tree
[  138.909786][ T6731] BTRFS info (device loop0): has skinny extents
[  139.002125][ T6759] hfsplus: request for non-existent node 134217728 in B*Tree
[  139.010507][ T6733] XFS (loop2): Ending clean mount
[  139.012691][ T6733] XFS (loop2): Quotacheck needed: Please wait.
[  139.049990][ T6759] hfsplus: request for non-existent node 134217728 in B*Tree
[  139.130990][ T6733] XFS (loop2): Quotacheck: Done.
[  139.311870][ T4184] XFS (loop2): Unmounting Filesystem
[  139.344644][ T6731] BTRFS info (device loop0): enabling ssd optimizations
[  139.408277][ T6731] BTRFS info (device loop0): clearing free space tree
[  139.468379][ T6731] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  139.495870][ T6731] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  139.508025][ T6788] loop3: detected capacity change from 0 to 512
[  139.702391][ T6784] loop1: detected capacity change from 0 to 32768
[  139.958981][ T6762] loop4: detected capacity change from 0 to 32768
[  139.993473][ T4186] read_mapping_page failed!
[  139.998043][ T4186] ERROR: (device loop1): txCommit: 
[  139.998043][ T4186] 
[  140.083063][ T4186] ERROR: (device loop1): remounting filesystem as read-only
[  140.257829][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'.
[  140.265023][ T6762] XFS (loop4): Mounting V5 Filesystem
[  140.452617][  T277] ERROR: (device loop1): diFree: numfree > numinos
[  140.452617][  T277] 
[  140.536598][ T6762] XFS (loop4): Ending clean mount
[  140.714749][ T4187] XFS (loop4): Unmounting Filesystem
[  140.943129][ T6819] loop0: detected capacity change from 0 to 256
[  140.968372][ T6821] netlink: 'syz.3.947': attribute type 2 has an invalid length.
[  141.107058][ T6819] FAT-fs (loop0): Directory bread(block 64) failed
[  141.136231][ T6819] FAT-fs (loop0): Directory bread(block 65) failed
[  141.158367][ T6819] FAT-fs (loop0): Directory bread(block 66) failed
[  141.186623][ T6819] FAT-fs (loop0): Directory bread(block 67) failed
[  141.225870][ T6819] FAT-fs (loop0): Directory bread(block 68) failed
[  141.234755][ T6819] FAT-fs (loop0): Directory bread(block 69) failed
[  141.252262][ T6819] FAT-fs (loop0): Directory bread(block 70) failed
[  141.263460][ T6819] FAT-fs (loop0): Directory bread(block 71) failed
[  141.273634][ T6819] FAT-fs (loop0): Directory bread(block 72) failed
[  141.300703][ T6819] FAT-fs (loop0): Directory bread(block 73) failed
[  141.599370][ T6844] loop4: detected capacity change from 0 to 8
[  141.659961][ T6844] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  141.717874][ T3081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.752054][ T6844] cramfs: Error -3 while decompressing!
[  141.796203][ T6841] loop2: detected capacity change from 0 to 8192
[  141.809324][ T6844] cramfs: ffffffff961ed0a8(26)->ffff88805d5fe000(4096)
[  141.823113][ T6844] cramfs: Error -3 while decompressing!
[  141.828865][ T6844] cramfs: ffffffff961ed0c2(26)->ffff88805d5ff000(4096)
[  141.836299][ T6844] cramfs: Error -3 while decompressing!
[  141.842053][ T6844] cramfs: ffffffff961ed0dc(16)->ffff88805b940000(4096)
[  141.849479][ T6844] cramfs: Error -3 while decompressing!
[  141.864944][ T6844] cramfs: ffffffff961ed0a8(26)->ffff88805d5fe000(4096)
[  141.878043][   T26] audit: type=1800 audit(2000000049.936:71): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.958" name="file2" dev="loop4" ino=348 res=0 errno=0
[  141.912058][ T6841] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  141.921313][ T6841] REISERFS (device loop2): using ordered data mode
[  141.946158][ T6841] reiserfs: using flush barriers
[  141.963052][ T3081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.067583][ T6841] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  142.096412][ T3081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.185784][ T6841] REISERFS (device loop2): checking transaction log (loop2)
[  142.376850][ T3081] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.521735][ T6874] loop0: detected capacity change from 0 to 2048
[  142.637312][ T6841] REISERFS (device loop2): Using tea hash to sort names
[  142.667822][ T6841] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  142.693220][ T6874] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  142.702182][ T6883] netlink: 'syz.3.975': attribute type 4 has an invalid length.
