last executing test programs:

2.802348562s ago: executing program 1 (id=829):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

1.879711491s ago: executing program 1 (id=849):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x94)
write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'udf\x00', 0x3a, 'udf\x00', 0x3a, './file1'}, 0x2f)

1.829970833s ago: executing program 0 (id=840):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a0001002bbd7000fbdbdf250a808000000000000000000009001e"], 0x2c}}, 0x0)

1.707413997s ago: executing program 0 (id=845):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x7fffffff)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000001540)={0x0, 0x0, 0x2, &(0x7f0000001500)={0x0, "ca764c69d4a8e5a7595e19d70d56ee7b54260cda39d3f60c63815a66e1bd04bfcc"}})

1.571430921s ago: executing program 0 (id=847):
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00')
symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)

1.419745495s ago: executing program 1 (id=851):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x601, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f00000008c0)={0x0, [{0x0, 0x4e0, 0x4, &(0x7f00000000c0)="cba1c10359464de4cdaa7dd04a84747689c59920ea262973bf5018dfe410e875a1806c77a3b246c50754f406901b28373b2341fd59f026ffe70a6aef22a03c8bd9844d9b6e9f2554c46253bf7e76ad35296019d42915a7b563f08409aaa66875304d178c804b8939bd8acabec409ab3fd5edaf7c592ff25e2f7b82d442d44ca871e54aa0e7d2742373a7b1ba34a908d91483a28a5b7795a07fe022e3"}, {0x3, 0x4f8, 0x1, &(0x7f0000000180)="f117c422bec7796a63f9a558fa07d8eb5f4216a9edaa068966e1c5aa5189639db043a51bf715f128cfec1b1edfea6b4010fa5a7869ce2c84925210de5984af346da28429fd35cec90cfc55694f37b08a8f4412aba4731e148aa13c7b1cabcf6dc925f009bea4b496c719a019eb95890b6f3e87f3c6828b7dd208a3ca91a69746804e39052eb69001494fbf5b5eef468c96b3bc672cd373e9e552d744bea65d"}, {0x2, 0x2b8, 0x5c974d44, &(0x7f0000000c40)="48724da5fdba16fae31d460c790f4185ce5e6119f0dc4169cd85b53893396366a7f7e81610e9bd017adeaf8bc7917fa5066d77ede0408cdf2988e9c79e244480430fb15c29f8cfe94cb8e58c6a2d279436de1e0a48317c"}, {0x1, 0x3f8, 0xf1, &(0x7f00000002c0)="246a7cf08e64e07c1cafbe205ac41cc243f03f9bacb9947fcb545ca24095a00e77578470acee1694f65e8b43a6b8b1618787d2e99b5ec370d7c6e917e0207a8daf2eeb908f700bbac0fafce9c6bbb216950f31235cd49833c39e12b89f2bacdbe24482428223c810315d1954941fc1fb82d37af8026769da907f85a10997f2"}, {0x3, 0x2e8, 0xe3, &(0x7f0000000380)="a4fd7732987619bd0b2ed9c72e2e821b90adfc7211a8def831356f5da1dd70cf5da46400e80e16f8f327f19d7feb16a015cd41740d9d42a4a3df9ea7fe96fcc7855e556c2558118ce854f3f75f4d019a7a3e21b729a74305bb4772797a"}, {0x3, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x2, &(0x7f0000000440)}, {0x1, 0x300, 0x7, &(0x7f0000000500)="1ecdd0a31223132887cb713a03d85d4320499d83d01984846e89cd27b20eefd7556687b8b90253c4587986ee498c6b8cf868d4c792d310736f937d943ae2dad72a467d8f1543ce06093c521fb72046701a1dd4a9a6789cb3160c9530f9193061"}, {0x2, 0xf0, 0x10, &(0x7f0000000580)="36a723e6de28e74faaf4de94599bfb81bbe3a557077744c9c1e34abe3181"}, {0x2, 0x4e0, 0x6, &(0x7f00000005c0)="cba8b335befd7252f5dff38256f6fcc009a3bb335e19eee3ef71ed77b3e5e1ae69ab346832fb841069fc37c47edf9b77c07f42c43057c3b8ddb41c7abfb3cfa8ce30ebaf14535c2dbb7dd85dca09368ec604794cb097116bec98da1d0381a392af4d341a5e96ff68192be11f5760939f6986f3edf01dbbae2baf12b5badde76e0423de4c7cb9666fc7cffb46ec4a1606da602d81593adde264d578b3"}, {0x3, 0x5a8, 0x0, &(0x7f0000000680)="5afc33b16cb9bbc0af3bd5fd51ea7e58fb88860fe66e08eff1a6230511fd8f08441ece3d82bc05839cf7c8d9ad1077b99fa051d80e2ea48428c25e71ddad64b85a1d75744acad959891b07d1f49cbb5da8c8151b01c7e02fb85e4688af2a8e80388aba8942e5a118fc42613cde5be3927b02d864c2f83204e825fa939e39fdb3c539781f8b05dd13c614a72bb56617b6f586c735fe51e6522379e96117dff6a0a1cc0e6ca143f3ec38a08c880aa8c49d362e3e4117"}, {0x0, 0x178, 0x12, &(0x7f0000000740)="c786b6e521164ad9e13aa45bd745c2ccb9a9079d36c50f9f637d7f2fecfa2d7ce3f8cc49c0821d0a02ba2e1aa39998"}, {0x1, 0x358, 0x8, &(0x7f0000000780)="b923b1497a7a51a098c82c0522c5c6fc4f5782cc37378acafcdb094dbea617d56fece2c8b0381ed5465d55785fdc0865c2e881cb0d18c9ee48feec71be5aadbe84e74d1d348cbbe806cecba65273b5abb46df4ad3d2d94903bf3775dc4ad4a914fd16a3df90e353229b6b0"}, {0x2, 0xe0, 0x5, &(0x7f0000000800)="493be32189242d05d8710f5c735f43b416aa3f2d72d867fae0fd846b"}, {0x1, 0x78, 0x3, &(0x7f0000000840)="5868da145478b2eaaaf28268fd2b1a"}, {0x1, 0x0, 0x800, 0x0}]})

1.381164797s ago: executing program 0 (id=852):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0xf}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888)
close(0x3)

1.370398747s ago: executing program 3 (id=853):
r0 = socket(0x1e, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

1.244234711s ago: executing program 0 (id=855):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800034000000000080001400000000005000200000000000800064000000002080004400000000008000540000019000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)

1.196685112s ago: executing program 3 (id=856):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.180882943s ago: executing program 4 (id=858):
r0 = semget$private(0x0, 0x5, 0xac)
semop(r0, &(0x7f0000000000)=[{0x1, 0x8, 0x1000}, {0x1, 0xfff, 0x1800}, {0x4, 0xfff8, 0x1000}], 0x3)
semop(r0, &(0x7f0000000040)=[{0x3, 0x2, 0x1000}, {0x0, 0x4, 0x800}, {0x3, 0x5, 0x1000}, {0x2, 0x70f3, 0x800}, {0x3, 0x7}, {0x0, 0x7, 0x800}, {0x4, 0x800, 0x1800}, {0x2, 0x400, 0x1000}, {0x3, 0x81, 0x800}], 0x9)

1.083377756s ago: executing program 3 (id=859):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="2a000000010000", 0x7)

1.082695656s ago: executing program 0 (id=860):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040100000202ff000524000c000d240200000009000000898a5421c86f25b5680999be1befdbc4720609490d60ce7aa2ef003ebbaccfe0af88cdd4159f83ca80ffad9a71d048d0441211b0882dafbd4bcea1dd77024a3258e05b86092ea6f15c064cfd"], 0x0)

1.025881398s ago: executing program 1 (id=861):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x46, 0x10000002}, 0x3}}, 0x80, 0x0}, 0x4000080)

996.491349ms ago: executing program 4 (id=863):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff00c}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

973.400789ms ago: executing program 3 (id=864):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x1c, "31f37051696132c717b4fbfb873f22d167fedb41e6c74220d35ff08e"}, &(0x7f0000000200)=0x24)

889.545672ms ago: executing program 1 (id=865):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500), &(0x7f0000002040)=0x22)

875.438543ms ago: executing program 2 (id=866):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

829.520644ms ago: executing program 3 (id=867):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)

801.408735ms ago: executing program 2 (id=868):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x18, r0, 0x603, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x42000}, 0x4000054)

739.387876ms ago: executing program 3 (id=869):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x200804, &(0x7f0000000340)=ANY=[], 0x25, 0x55b1, &(0x7f0000006a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000))

738.755136ms ago: executing program 2 (id=870):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a58000000060a0b0400000000000000000200fffd2c0004802800018007000100637400001c000280080001400000000d05000300e9ff000008000240000000090900010073797a30000000000900020073797a32"], 0x80}}, 0x4)

729.327627ms ago: executing program 1 (id=871):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x6142, &(0x7f0000009100)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000500)=""/49, 0x31)

674.125449ms ago: executing program 4 (id=872):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x300})

548.006333ms ago: executing program 4 (id=873):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000002180)={0x0, 0x3938700}, &(0x7f00000021c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

536.922943ms ago: executing program 2 (id=874):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount$afs(&(0x7f0000000180)=@cell={0x23, 'syz1:', 'syz1', '.backup'}, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14800, 0x0)
mount$afs(&(0x7f0000000100)=@cell={0x25, 'syz1:', 'syz1'}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x10000, 0x0)

308.06149ms ago: executing program 2 (id=875):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

210.692113ms ago: executing program 4 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

62.668228ms ago: executing program 4 (id=877):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendto$inet6(r0, &(0x7f0000000480)="e02a7bb6e7da72697b2cdbbcff42a02b0f8bb691348acb814839e600969dac7c83d0fbc38c1ce536bc54c8ba122e63c7063ab3697ca58e7d", 0x38, 0x4000000, &(0x7f0000000280)={0x1d, 0x5e23, 0x20000004, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc52}, 0x1c)

0s ago: executing program 2 (id=878):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x47, 0x4)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)

kernel console output (not intermixed with test programs):