[  142.765642][ T6884] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.783684][ T6883] netlink: 'syz.3.975': attribute type 8 has an invalid length.
[  142.857912][ T6883] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.975'.
[  143.251077][ T3081] tipc: Left network mode
[  143.254404][ T6863] chnl_net:caif_netlink_parms(): no params data found
[  143.494185][ T4437] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  143.515729][ T6904] loop0: detected capacity change from 0 to 2048
[  143.677145][ T6914] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.849035][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.892329][ T4437] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  143.907533][ T4437] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64
[  143.918818][ T4437] usb 4-1: config 0 interface 0 has no altsetting 0
[  143.919225][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.962885][ T6863] device bridge_slave_0 entered promiscuous mode
[  144.037643][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.059525][ T6931] loop2: detected capacity change from 0 to 64
[  144.071752][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.080042][ T6863] device bridge_slave_1 entered promiscuous mode
[  144.101575][ T4437] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  144.151286][ T6931] hfs: bad catalog entry type 65535
[  144.157870][ T4437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.185126][ T4437] usb 4-1: Product: syz
[  144.209882][ T4437] usb 4-1: Manufacturer: syz
[  144.214627][ T4437] usb 4-1: SerialNumber: syz
[  144.238094][ T4437] usb 4-1: config 0 descriptor??
[  144.251735][ T6863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.289878][ T6863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.307237][ T6896] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  144.351382][ T2339] Bluetooth: hci2: command 0x0409 tx timeout
[  144.470914][ T6863] team0: Port device team_slave_0 added
[  144.502523][ T6863] team0: Port device team_slave_1 added
[  144.525564][ T6928] loop4: detected capacity change from 0 to 32768
[  144.536058][ T6896] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  144.581215][ T4437] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  144.648824][ T6928] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.987 (6928)
[  144.693480][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.718836][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.765431][ T6928] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  144.795733][ T6928] BTRFS info (device loop4): enabling auto defrag
[  144.811303][ T6928] BTRFS info (device loop4): force clearing of disk cache
[  144.828144][ T6863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.842294][ T4437] usb 4-1: USB disconnect, device number 6
[  144.846219][ T3547] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  144.858440][ T6928] BTRFS info (device loop4): max_inline at 0
[  144.874637][ T6928] BTRFS info (device loop4): turning on sync discard
[  144.917021][ T6926] loop0: detected capacity change from 0 to 32768
[  144.923690][ T6928] BTRFS info (device loop4): disabling free space tree
[  144.935969][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.946582][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.978186][ T6928] BTRFS info (device loop4): has skinny extents
[  145.022683][ T6863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.178004][ T6928] BTRFS info (device loop4): enabling ssd optimizations
[  145.198589][ T6928] BTRFS info (device loop4): clearing free space tree
[  145.214433][ T6928] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  145.235445][ T6928] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  145.254134][ T6863] device hsr_slave_0 entered promiscuous mode
[  145.265693][ T6863] device hsr_slave_1 entered promiscuous mode
[  145.280967][ T6863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.289669][ T6863] Cannot create hsr debugfs directory
[  145.474544][ T6974] loop3: detected capacity change from 0 to 16
[  145.508608][ T6974] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  145.715009][ T3081] device hsr_slave_0 left promiscuous mode
[  145.737465][ T3081] device hsr_slave_1 left promiscuous mode
[  145.752892][ T3081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.815034][ T3081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.156929][ T3081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.175220][ T6993] netlink: 'syz.2.1001': attribute type 4 has an invalid length.
[  146.193683][ T3081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.214742][ T3081] device bridge_slave_1 left promiscuous mode
[  146.236787][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'.
[  146.259917][ T3081] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.419257][ T3081] device bridge_slave_0 left promiscuous mode
[  146.425087][ T6523] Bluetooth: hci2: command 0x041b tx timeout
[  146.428533][ T3081] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.587102][ T3081] device veth1_macvtap left promiscuous mode
[  146.612519][ T3081] device veth0_macvtap left promiscuous mode
[  146.618629][ T3081] device veth1_vlan left promiscuous mode
[  146.652279][ T3081] device veth0_vlan left promiscuous mode
[  146.902289][ T6987] loop0: detected capacity change from 0 to 32768
[  146.943390][ T6987] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.992 (6987)
[  147.055148][ T6987] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  147.078796][ T6987] BTRFS info (device loop0): enabling ssd optimizations
[  147.089441][ T6987] BTRFS info (device loop0): not using ssd optimizations
[  147.096743][ T6987] BTRFS info (device loop0): turning off barriers
[  147.141528][ T6987] BTRFS info (device loop0): using free space tree
[  147.148107][ T6987] BTRFS info (device loop0): has skinny extents
[  147.401832][ T7023] loop3: detected capacity change from 0 to 32768
[  147.405708][ T3081] team0 (unregistering): Port device team_slave_1 removed
[  147.519047][ T3081] team0 (unregistering): Port device team_slave_0 removed
[  147.568099][ T3081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.613762][ T3081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.653890][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'.