S (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   65.753968][ T4313] REISERFS (device loop1): checking transaction log (loop1)
[   65.823153][ T4191] playstation 0003:054C:0DF2.0001: item fetching failed at offset 2/5
[   65.831567][ T4313] REISERFS (device loop1): Using r5 hash to sort names
[   65.832929][ T4313] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   65.851754][ T4191] playstation 0003:054C:0DF2.0001: Parse failed
[   65.861688][ T4191] playstation: probe of 0003:054C:0DF2.0001 failed with error -22
[   65.894829][ T4313] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   65.952602][ T4330] loop0: detected capacity change from 0 to 65
[   66.054266][ T4330] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[   66.096552][ T4313] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[   66.111140][ T4333] capability: warning: `syz.4.30' uses deprecated v2 capabilities in a way that may be insecure
[   66.165852][ T4191] usb 4-1: USB disconnect, device number 2
[   66.188814][ T4313] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[   66.252652][ T4313] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[   66.290640][ T4337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'.
[   66.348562][ T4339] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   66.359823][ T4339] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   66.495657][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.542762][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.569829][   T23] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   66.582201][ T4350] loop0: detected capacity change from 0 to 1024
[   66.698837][ T4350] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   66.700519][ T4354] loop4: detected capacity change from 0 to 2048
[   66.817877][ T4354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   66.875265][ T4363] loop3: detected capacity change from 0 to 128
[   66.892696][ T4366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.46'.
[   66.958886][ T4359] fido_id[4359]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   67.012606][ T4363] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   67.047754][ T4370] binder_alloc: binder_alloc_mmap_handler: 4369 200000ffe000-200001000000 already mapped failed -16
[   67.069892][ T4363] hpfs: filesystem error: improperly stopped
[   67.076100][ T4363] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   67.132250][ T4363] hpfs: You really don't want any checks? You are crazy...
[   67.162301][ T4363] hpfs: hpfs_map_sector(): read error
[   67.193036][ T4363] hpfs: code page support is disabled
[   67.212372][ T4363] hpfs: hpfs_map_4sectors(): unaligned read
[   67.223866][ T4376] x_tables: ip_tables: tcp match: only valid for protocol 6
[   67.251520][ T4363] hpfs: hpfs_map_4sectors(): unaligned read
[   67.257477][ T4363] hpfs: filesystem error: unable to find root dir
[   67.284729][ T4378] loop0: detected capacity change from 0 to 1024
[   68.083731][ T4364] loop1: detected capacity change from 0 to 32768
[   68.163586][ T4364] XFS (loop1): Mounting V5 Filesystem
[   68.287114][ T4364] XFS (loop1): Ending clean mount
[   68.303264][ T4235] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 
[   68.367972][ T4235] XFS (loop1): Unmount and run xfs_repair
[   68.404553][ T4235] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   68.444353][ T4383] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   68.449521][ T4235] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[   68.482762][ T4235] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[   68.496854][ T4383] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   68.500118][ T4235] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[   68.514780][ T4235] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[   68.545848][ T4235] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[   68.563279][ T4235] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   68.582488][ T4235] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[   68.595024][ T4383] F2FS-fs (loop3): Found nat_bits in checkpoint
[   68.602741][ T4235] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   68.616977][ T4364] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74
[   68.657503][ T4364] XFS (loop1): Failed to initialize disk quotas.
[   68.852937][ T4383] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   68.913244][ T4383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   68.924672][ T4199] XFS (loop1): Unmounting Filesystem
[   69.144722][ T4383] F2FS-fs (loop3): Can't flush 1 in 0 for segs_per_sec 1 != 1
[   69.337351][ T4431] process 'syz.0.68' launched './file0' with NULL argv: empty string added
[   69.672395][ T4438] comedi comedi0: Minor 3 could not be opened
[   69.902746][ T4453] set_capacity_and_notify: 2 callbacks suppressed
[   69.902764][ T4453] loop1: detected capacity change from 0 to 128
[   69.958278][ T4456] mmap: syz.0.79 (4456): VmData 49205248 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   70.002522][ T4453] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   70.059039][ T4453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.228919][ T4462] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   70.389079][ T1346] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   70.452688][ T4476] loop2: detected capacity change from 0 to 64
[   70.551588][ T4476] hfs: hfs: Invalid key length: 94
[   70.603937][ T4478] loop4: detected capacity change from 0 to 4096
[   70.682584][ T4478] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   70.706279][ T4189] hfs: node 4:3 still has 1 user(s)!
[   70.788081][ T1346] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.824204][ T1346] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   70.839634][ T4478] ntfs: volume version 3.1.
[   70.884816][ T1346] usb 1-1: config 1 has no interface number 0
[   70.897741][ T1346] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   70.934436][ T1346] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   70.977218][ T1346] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   71.051446][ T3034] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[   71.203329][ T1346] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.223604][ T1346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.241539][ T1346] usb 1-1: Product: syz
[   71.242053][ T4482] loop3: detected capacity change from 0 to 32768
[   71.245928][ T1346] usb 1-1: Manufacturer: syz
[   71.260431][ T1346] usb 1-1: SerialNumber: syz
[   71.278631][ T4482] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.92 (4482)
[   71.298436][ T4459] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   71.413214][ T4482] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   71.447178][ T4482] BTRFS info (device loop3): enabling ssd optimizations
[   71.465741][ T4482] BTRFS info (device loop3): not using ssd optimizations
[   71.503293][ T4482] BTRFS info (device loop3): turning off barriers
[   71.515075][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.515231][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.547995][ T4482] BTRFS info (device loop3): using free space tree
[   71.581447][ T4482] BTRFS info (device loop3): has skinny extents
[   71.750750][ T4528] loop2: detected capacity change from 0 to 16
[   71.778563][ T4459] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   71.826482][ T4528] erofs: (device loop2): mounted with root inode @ nid 36.
[   71.998064][ T1346] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS
[   72.014526][ T1346] cdc_ncm 1-1:1.1: bind() failure
[   72.050756][ T1346] usb 1-1: USB disconnect, device number 2
[   72.162346][ T4541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.111'.
[   72.307894][   T23] Bluetooth: hci2: command 0x080c tx timeout
[   72.506325][ T4551] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   72.506325][ T4551] The task syz.2.114 (4551) triggered the difference, watch for misbehavior.
[   72.593311][ T4538] loop1: detected capacity change from 0 to 32768
[   72.700035][ T4538] JBD2: Ignoring recovery information on journal
[   72.779288][ T4538] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   72.853587][ T4538] (syz.1.110,4538,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[   72.863644][ T4538] (syz.1.110,4538,0):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 3934730872549885558 failed -12
[   72.874502][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'.
[   72.876836][ T4538] (syz.1.110,4538,0):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12
[   72.897583][ T4538] (syz.1.110,4538,0):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12
[   72.909918][ T4538] (syz.1.110,4538,0):ocfs2_test_inode_bit:2874 ERROR: status = -12
[   72.919048][ T4538] (syz.1.110,4538,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[   73.118809][ T4199] ocfs2: Unmounting device (7,1) on (node local)
[   73.333644][ T4583] loop2: detected capacity change from 0 to 8
[   73.450565][ T4583] SQUASHFS error: zlib decompression failed, data probably corrupt
[   73.541538][ T4583] SQUASHFS error: Failed to read block 0x9b: -5
[   73.568119][ T4583] SQUASHFS error: Unable to read metadata cache entry [99]
[   73.575574][ T4583] SQUASHFS error: Unable to read inode 0x127
[   73.782813][ T4577] loop0: detected capacity change from 0 to 32768
[   73.829951][ T4558] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   73.856854][ T4577] JBD2: Ignoring recovery information on journal
[   73.877737][ T4559] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[   73.892524][ T4592] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   73.916784][ T4577] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   74.034636][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[   74.249683][ T4601] vivid-001: disconnect
[   74.256553][ T4600] vivid-001: reconnect
[   74.312731][ T4559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   74.313750][ T4603] loop0: detected capacity change from 0 to 1024
[   74.331992][ T4559] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8
[   74.345799][ T4559] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[   74.361373][ T4559] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[   74.381271][ T4559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.400449][ T4559] usb 4-1: config 0 descriptor??
[   74.429248][ T4589] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   74.455671][ T4247] hfsplus: b-tree write err: -5, ino 25
[   74.457995][ T4558] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[   74.471238][ T4247] hfsplus: b-tree write err: -5, ino 4
[   74.473964][ T4558] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[   74.485472][ T4247] hfsplus: b-tree write err: -5, ino 2
[   74.494913][ T4558] usb 2-1: Product: syz
[   74.499651][ T4558] usb 2-1: Manufacturer: syz
[   74.504870][ T4558] usb 2-1: SerialNumber: syz
[   74.585433][ T4558] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[   74.833404][ T4621] loop4: detected capacity change from 0 to 64
[   74.908453][ T4559] hid (null): unknown global tag 0xa3
[   74.937137][ T4559] asus 0003:0B05:17E0.0003: unexpected long global item
[   74.951693][ T4622] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.140: lblock 2 mapped to illegal pblock 2 (length 1)
[   74.966129][ T4559] asus 0003:0B05:17E0.0003: Asus hid parse failed: -22
[   75.005664][ T4622] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   75.016469][ T4622] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.140: lblock 0 mapped to illegal pblock 48 (length 1)
[   75.033510][ T4622] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   75.038099][ T4558] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   75.044775][ T4622] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.140: Failed to acquire dquot type 0
[   75.073948][ T4559] asus: probe of 0003:0B05:17E0.0003 failed with error -22
[   75.077407][ T4622] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   75.121117][ T4622] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.140: mark_inode_dirty error
[   75.121196][ T4558] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[   75.144664][ T4622] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[   75.163530][ T4559] usb 4-1: USB disconnect, device number 3
[   75.189299][ T4613] set_capacity_and_notify: 1 callbacks suppressed
[   75.189315][ T4613] loop2: detected capacity change from 0 to 32768
[   75.204033][ T4622] EXT4-fs (loop0): 1 orphan inode deleted
[   75.243052][ T4622] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none.
[   75.261875][ T4558] usb 2-1: USB disconnect, device number 2
[   75.308223][ T3034] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[   75.325745][ T4633] loop4: detected capacity change from 0 to 512