[  147.949637][ T3081] bond0 (unregistering): Released all slaves
[  148.055186][ T7016] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  148.080768][ T7016] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  148.345925][ T6863] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  148.378318][ T6863] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  148.415051][ T6863] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  148.480196][ T6863] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  148.493635][ T4558] Bluetooth: hci2: command 0x040f tx timeout
[  148.795024][ T7088] loop3: detected capacity change from 0 to 256
[  148.818214][ T7087] loop2: detected capacity change from 0 to 256
[  148.915781][ T7087] FAT-fs (loop2): Directory bread(block 64) failed
[  148.925498][ T6863] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.926981][ T7087] FAT-fs (loop2): Directory bread(block 65) failed
[  148.947365][ T7088] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f364794, utbl_chksum : 0xe619d30d)
[  148.977933][ T7053] loop0: detected capacity change from 0 to 32768
[  149.011963][ T7087] FAT-fs (loop2): Directory bread(block 66) failed
[  149.018539][ T7087] FAT-fs (loop2): Directory bread(block 67) failed
[  149.041318][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.049770][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.082950][ T7087] FAT-fs (loop2): Directory bread(block 68) failed
[  149.097926][ T7087] FAT-fs (loop2): Directory bread(block 69) failed
[  149.152775][ T7087] FAT-fs (loop2): Directory bread(block 70) failed
[  149.168522][ T7087] FAT-fs (loop2): Directory bread(block 71) failed
[  149.171142][ T6863] 8021q: adding VLAN 0 to HW filter on device team0
[  149.187417][ T7087] FAT-fs (loop2): Directory bread(block 72) failed
[  149.221776][ T7053] XFS (loop0): Mounting V5 Filesystem
[  149.238278][ T7087] FAT-fs (loop2): Directory bread(block 73) failed
[  149.269617][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.346814][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.396525][ T7053] XFS (loop0): Ending clean mount
[  149.433490][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.440635][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.468835][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.507855][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.529650][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.541385][ T4185] XFS (loop0): Unmounting Filesystem
[  149.571078][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.578210][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.643996][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.708676][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.767383][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.825119][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.857464][ T7118] loop2: detected capacity change from 0 to 512
[  149.861033][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.907363][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.942942][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.945226][ T7118] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  149.984664][ T6863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.077267][ T7118] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  150.098574][ T6863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.129770][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  150.149253][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.157824][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.172609][ T7118] EXT4-fs (loop2): 1 truncate cleaned up
[  150.187483][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.190658][ T7118] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback.
[  150.210302][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  150.366943][ T7118] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  150.464372][ T7131] loop0: detected capacity change from 0 to 1024
[  150.515491][ T7134] loop3: detected capacity change from 0 to 16
[  150.564410][ T7131] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,discard,nodiscard,. Quota mode: none.