[   75.335806][ T3034] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   75.345277][ T3034] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0
[   75.384597][ T4633] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   75.419417][ T4633] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   75.459064][ T4633] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0102]
[   75.467401][ T4633] System zones: 1-12
[   75.497953][ T4633] EXT4-fs (loop4): orphan cleanup on readonly fs
[   75.506088][ T4633] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.145: invalid indirect mapped block 2 (level 2)
[   75.546329][ T4633] EXT4-fs (loop4): Remounting filesystem read-only
[   75.549673][  T384] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[   75.554135][ T4633] EXT4-fs (loop4): 1 truncate cleaned up
[   75.573425][ T4633] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,data=writeback,errors=remount-ro,abort. Quota mode: none.
[   75.624188][  T384] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   75.641596][  T384] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0
[   75.662567][ T4188] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[   75.685542][ T4188] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[   75.695977][ T4188] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[   75.721343][ T4638] netlink: 'syz.2.148': attribute type 1 has an invalid length.
[   76.317102][ T4660] loop2: detected capacity change from 0 to 512
[   76.331346][ T4664] loop4: detected capacity change from 0 to 64
[   76.441674][ T4660] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.158: invalid indirect mapped block 4294967295 (level 1)
[   76.479728][ T4660] EXT4-fs (loop2): Remounting filesystem read-only
[   76.486318][ T4660] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.158: invalid indirect mapped block 4294967295 (level 1)
[   76.501503][ T4660] EXT4-fs (loop2): Remounting filesystem read-only
[   76.510625][ T4660] EXT4-fs (loop2): 2 truncates cleaned up
[   76.516575][ T4660] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000004,. Quota mode: writeback.
[   76.740574][ T4645] loop3: detected capacity change from 0 to 32768
[   76.746952][ T4675] loop4: detected capacity change from 0 to 512
[   76.797729][ T4671] loop0: detected capacity change from 0 to 4096
[   76.868163][ T4671] EXT4-fs (loop0): inline encryption not supported
[   76.875461][ T4675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   76.900420][ T4675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   76.968028][ T4675] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.165: bad orphan inode 131083
[   77.034285][ T4675] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[   77.089066][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   77.103917][ T4687] capability: warning: `syz.2.169' uses 32-bit capabilities (legacy support in use)
[   77.129623][ T4671] EXT4-fs (loop0): Test dummy encryption mode enabled
[   77.183967][   T26] audit: type=1800 audit(1779785513.993:2): pid=4675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.165" name="bus" dev="loop4" ino=18 res=0 errno=0
[   77.196784][ T4671] EXT4-fs (loop0): Ignoring removed bh option
[   77.271430][ T4671] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[   77.320785][ T4671] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,bh,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[   77.508126][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[   77.569573][ T4701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'.
[   77.597956][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.601302][ T4671] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[   77.617779][   T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   77.657876][   T23] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   77.671382][ T4705] loop3: detected capacity change from 0 to 1024
[   77.682403][   T23] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   77.743128][   T23] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   77.764908][   T23] usb 2-1: config 1 interface 1 has no altsetting 0
[   77.793890][ T4711] loop2: detected capacity change from 0 to 512
[   77.826824][ T4705] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback.
[   78.002030][ T4711] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #3: comm syz.2.179: corrupted inode contents
[   78.007938][   T23] usb 2-1: string descriptor 0 read error: -22
[   78.047795][   T23] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   78.057252][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.108556][ T4718] loop0: detected capacity change from 0 to 1764
[   78.133047][ T4715] EXT4-fs warning (device loop3): empty_inline_dir:1862: bad inline directory (dir #12) - no `..'
[   78.154556][ T4711] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #3: comm syz.2.179: mark_inode_dirty error
[   78.195249][ T4711] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #3: comm syz.2.179: corrupted inode contents
[   78.222091][ T4711] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.179: mark_inode_dirty error
[   78.271667][ T4711] Quota error (device loop2): write_blk: dquota write failed
[   78.293602][ T4711] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   78.306654][ T4711] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.179: Failed to acquire dquot type 0
[   78.376995][ T4711] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.179: corrupted inode contents
[   78.416565][ T4711] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #16: comm syz.2.179: mark_inode_dirty error
[   78.463755][ T4711] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.179: corrupted inode contents
[   78.505581][ T4711] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.179: mark_inode_dirty error
[   78.520821][ T4711] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.179: corrupted inode contents
[   78.535447][ T4711] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   78.545555][ T4711] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.179: corrupted inode contents
[   78.562474][ T4711] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.179: mark_inode_dirty error
[   78.574957][ T4711] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   78.589025][ T4711] EXT4-fs (loop2): 1 truncate cleaned up
[   78.594718][ T4711] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[   78.601195][ T4725] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.613401][ T4711] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.648211][ T4724] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[   78.725180][ T4713] XFS (loop4): Mounting V5 Filesystem
[   78.737974][ T4550] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   78.797866][   T23] usb 2-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4
[   78.827844][   T23] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4
[   78.931348][   T23] usb 2-1: USB disconnect, device number 3
[   78.960792][ T4713] XFS (loop4): Ending clean mount
[   78.993930][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   79.089821][ T4713] XFS (loop4): Quotacheck needed: Please wait.
[   79.133568][ T4737] Trying to free block not in datazone
[   79.144286][ T4550] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   79.165421][ T4550] usb 4-1: config 0 has no interface number 0
[   79.174743][ T4550] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.190827][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.214129][ T4737] Trying to free block not in datazone
[   79.224780][ T4737] Trying to free block not in datazone
[   79.247328][ T4550] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.261099][ T4737] Trying to free block not in datazone
[   79.277152][ T4550] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   79.337006][ T4550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.368899][ T4550] usb 4-1: config 0 descriptor??
[   79.392822][ T4713] XFS (loop4): Quotacheck: Done.
[   79.617595][ T4197] XFS (loop4): Unmounting Filesystem
[   79.691834][ T4744] EXT4-fs (loop1): inline encryption not supported
[   79.762993][ T4744] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,inlinecrypt,. Quota mode: none.
[   79.793334][ T4744] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.922444][ T4739] 
[   79.922444][ T4739]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   79.922444][ T4739] 
[   79.962293][ T4550] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1
[   79.990676][ T4739] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[   79.990676][ T4739] 
[   80.053077][ T4550] hid_prodikeys: hid-prodikeys: failed to find output report
[   80.053077][ T4550] 
[   80.057998][ T4754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.193'.
[   80.086480][ T4739] ERROR: (device loop0): jfs_unlink: 
[   80.086480][ T4739] 
[   80.130761][ T4755] jfs_unlink: dtDelete returned -2
[   80.148349][ T4754] netlink: 108 bytes leftover after parsing attributes in process `syz.1.193'.
[   80.197403][ T4550] usb 4-1: USB disconnect, device number 4
[   80.206984][ T4754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.193'.
[   80.245228][ T4754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.193'.
[   80.296527][ T4188] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt
[   80.296527][ T4188] 
[   80.349819][ T4762] set_capacity_and_notify: 5 callbacks suppressed
[   80.349835][ T4762] loop4: detected capacity change from 0 to 64
[   80.364440][  T154] ERROR: (device loop0): diWrite: ixpxd invalid
[   80.364440][  T154] 
[   80.404553][  T154] ERROR: (device loop0): txCommit: 
[   80.404553][  T154] 
[   80.405784][ T4760] fido_id[4760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   80.424858][  T154] jfs_write_inode: jfs_commit_inode failed!
[   80.436306][ T4188] 
[   80.436306][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   80.436306][ T4188] 
[   80.471085][ T4188] 
[   80.471085][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   80.471085][ T4188] 
[   80.784888][ T4777] loop3: detected capacity change from 0 to 512
[   80.944447][ T4787] ax25_connect(): syz.2.208 uses autobind, please contact jreuter@yaina.de
[   80.960367][ T4777] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv0,nouid32,,errors=continue. Quota mode: none.
[   81.180392][ T4797] tipc: Started in network mode
[   81.185730][ T4797] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   81.194645][ T4777] EXT4-fs error (device loop3): ext4_readdir:223: inode #2: comm syz.3.204: path (unknown): directory fails checksum at offset 0
[   81.249838][ T4797] tipc: Enabled bearer <eth:team0>, priority 6
[   81.301014][ T4800] loop1: detected capacity change from 0 to 2048
[   81.346153][ T4801] loop2: detected capacity change from 0 to 2048
[   81.448252][ T4806] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.476044][ T4800] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,abort,max_dir_size_kb=0x0000000000000000,grpjquota=,,errors=continue. Quota mode: writeback.
[   81.568856][ T4805] loop4: detected capacity change from 0 to 4096
[   81.596555][ T4800] EXT4-fs error (device loop1): ext4_ext_precache:608: inode #2: comm syz.1.214: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[   81.715470][ T4812] loop3: detected capacity change from 0 to 1024
[   81.724864][ T4805] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   81.756716][ T1107] cfg80211: failed to load regulatory.db
[   81.968974][  T154] hfsplus: b-tree write err: -5, ino 25
[   81.988001][  T154] hfsplus: b-tree write err: -5, ino 4
[   81.994059][  T154] hfsplus: b-tree write err: -5, ino 2
[   82.370288][   T23] tipc: Node number set to 11578026
[   82.405492][ T4832] loop2: detected capacity change from 0 to 1024
[   82.476355][ T4832] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   82.534430][ T4832] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   82.578857][ T4832] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   82.668378][ T4832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[   82.687255][ T4832] System zones: 0-1, 3-36
[   82.715591][ T4842] loop3: detected capacity change from 0 to 4096
[   82.734978][ T4842] EXT4-fs (loop3): Test dummy encryption mode enabled
[   82.743489][ T4832] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,nobarrier,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   82.809834][ T4842] EXT4-fs (loop3): Ignoring removed orlov option
[   82.839104][ T4847] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   82.926334][ T4842] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[   83.037065][ T4840] loop0: detected capacity change from 0 to 32768
[   83.294697][ T4854] loop3: detected capacity change from 0 to 2048
[   83.377536][ T4858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'.