[  150.577461][ T4558] Bluetooth: hci2: command 0x0419 tx timeout
[  150.657255][ T7134] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  150.911082][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.934177][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.971869][ T6863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.190305][ T4240] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  151.292541][ T7174] loop2: detected capacity change from 0 to 256
[  151.335456][ T7174] exfat: Deprecated parameter 'utf8'
[  151.398288][ T7166] loop0: detected capacity change from 0 to 8192
[  151.425925][ T7174] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  151.426570][ T7180] loop3: detected capacity change from 0 to 160
[  151.458377][ T4240] usb 5-1: Using ep0 maxpacket: 8
[  151.521752][ T7166] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  151.541325][ T7166] REISERFS (device loop0): using ordered data mode
[  151.549029][ T7166] reiserfs: using flush barriers
[  151.569910][ T7166] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  151.597217][ T7166] REISERFS (device loop0): checking transaction log (loop0)
[  151.620827][ T7166] REISERFS (device loop0): Using r5 hash to sort names
[  151.638401][ T7166] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  151.759900][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  151.768588][ T4240] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  151.793535][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.804370][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  151.815653][ T4240] usb 5-1: Product: syz
[  151.819839][ T4240] usb 5-1: Manufacturer: syz
[  151.828386][ T4240] usb 5-1: SerialNumber: syz
[  151.847072][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  151.901404][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.981296][ T6863] device veth0_vlan entered promiscuous mode
[  152.063983][ T6863] device veth1_vlan entered promiscuous mode
[  152.180427][ T7190] loop3: detected capacity change from 0 to 40427
[  152.190129][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  152.207729][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  152.216596][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  152.228867][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  152.237104][ T7190] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff
[  152.245569][ T7190] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xeffa
[  152.272465][ T7190] F2FS-fs (loop3): invalid crc value
[  152.290901][    C0] F2FS-fs (loop3) : inject read IO error in f2fs_read_end_io of blk_update_request+0x876/0x1200
[  152.302833][    C0] F2FS-fs (loop3) : inject read IO error in f2fs_read_end_io of blk_update_request+0x876/0x1200
[  152.313376][ T7190] F2FS-fs (loop3): Failed to initialize F2FS node manager (-5)
[  152.330403][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  152.407712][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  152.451691][ T4240] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4)
[  152.462110][ T6863] device veth0_macvtap entered promiscuous mode
[  152.472207][ T4240] mxuport: probe of 5-1:254.0 failed with error -5
[  152.503502][ T6863] device veth1_macvtap entered promiscuous mode
[  152.608877][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.680905][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.691858][ T4558] usb 5-1: USB disconnect, device number 9
[  152.730609][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.755105][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.797408][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.838523][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.848206][ T7213] loop3: detected capacity change from 0 to 64
[  152.858756][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.879467][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.898778][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.910073][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  152.943286][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.982994][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.992641][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  153.029442][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.053565][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.080185][ T5591] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  153.109724][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.151124][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.153087][ T7219] loop2: detected capacity change from 0 to 128
[  153.181432][ T7217] loop3: detected capacity change from 0 to 2048
[  153.188872][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.245008][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.266684][ T7217] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  153.293584][ T6863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.324999][ T7217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.335083][ T6863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.369099][ T5591] usb 1-1: Using ep0 maxpacket: 8
[  153.389085][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.403240][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  153.437392][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  153.483363][ T6863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.498908][ T5591] usb 1-1: config 140 has an invalid interface number: 41 but max is 0
[  153.524425][ T6863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.529868][ T5591] usb 1-1: config 140 has no interface number 0
[  153.539449][ T6863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.539481][ T6863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.653556][ T5591] usb 1-1: config 140 interface 41 altsetting 0 endpoint 0x6 has invalid maxpacket 926, setting to 64
[  153.800428][ T7227] loop3: detected capacity change from 0 to 4096
[  153.814808][ T7044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.835225][ T7044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.897903][ T5591] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=77.86
[  153.917162][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.958765][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  153.971501][ T5591] usb 1-1: Product: syz
[  153.975702][ T5591] usb 1-1: Manufacturer: syz
[  153.981845][ T7237] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.026788][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.038247][ T5591] usb 1-1: SerialNumber: syz
[  154.093017][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.178459][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  154.436144][ T5591] rndis_wlan 1-1:140.41: invalid descriptor buffer length
[  154.496273][ T5591] usb 1-1: bad CDC descriptors
[  154.543940][ T5591] rndis_host 1-1:140.41: invalid descriptor buffer length
[  154.615152][ T5591] usb 1-1: bad CDC descriptors
[  154.635835][ T5591] cdc_acm 1-1:140.41: invalid descriptor buffer length
[  154.652078][ T7259] loop5: detected capacity change from 0 to 2048
[  154.676012][ T5591] usb 1-1: USB disconnect, device number 10
[  154.730696][ T7222] loop4: detected capacity change from 0 to 32768
[  154.854196][ T7259] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.936370][ T7222] XFS (loop4): Mounting V5 Filesystem
[  155.138856][ T7290] loop2: detected capacity change from 0 to 256
[  155.151166][ T7222] XFS (loop4): Ending clean mount
[  155.299325][ T7290] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.324148][ T7290] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  155.361601][ T7303] loop3: detected capacity change from 0 to 256
[  155.388063][ T4187] XFS (loop4): Unmounting Filesystem
[  155.395938][ T7290] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  155.476198][ T7303] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.519337][ T7303] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  155.590393][ T7303] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  155.928585][ T7320] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  156.193741][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'.