[   83.448584][ T4858] netlink: 'syz.2.239': attribute type 2 has an invalid length.
[   83.464188][ T4854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.538233][ T4858] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   83.546256][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'.
[   84.030770][ T4871] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   84.254587][ T4836] XFS (loop4): Mounting V5 Filesystem
[   84.492304][ T4836] XFS (loop4): Ending clean mount
[   84.492994][ T4889] EXT4-fs error (device loop3): ext4_quota_enable:6444: comm syz.3.248: inode #196608: comm syz.3.248: iget: illegal inode #
[   84.520280][ T4889] EXT4-fs error (device loop3): ext4_quota_enable:6447: comm syz.3.248: Bad quota inode: 196608, type: 2
[   84.547389][ T4836] XFS (loop4): Quotacheck needed: Please wait.
[   84.568921][ T4889] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=196608). Please run e2fsck to fix.
[   84.591066][ T4889] EXT4-fs (loop3): mount failed
[   84.687198][ T4836] XFS (loop4): Quotacheck: Done.
[   85.198578][ T4934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.265'.
[   85.264328][ T4936] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   85.977456][ T4197] XFS (loop4): Unmounting Filesystem
[   86.347968][ T4550] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   86.398180][ T4548] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   86.616272][ T4956] set_capacity_and_notify: 5 callbacks suppressed
[   86.616290][ T4956] loop1: detected capacity change from 0 to 40427
[   86.649730][ T4956] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   86.656593][ T4956] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   86.690595][ T4956] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 297097612231902693)
[   86.697768][ T4548] usb 3-1: Using ep0 maxpacket: 8
[   86.747999][ T4550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   86.769552][ T4550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   86.795654][ T4956] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   86.796331][ T4550] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[   86.832033][ T4550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.833834][ T4956] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   86.864270][ T4550] usb 4-1: config 0 descriptor??
[   86.908121][ T4965] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   86.916683][ T4548] usb 3-1: unable to get BOS descriptor or descriptor too short
[   86.990558][ T4199] attempt to access beyond end of device
[   86.990558][ T4199] loop1: rw=2049, want=45104, limit=40427
[   87.028365][ T4548] usb 3-1: config 4 interface 0 has no altsetting 0
[   87.061791][ T4981] loop4: detected capacity change from 0 to 32768
[   87.184726][ T4981] JBD2: Ignoring recovery information on journal
[   87.308075][ T4548] usb 3-1: string descriptor 0 read error: -22
[   87.315352][ T4548] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   87.325882][ T4548] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[   87.336779][ T4981] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   87.381113][ T4550] elecom 0003:056E:010C.0005: unknown main item tag 0x3
[   87.396715][ T4981] (syz.4.289,4981,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[   87.409545][ T4548] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   87.427572][ T4550] elecom 0003:056E:010C.0005: unknown main item tag 0x0
[   87.446851][ T4981] (syz.4.289,4981,1):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 3934730872549885558 failed -12
[   87.455853][ T4550] elecom 0003:056E:010C.0005: unknown main item tag 0x0
[   87.466817][ T4550] elecom 0003:056E:010C.0005: unknown main item tag 0x0
[   87.478729][ T4981] (syz.4.289,4981,1):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12
[   87.486956][ T4548] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   87.494205][ T4981] (syz.4.289,4981,1):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12
[   87.500697][ T4550] elecom 0003:056E:010C.0005: unknown main item tag 0x0
[   87.513370][ T4981] (syz.4.289,4981,1):ocfs2_test_inode_bit:2874 ERROR: status = -12
[   87.525748][ T4548] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   87.534837][ T4550] elecom 0003:056E:010C.0005: unknown main item tag 0x0
[   87.538850][ T4981] (syz.4.289,4981,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[   87.542422][ T4548] usb 3-1: media controller created
[   87.556176][ T4550] elecom 0003:056E:010C.0005: unknown main item tag 0x0
[   87.563692][ T4550] elecom 0003:056E:010C.0005: unknown main item tag 0x0
[   87.587974][   T23] Bluetooth: hci0: command 0x0c1a tx timeout
[   87.594145][ T4548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.598867][ T4235] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   87.613764][ T4550] elecom 0003:056E:010C.0005: hidraw0: USB HID v0.08 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0
[   87.641367][ T4966] usb 3-1: dvb_usb_au6610: wlen=0, aborting
[   87.698611][ T4548] zl10353_read_register: readreg error (reg=127, ret==0)
[   87.706476][ T4550] usb 4-1: USB disconnect, device number 5
[   87.743987][ T4197] ocfs2: Unmounting device (7,4) on (node local)
[   87.747296][ T4994] fido_id[4994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[   87.773118][ T4993] loop0: detected capacity change from 0 to 4096
[   87.818537][ T4548] usb 3-1: USB disconnect, device number 2
[   87.881222][ T4993] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   87.891938][ T4235] usb 2-1: Using ep0 maxpacket: 16
[   88.008066][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.042738][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.073411][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   88.121206][ T4235] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   88.137737][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.169662][ T4235] usb 2-1: config 0 descriptor??
[   88.176838][ T4999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'.
[   88.295620][ T5003] netlink: 104 bytes leftover after parsing attributes in process `syz.3.297'.
[   88.671040][ T4235] microsoft 0003:045E:07DA.0006: unbalanced collection at end of report description
[   88.702383][ T4235] microsoft 0003:045E:07DA.0006: parse failed
[   88.731706][ T4235] microsoft: probe of 0003:045E:07DA.0006 failed with error -22
[   88.824707][ T4997] mmap: syz.4.294 (4997) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   88.945560][ T4548] usb 2-1: USB disconnect, device number 4
[   89.617090][ T5054] IPVS: stopping backup sync thread 4847 ...
[   90.056845][ T5023] loop2: detected capacity change from 0 to 40427
[   90.118355][ T5063] loop0: detected capacity change from 0 to 8192
[   90.183429][ T5023] F2FS-fs (loop2): invalid crc value
[   90.186224][ T5077] loop3: detected capacity change from 0 to 256
[   90.212372][ T5063] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   90.257830][ T5063] REISERFS (device loop0): using ordered data mode
[   90.260068][ T5023] F2FS-fs (loop2): Found nat_bits in checkpoint
[   90.332148][ T5023] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[   90.344249][ T5023] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[   90.344584][ T5063] reiserfs: using flush barriers
[   90.360936][ T5077] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[   90.364906][ T5023] F2FS-fs (loop2): Start checkpoint disabled!
[   90.426737][ T5063] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   90.490433][ T5063] REISERFS (device loop0): checking transaction log (loop0)
[   90.538078][ T5023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   90.676106][ T5092] loop3: detected capacity change from 0 to 512
[   90.732779][ T5092] EXT4-fs (loop3): Ignoring removed oldalloc option
[   90.756638][ T5092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   90.849984][ T5063] REISERFS (device loop0): Using tea hash to sort names
[   90.857612][ T5063] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   90.913732][ T5092] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   90.978102][ T5092] EXT4-fs (loop3): 1 truncate cleaned up
[   90.983809][ T5092] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none.
[   91.004291][    C1] vkms_vblank_simulate: vblank timer overrun
[   91.016287][ T4283] attempt to access beyond end of device
[   91.016287][ T4283] loop2: rw=2049, want=40992, limit=40427
[   91.600787][ T5114] loop4: detected capacity change from 0 to 4096
[   91.740462][ T5121] loop1: detected capacity change from 0 to 512
[   91.751761][ T5114] ntfs: volume version 3.1.
[   91.764054][ T5114] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   91.767095][ T5119] loop0: detected capacity change from 0 to 4096
[   91.781703][ T5114] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   91.797852][ T4548] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   91.835827][ T5114] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[   91.844191][ T5121] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.350: invalid block
[   91.871480][ T5114] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[   91.896466][ T5121] EXT4-fs (loop1): Remounting filesystem read-only
[   91.904893][ T5121] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.350: invalid indirect mapped block 4294967295 (level 1)
[   91.932817][ T5114] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[   91.943929][ T5114] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[   91.944270][ T5121] EXT4-fs (loop1): Remounting filesystem read-only
[   91.967746][ T5121] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.350: invalid indirect mapped block 4294967295 (level 1)
[   92.049786][ T5127] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.106477][ T5121] EXT4-fs (loop1): Remounting filesystem read-only
[   92.127789][ T4548] usb 4-1: Using ep0 maxpacket: 32
[   92.139937][ T5121] EXT4-fs (loop1): 2 truncates cleaned up
[   92.169436][ T5114] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net.
[   92.189820][ T5121] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000004,. Quota mode: writeback.
[   92.213604][ T5129] overlayfs: upper fs does not support tmpfile.
[   92.264545][ T5129] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   92.284083][ T4548] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[   92.300562][ T4548] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.311718][ T5129] overlayfs: failed to set xattr on upper
[   92.330532][ T4548] usb 4-1: config 0 has no interface number 0
[   92.334002][ T5114] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[   92.342570][ T4548] usb 4-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   92.353813][ T5129] overlayfs: ...falling back to index=off,metacopy=off.
[   92.387750][ T5129] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   92.396970][ T5114] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[   92.416367][ T4548] usb 4-1: config 0 interface 196 has no altsetting 0
[   92.503426][ T5137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'.
[   92.555018][ T5137] netlink: 'syz.2.358': attribute type 21 has an invalid length.
[   92.580861][ T5137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.358'.
[   92.608027][ T4548] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   92.634998][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.679694][ T4548] usb 4-1: Product: syz
[   92.683955][ T4548] usb 4-1: Manufacturer: syz
[   92.694705][ T4548] usb 4-1: SerialNumber: syz
[   92.714820][ T4188] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424
[   92.730749][ T4548] usb 4-1: config 0 descriptor??
[   92.746086][ T5146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.362'.
[   92.758253][ T4188] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12)
[   92.771904][ T5146] netlink: 43 bytes leftover after parsing attributes in process `syz.2.362'.
[   92.796182][ T5146] netlink: 'syz.2.362': attribute type 5 has an invalid length.
[   92.806140][ T4188] Remounting filesystem read-only
[   92.811377][ T4188] NILFS (loop0): error -5 truncating bmap (ino=12)
[   92.827211][ T5146] netlink: 43 bytes leftover after parsing attributes in process `syz.2.362'.
[   92.848052][ T4188] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[   93.058621][ T4548] ipheth 4-1:0.196: Unable to find endpoints
[   93.150584][ T5159] loop0: detected capacity change from 0 to 512
[   93.306601][ T4235] usb 4-1: USB disconnect, device number 6
[   93.351024][ T5166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'.
[   93.361077][ T5159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.367: inode #1: comm syz.0.367: iget: illegal inode #
[   93.466278][ T5159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.367: error while reading EA inode 1 err=-117
[   93.481065][ T5147] loop4: detected capacity change from 0 to 32768
[   93.509439][ T5159] EXT4-fs (loop0): 1 orphan inode deleted
[   93.524153][ T5159] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,,errors=continue. Quota mode: none.
[   93.546672][ T5147] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.361 (5147)
[   93.624478][ T5147] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   93.686566][ T5147] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[   93.719305][ T5147] BTRFS info (device loop4): force lzo compression, level 0
[   93.727585][ T5147] BTRFS info (device loop4): max_inline at 4096
[   93.748678][ T5147] BTRFS info (device loop4): allowing degraded mounts
[   93.757436][ T5147] BTRFS info (device loop4): using free space tree
[   93.781645][ T5147] BTRFS info (device loop4): has skinny extents
[   94.152847][ T5147] BTRFS info (device loop4): enabling ssd optimizations
[   94.338969][ T5225] netlink: 332 bytes leftover after parsing attributes in process `syz.2.390'.
[   94.344319][ T5215] loop1: detected capacity change from 0 to 2048
[   94.364435][ T5225] netlink: 'syz.2.390': attribute type 9 has an invalid length.
[   94.387876][ T4228] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   94.395374][ T5225] netlink: 108 bytes leftover after parsing attributes in process `syz.2.390'.
[   94.448099][ T5225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.390'.
[   94.511366][ T5215] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,data_err=abort,,errors=continue. Quota mode: writeback.
[   94.570176][ T5215] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.656124][ T5203] loop3: detected capacity change from 0 to 32768
[   94.677235][ T5215] EXT4-fs (loop1): resizing filesystem from 256 to 0 blocks
[   94.739934][ T5215] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted
[   94.807478][ T4228] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   94.828865][ T4228] usb 1-1: config 0 interface 0 has no altsetting 0
[   94.842964][ T5203] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   94.985464][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[   95.014993][ T4228] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   95.036071][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   95.059550][ T4228] usb 1-1: Product: syz
[   95.063875][ T4228] usb 1-1: Manufacturer: syz
[   95.097841][ T4228] usb 1-1: SerialNumber: syz
[   95.122165][ T4228] usb 1-1: config 0 descriptor??
[   95.159596][ T5249] loop4: detected capacity change from 0 to 256
[   95.172001][ T5249] exfat: Deprecated parameter 'utf8'
[   95.178109][ T5249] exfat: Deprecated parameter 'namecase'
[   95.181348][ T4228] usb 1-1: selecting invalid altsetting 0
[   95.184363][ T5249] exfat: Deprecated parameter 'namecase'
[   95.240061][ T5249] exfat: Deprecated parameter 'utf8'
[   95.287225][ T5249] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[   95.377867][ T4228] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.485307][ T5212] usb 1-1: selecting invalid altsetting 0
[   95.508616][ T5242] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   95.518292][ T5212] usb 1-1: 0:0: usb_set_interface failed (-22)
[   95.536060][ T5210] usb 1-1: selecting invalid altsetting 0
[   95.542621][ T5210] usb 1-1: 0:0: usb_set_interface failed (-22)
[   95.555124][ T4559] usb 1-1: USB disconnect, device number 3
[   95.757725][ T5242] usb 2-1: Using ep0 maxpacket: 16
[   95.877808][ T5242] usb 2-1: config 1 has an invalid interface number: 228 but max is 0
[   95.887161][ T5242] usb 2-1: config 1 has no interface number 0
[   95.894185][ T5242] usb 2-1: config 1 interface 228 has no altsetting 0
[   95.907889][ T4228] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[   95.917128][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.926097][ T4228] usb 3-1: Product: syz
[   95.930914][ T4228] usb 3-1: Manufacturer: syz
[   95.935896][ T4228] usb 3-1: SerialNumber: syz
[   95.943483][ T4228] usb 3-1: config 0 descriptor??
[   95.993315][ T5265] loop3: detected capacity change from 0 to 40427
[   96.030992][ T5265] F2FS-fs (loop3): invalid crc value
[   96.044557][ T5265] F2FS-fs (loop3): Found nat_bits in checkpoint
[   96.058015][ T5242] usb 2-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9
[   96.088848][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.119422][ T5242] usb 2-1: Product: syz
[   96.123850][ T5242] usb 2-1: Manufacturer: syz
[   96.149835][ T5242] usb 2-1: SerialNumber: syz
[   96.196257][ T5265] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   96.211037][ T4559] usb 3-1: USB disconnect, device number 3
[   96.499101][ T5242] usb 2-1: USB disconnect, device number 5
[   96.665549][ T5275] loop3: detected capacity change from 0 to 512
[   96.749950][ T5275] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.406: bg 0: block 376: padding at end of block bitmap is not set
[   96.770991][ T5275] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.406: inode #1: comm syz.3.406: iget: illegal inode #
[   96.817412][ T5281] loop2: detected capacity change from 0 to 512
[   96.831787][ T5275] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.406: error while reading EA inode 1 err=-117
[   96.846432][ T5275] EXT4-fs (loop3): 1 orphan inode deleted
[   96.852978][ T5275] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000007,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,noquota,dioread_lock,noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none.
[   96.884330][    C1] vkms_vblank_simulate: vblank timer overrun
[   96.983585][ T5281] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   97.053548][ T5281] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.077041][ T5289] cgroup: fork rejected by pids controller in /syz1
[   97.238403][ T5295] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[   97.307909][ T5295] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   97.320954][ T5295] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.408: Failed to acquire dquot type 0
[   97.601004][ T5294] loop3: detected capacity change from 0 to 32768
[   97.660110][ T4199] syz-executor (4199) used greatest stack depth: 21072 bytes left
[   97.741492][ T5294] attempt to access beyond end of device
[   97.741492][ T5294] loop3: rw=1, want=4680040, limit=32768
[   97.775251][ T5294] metapage_write_end_io: I/O error
[   97.787504][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.805968][ T5294] blkno = 8ed2c, nblocks = 1
[   97.813146][ T5243] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   97.822170][ T5294] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[   97.822170][ T5294] 
[   97.852513][ T5294] ERROR: (device loop3): remounting filesystem as read-only
[   97.878827][ T5294] UFO tlock:0xffffc900028620d8
[   97.917211][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.951940][  T275] blkno = 8ed2c, nblocks = 4
[   97.959094][  T275] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[   97.959094][  T275] 
[   97.972860][ T4190] attempt to access beyond end of device
[   97.972860][ T4190] loop3: rw=1, want=4680040, limit=32768
[   97.986716][ T4190] metapage_write_end_io: I/O error
[   98.000454][ T4190] JFS: metapage_get_blocks failed
[   98.006454][ T4190] JFS: metapage_get_blocks failed
[   98.026597][ T4190] JFS: metapage_get_blocks failed
[   98.046724][ T4190] JFS: metapage_get_blocks failed
[   98.055409][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.082760][ T5243] usb 3-1: Using ep0 maxpacket: 16
[   98.146113][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.218072][ T5243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.237839][ T5243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.255821][ T5243] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[   98.280732][ T5313] loop0: detected capacity change from 0 to 256
[   98.287873][ T5243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.300260][ T5243] usb 3-1: config 0 descriptor??
[   98.328841][ T5313] exfat: Deprecated parameter 'utf8'
[   98.386649][ T5304] chnl_net:caif_netlink_parms(): no params data found
[   98.450917][ T5313] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[   98.763852][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.786290][ T5243] wacom 0003:056A:0084.0007: unbalanced collection at end of report description
[   98.792179][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.814777][ T5243] wacom 0003:056A:0084.0007: parse failed
[   98.834476][ T5304] device bridge_slave_0 entered promiscuous mode
[   98.845389][ T5243] wacom: probe of 0003:056A:0084.0007 failed with error -22
[   98.849906][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.869335][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.890643][ T5304] device bridge_slave_1 entered promiscuous mode
[   98.997299][ T5243] usb 3-1: USB disconnect, device number 4
[   99.024864][ T5335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.427'.
[   99.091089][ T5304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.125562][ T5304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.187219][ T5304] team0: Port device team_slave_0 added
[   99.210683][ T5304] team0: Port device team_slave_1 added
[   99.254476][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.269937][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.315583][ T5304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.343435][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.350919][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.410823][ T5304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.431560][   T26] audit: type=1326 audit(1779785536.243:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5340 comm="syz.0.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f420d44ce59 code=0x0
[   99.573904][ T5304] device hsr_slave_0 entered promiscuous mode
[   99.631921][ T5304] device hsr_slave_1 entered promiscuous mode
[   99.673128][ T5304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.692434][ T5304] Cannot create hsr debugfs directory
[   99.713524][ T5351] loop3: detected capacity change from 0 to 1764
[   99.958162][ T5360] loop4: detected capacity change from 0 to 164
[  100.147883][ T5242] Bluetooth: hci3: command 0x0409 tx timeout
[  100.213396][ T5364] loop4: detected capacity change from 0 to 1024
[  100.666487][ T5353] loop2: detected capacity change from 0 to 32768
[  100.681648][ T5375] loop4: detected capacity change from 0 to 64
[  100.807412][ T5353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.434 (5353)
[  100.814499][ T5377] cgroup: fork rejected by pids controller in /syz0
[  100.978505][ T5353] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  100.998504][ T5353] BTRFS info (device loop2): using free space tree
[  101.037842][ T5353] BTRFS info (device loop2): has skinny extents
[  101.116749][    T9] device hsr_slave_0 left promiscuous mode
[  101.156074][    T9] device hsr_slave_1 left promiscuous mode
[  101.341846][ T5351] iso9660: Corrupted directory entry in block 0 of inode 1920
[  101.395182][ T5353] BTRFS info (device loop2): enabling ssd optimizations
[  101.511443][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.543486][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.610268][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.619007][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.646294][    T9] device bridge_slave_1 left promiscuous mode
[  101.687660][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.689339][ T5405] loop4: detected capacity change from 0 to 4096
[  101.705874][ T5353] BTRFS info (device loop2): balance: start -f
[  101.714501][ T5353] BTRFS info (device loop2): balance: ended with status: 0
[  101.763017][    T9] device bridge_slave_0 left promiscuous mode
[  101.782511][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.869683][ T5410] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.870384][ T5411] loop3: detected capacity change from 0 to 256
[  101.922210][ T5405] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  102.016062][ T5405] Remounting filesystem read-only
[  102.028878][ T5411] exfat: Deprecated parameter 'utf8'
[  102.068430][ T5411] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  102.227929][   T23] Bluetooth: hci3: command 0x041b tx timeout
[  102.315101][    T9] device veth1_macvtap left promiscuous mode
[  102.325141][    T9] device veth0_macvtap left promiscuous mode
[  102.335730][    T9] device veth1_vlan left promiscuous mode
[  102.385428][    T9] device veth0_vlan left promiscuous mode
[  102.405290][ T5416] loop2: detected capacity change from 0 to 1024
[  102.521108][ T5416] EXT4-fs (loop2): Ignoring removed bh option
[  102.614866][ T5423] ptrace attach of ""[5425] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5423]