[  156.222140][ T7335] loop2: detected capacity change from 0 to 512
[  156.434582][ T7335] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1099: bg 0: block 16: invalid block bitmap
[  156.435158][ T7335] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  156.435536][ T7335] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1099: attempt to clear invalid blocks 1669132790 len 1
[  156.452944][ T7335] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1099: invalid indirect mapped block 4294967295 (level 1)
[  156.462504][ T7335] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1099: invalid indirect mapped block 4294967295 (level 2)
[  156.462979][ T7335] EXT4-fs (loop2): 1 truncate cleaned up
[  156.463002][ T7335] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000000,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  157.045002][ T7377] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1113'.
[  157.568360][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'.
[  157.758192][ T7408] loop0: detected capacity change from 0 to 128
[  157.874773][ T7366] loop2: detected capacity change from 0 to 32768
[  157.883740][ T7408] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.929267][ T7408] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  158.000484][ T7366] read_mapping_page failed!
[  158.005450][ T7366] ERROR: (device loop2): txCommit: 
[  158.005450][ T7366] 
[  158.049527][ T7366] ERROR: (device loop2): remounting filesystem as read-only
[  158.070698][ T4197] syz-executor (4197) used greatest stack depth: 20704 bytes left
[  158.188305][  T277] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  158.237902][  T277] ------------[ cut here ]------------
[  158.258456][  T277] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  158.264226][  T277] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  158.270456][  T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted syzkaller #0
[  158.277667][  T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
SYZFAIL: failed to send rpc
fd=3 want=240 sent=0 n=-1 (errno 32: Broken pipe)
[  158.287731][  T277] RIP: 0010:txUnlock+0xc87/0xcb0
[  158.292697][  T277] Code: ef 03 d1 06 0f 0b e8 f8 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba a3 03 00 00 48 c7 c1 80 6a 42 8a e8 c9 03 d1 06 <0f> 0b e8 d2 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba
[  158.312317][  T277] RSP: 0018:ffffc90002d5fd28 EFLAGS: 00010246
[  158.318405][  T277] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ca86048d325dba00
[  158.326388][  T277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  158.334364][  T277] RBP: ffffc900028d2168 R08: dffffc0000000000 R09: ffffed10172267b0
[  158.342347][  T277] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffff888057ef87c0
[  158.350329][  T277] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900026b1220
[  158.358313][  T277] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  158.367252][  T277] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  158.373851][  T277] CR2: 00007ff029598000 CR3: 000000007df23000 CR4: 00000000003506e0
[  158.381832][  T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  158.389906][  T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  158.397886][  T277] Call Trace:
[  158.401175][  T277]  <TASK>
[  158.404119][  T277]  ? lockdep_hardirqs_on+0x94/0x140
[  158.409335][  T277]  jfs_lazycommit+0x583/0xb20
[  158.414033][  T277]  ? txFreelock+0x5a0/0x5a0
[  158.418549][  T277]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  158.424494][  T277]  ? sched_dynamic_update+0x210/0x210
[  158.429898][  T277]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  158.435799][  T277]  ? __kthread_parkme+0x157/0x1b0
[  158.440842][  T277]  kthread+0x436/0x520
[  158.444924][  T277]  ? txFreelock+0x5a0/0x5a0
[  158.449456][  T277]  ? kthread_blkcg+0xd0/0xd0
[  158.454071][  T277]  ret_from_fork+0x1f/0x30
[  158.458517][  T277]  </TASK>
[  158.461544][  T277] Modules linked in:
[  158.465490][    C1] vkms_vblank_simulate: vblank timer overrun
[  158.741358][  T277] ---[ end trace c093822a4e9fe3f4 ]---
[  158.747325][  T277] RIP: 0010:txUnlock+0xc87/0xcb0
[  158.754477][  T277] Code: ef 03 d1 06 0f 0b e8 f8 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba a3 03 00 00 48 c7 c1 80 6a 42 8a e8 c9 03 d1 06 <0f> 0b e8 d2 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba
[  158.786892][  T277] RSP: 0018:ffffc90002d5fd28 EFLAGS: 00010246
[  158.793618][  T277] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ca86048d325dba00
[  158.817392][  T277] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  158.825678][  T277] RBP: ffffc900028d2168 R08: dffffc0000000000 R09: ffffed10172267b0
[  158.851712][  T277] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffff888057ef87c0
[  158.862003][  T277] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900026b1220
[  158.886017][  T277] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  158.897443][  T277] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  158.904533][  T277] CR2: 0000562e5b2bc078 CR3: 000000002407c000 CR4: 00000000003506f0
[  158.913023][  T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  158.931956][  T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  158.943671][  T277] Kernel panic - not syncing: Fatal exception
[  158.950009][  T277] Kernel Offset: disabled
[  158.954337][  T277] Rebooting in 86400 seconds..