[  102.627114][ T5416] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  102.642687][ T5419] loop4: detected capacity change from 0 to 4096
[  103.138436][ T4197] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  103.146976][ T4197] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  103.158526][ T5430] syz.2.452 (5430): /proc/5429/oom_adj is deprecated, please use /proc/5429/oom_score_adj instead.
[  103.416853][ T5438] loop4: detected capacity change from 0 to 128
[  103.750566][    T9] team0 (unregistering): Port device team_slave_1 removed
[  103.774583][    T9] team0 (unregistering): Port device team_slave_0 removed
[  103.803092][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.878172][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.884715][ T5452] loop3: detected capacity change from 0 to 256
[  103.965358][ T5452] exfat: Deprecated parameter 'utf8'
[  104.026591][ T5452] exfat: Deprecated parameter 'utf8'
[  104.068023][ T5452] exfat: Deprecated parameter 'utf8'
[  104.159302][ T5452] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  104.193781][    T9] bond0 (unregistering): Released all slaves
[  104.308014][   T23] Bluetooth: hci3: command 0x040f tx timeout
[  104.734623][ T5304] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  104.843116][ T5304] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  104.919996][ T5304] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  105.019682][ T5304] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  105.253812][ T5473] loop3: detected capacity change from 0 to 164
[  105.467852][ T5304] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.470984][ T5473] rock: directory entry would overflow storage
[  105.544671][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.577384][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  105.605988][ T5460] loop2: detected capacity change from 0 to 32768
[  105.622235][ T5473] rock: sig=0x4f50, size=4, remaining=3
[  105.635685][ T5473] iso9660: Corrupted directory entry in block 5 of inode 1792
[  105.638744][ T5304] 8021q: adding VLAN 0 to HW filter on device team0
[  105.757607][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  105.786056][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.825734][ T5460] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  105.882082][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.894354][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.948273][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.993220][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.037248][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.043099][ T4189] ocfs2: Unmounting device (7,2) on (node local)
[  106.047586][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.106427][ T5487] [U] „
[  106.136041][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.198758][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.230434][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.310495][ T5491] loop3: detected capacity change from 0 to 64
[  106.331964][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.355121][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.402484][ T5491] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  106.413036][ T5243] Bluetooth: hci3: command 0x0419 tx timeout
[  106.414650][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  106.567840][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.625602][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.674475][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.760077][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  106.784004][ T5304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.807128][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  106.847860][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  106.899329][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.056832][ T5475] chnl_net:caif_netlink_parms(): no params data found
[  107.349325][ T5242] Bluetooth: hci1: command 0x0409 tx timeout
[  107.527417][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.541936][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.543150][ T5475] device bridge_slave_0 entered promiscuous mode
[  107.560085][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.560186][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.561452][ T5475] device bridge_slave_1 entered promiscuous mode
[  107.581768][ T5521] loop4: detected capacity change from 0 to 4096
[  107.634394][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.660366][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.835211][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.858300][ T5521] ntfs3: loop4: failed to convert "0080" to cp864
[  107.868756][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.906863][ T5304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.975341][ T5527] loop2: detected capacity change from 0 to 512
[  108.016535][ T5475] team0: Port device team_slave_0 added
[  108.080179][ T5475] team0: Port device team_slave_1 added
[  108.092875][ T5527] EXT4-fs (loop2): Ignoring removed orlov option
[  108.110376][ T5527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  108.160395][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  108.201700][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  108.207387][ T5527] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.480: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  108.298682][ T5529] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  108.306111][ T5527] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.480: couldn't read orphan inode 16 (err -117)
[  108.342071][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.374840][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.439846][ T5527] EXT4-fs (loop2): 1 orphan inode deleted
[  108.446879][ T5527] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none.
[  108.486749][ T5533] syz.4.482 (5533) used greatest stack depth: 21008 bytes left
[  108.487689][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.531301][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  108.558572][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  108.580833][ T5304] device veth0_vlan entered promiscuous mode
[  108.598454][ T5527] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.2.480: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[  108.624944][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.657811][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.744611][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.828956][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  108.841171][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  108.843104][ T5510] loop3: detected capacity change from 0 to 32768
[  108.915921][ T5304] device veth1_vlan entered promiscuous mode
[  108.946129][ T5510] JBD2: Ignoring recovery information on journal
[  108.984054][ T5475] device hsr_slave_0 entered promiscuous mode
[  109.048589][ T5475] device hsr_slave_1 entered promiscuous mode
[  109.238745][ T5510] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  109.241102][ T5304] device veth0_macvtap entered promiscuous mode
[  109.355438][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  109.382167][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.427880][ T5240] Bluetooth: hci1: command 0x041b tx timeout
[  109.433826][ T5304] device veth1_macvtap entered promiscuous mode
[  109.501555][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  109.518590][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  109.556536][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  109.565552][ T5557] loop4: detected capacity change from 0 to 64
[  109.691518][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.736596][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.766823][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.797672][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.831461][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.855159][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.869495][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.882458][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.943895][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.961782][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  109.972311][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  110.030949][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.073078][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.111944][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.136346][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.148024][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.159459][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.197318][ T5569] loop3: detected capacity change from 0 to 4096
[  110.199603][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.215651][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.285256][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.330399][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  110.340158][ T5581] loop2: detected capacity change from 0 to 1024
[  110.370321][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  110.419325][ T5584] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.484789][ T5475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.488295][ T5581] hfsplus: keylen 65060 too large
[  110.528640][ T5586] overlayfs: upper fs does not support tmpfile.
[  110.541980][ T5581] hfsplus: xattr searching failed
[  110.549275][ T5304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.570745][ T5586] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  110.593535][ T5304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.608035][ T5586] overlayfs: failed to set xattr on upper
[  110.613988][ T5586] overlayfs: ...falling back to index=off,metacopy=off.
[  110.635760][ T5304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.646403][ T5586] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  110.662450][ T5304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.731601][ T5475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.820099][ T4190] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  110.841444][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'.
[  110.850782][ T4190] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12)
[  110.853020][ T4190] Remounting filesystem read-only
[  110.888756][ T4190] NILFS (loop3): error -5 truncating bmap (ino=12)
[  110.907959][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'.
[  110.925704][ T4190] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  110.982685][ T5475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.131362][ T5598] loop3: detected capacity change from 0 to 128
[  111.154271][ T5475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.215890][ T5598] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  111.242528][ T5602] loop4: detected capacity change from 0 to 64
[  111.250025][ T5598] hpfs: filesystem error: improperly stopped
[  111.256725][ T5598] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  111.270688][ T5598] hpfs: You really don't want any checks? You are crazy...
[  111.279895][ T5598] hpfs: hpfs_map_sector(): read error
[  111.285582][ T5598] hpfs: code page support is disabled
[  111.292409][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.303988][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.311679][ T5598] hpfs: hpfs_map_4sectors(): unaligned read
[  111.316477][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  111.322177][ T5598] hpfs: hpfs_map_4sectors(): unaligned read
[  111.337822][ T4547] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  111.360826][ T5598] hpfs: filesystem error: unable to find root dir
[  111.449042][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.477383][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.502249][ T5475] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  111.513797][ T5243] Bluetooth: hci1: command 0x040f tx timeout
[  111.597800][ T4547] usb 3-1: Using ep0 maxpacket: 8
[  111.622505][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.638335][ T5475] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  111.658662][ T5475] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  111.699926][ T5475] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  111.728243][ T4547] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  111.767399][ T4547] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  111.817927][ T4547] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  111.848421][ T4547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.882693][ T5614] loop4: detected capacity change from 0 to 2048
[  111.904042][ T4547] usb 3-1: config 0 descriptor??
[  111.995886][ T5614]  loop4: p3 p4 < >
[  112.041954][ T5614] loop4: p3 start 4284289 is beyond EOD, truncated
[  112.109339][ T5622] netlink: 104 bytes leftover after parsing attributes in process `syz.1.522'.
[  112.136365][ T3561]  loop4: p3 p4 < >
[  112.146400][ T3561] loop4: p3 start 4284289 is beyond EOD, truncated
[  112.166612][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.205361][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  112.235645][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  112.245445][ T5413] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  112.280351][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  112.333222][ T5475] 8021q: adding VLAN 0 to HW filter on device team0
[  112.367021][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  112.380528][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  112.386322][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  112.408802][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.410004][ T4547] sony 0003:054C:0268.0008: ignoring exceeding usage max
[  112.416185][ T5317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.449962][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  112.469576][ T4547] sony 0003:054C:0268.0008: unknown main item tag 0x2
[  112.496208][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  112.539382][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  112.566280][ T4547] sony 0003:054C:0268.0008: hiddev0,hidraw0: USB HID v80.05 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0
[  112.584411][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.591939][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.605504][ T4547] sony 0003:054C:0268.0008: failed to claim input
[  112.625523][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  112.662920][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  112.671746][ T5413] usb 4-1: config 127 has an invalid interface number: 192 but max is 0
[  112.682771][ T5413] usb 4-1: config 127 has no interface number 0
[  112.702812][ T4547] usb 3-1: USB disconnect, device number 5
[  112.735695][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  112.766433][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  112.797427][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  112.818205][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  112.827778][   T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  112.858894][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  112.868348][ T5413] usb 4-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06
[  112.882072][ T5413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.890912][ T5413] usb 4-1: Product: syz
[  112.895297][ T5413] usb 4-1: Manufacturer: syz
[  112.900319][ T5413] usb 4-1: SerialNumber: syz
[  112.900388][ T5640] fido_id[5640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  112.941798][ T5475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  112.954195][ T5475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.978422][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  112.994420][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  113.014058][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  113.037385][ T5644] loop4: detected capacity change from 0 to 1024
[  113.049072][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  113.075290][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  113.083522][   T23] usb 2-1: Using ep0 maxpacket: 16
[  113.134481][ T5644] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none.
[  113.175195][ T5413] gspca_main: pac7311-2.14.0 probing 093a:2600
[  113.190609][ T5644] EXT4-fs error (device loop4): ext4_get_first_dir_block:3608: inode #11: comm syz.4.532: directory missing '.'
[  113.214631][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.225895][ T5644] EXT4-fs (loop4): Remounting filesystem read-only
[  113.237780][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.257819][   T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  113.272491][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.275167][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.288657][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.313661][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.322573][   T23] usb 2-1: config 0 descriptor??
[  113.400767][ T5653] loop2: detected capacity change from 0 to 256
[  113.437500][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.466164][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.567919][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.587880][ T5242] Bluetooth: hci1: command 0x0419 tx timeout
[  113.591174][ T5413] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  113.600871][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.613156][ T5413] pac7311: probe of 4-1:127.192 failed with error -71
[  113.620187][ T5475] device veth0_vlan entered promiscuous mode
[  113.626198][ T5475] device veth1_vlan entered promiscuous mode
[  113.653842][ T5413] usb 4-1: USB disconnect, device number 7
[  113.713702][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.726634][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.737372][ T5663] block device autoloading is deprecated and will be removed.
[  113.751626][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  113.822352][   T23] wacom 0003:056A:0084.0009: unbalanced delimiter at end of report description
[  113.851827][   T23] wacom 0003:056A:0084.0009: parse failed
[  113.872304][   T23] wacom: probe of 0003:056A:0084.0009 failed with error -22
[  113.917426][    T9] device hsr_slave_0 left promiscuous mode
[  113.943131][    T9] device hsr_slave_1 left promiscuous mode
[  113.971298][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.981258][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.030782][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.052774][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.070412][ T5674] loop4: detected capacity change from 0 to 64
[  114.073460][ T4228] usb 2-1: USB disconnect, device number 6
[  114.079053][    T9] device bridge_slave_1 left promiscuous mode
[  114.099297][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.113550][    T9] device bridge_slave_0 left promiscuous mode
[  114.135157][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.220844][    T9] device veth1_macvtap left promiscuous mode
[  114.233807][    T9] device veth0_macvtap left promiscuous mode
[  114.247867][    T9] device veth1_vlan left promiscuous mode
[  114.253826][    T9] device veth0_vlan left promiscuous mode
[  114.877240][ T5701] loop1: detected capacity change from 0 to 512
[  114.891776][    T9] team0 (unregistering): Port device team_slave_1 removed
[  114.911228][    T9] team0 (unregistering): Port device team_slave_0 removed
[  114.928755][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.943395][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.988070][ T5701] EXT4-fs (loop1): 1 truncate cleaned up
[  114.994528][ T5701] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,nogrpid,,errors=continue. Quota mode: none.
[  115.122491][ T5701] EXT4-fs warning (device loop1): verify_group_input:165: Last group not full
[  115.174479][    T9] bond0 (unregistering): Released all slaves
[  115.263627][ T5475] device veth0_macvtap entered promiscuous mode
[  115.279786][ T5675] netlink: 'syz.2.542': attribute type 21 has an invalid length.
[  115.294836][ T5675] netlink: 176 bytes leftover after parsing attributes in process `syz.2.542'.
[  115.313629][ T5675] IPv6: NLM_F_CREATE should be specified when creating new route
[  115.328615][   T26] audit: type=1326 audit(1779785552.133:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5703 comm="syz.1.556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8301d99e59 code=0x0
[  115.354270][ T5675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.362636][ T5675] IPv6: NLM_F_CREATE should be set when creating new route
[  115.371017][ T5675] IPv6: NLM_F_CREATE should be set when creating new route
[  115.378974][ T5675] IPv6: NLM_F_CREATE should be set when creating new route
[  115.433480][ T5676] netlink: 'syz.2.542': attribute type 21 has an invalid length.
[  115.442093][ T5676] netlink: 176 bytes leftover after parsing attributes in process `syz.2.542'.
[  115.453603][ T5676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.462621][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  115.471567][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  115.480956][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.511294][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  115.544354][ T5475] device veth1_macvtap entered promiscuous mode
[  115.641313][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.690689][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.722436][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.757564][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.792195][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.829377][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.846271][ T5723] loop4: detected capacity change from 0 to 1024
[  115.862888][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.898074][ T5723] EXT4-fs (loop4): Ignoring removed bh option
[  115.915681][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.928600][ T4547] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  115.959977][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.970023][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.982843][ T5723] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  116.039905][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.094621][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.107500][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.121907][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.147539][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.161321][ T5733] loop1: detected capacity change from 0 to 1024
[  116.168207][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.188276][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.206499][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.218962][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.246124][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.254144][ T5731] loop3: detected capacity change from 0 to 4096
[  116.266453][ T5475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.276231][ T5475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.282235][ T5733] EXT4-fs (loop1): Ignoring removed bh option
[  116.302265][ T5475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.314004][ T5475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.326466][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  116.358220][ T5733] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  116.383168][    C1] vkms_vblank_simulate: vblank timer overrun
[  116.394397][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.471342][ T5736] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.518972][ T5738] loop4: detected capacity change from 0 to 128
[  116.526441][ T4547] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  116.537510][ T5731] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  116.543038][ T4547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.565371][ T4547] usb 3-1: Product: syz
[  116.583761][ T4547] usb 3-1: Manufacturer: syz
[  116.597682][ T4547] usb 3-1: SerialNumber: syz
[  116.616797][ T5731] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12)
[  116.680205][ T5731] Remounting filesystem read-only
[  116.719613][ T4547] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  116.730525][ T5731] NILFS (loop3): error -5 truncating bmap (ino=12)
[  116.810322][  T384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.866587][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.885986][  T384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.900510][ T4190] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  116.930402][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.967903][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  117.003092][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  117.454669][ T5768] device vlan2 entered promiscuous mode
[  117.461464][ T5768] device bridge0 entered promiscuous mode
[  117.474190][ T1346] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  117.507548][ T5770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'.
[  117.545391][ T5240] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  117.677852][ T5243] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  117.737834][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  117.807782][ T5240] usb 1-1: Using ep0 maxpacket: 32
[  117.927916][ T5240] usb 1-1: config 242 has an invalid interface number: 76 but max is 0
[  117.947510][ T5240] usb 1-1: config 242 has no interface number 0
[  117.954744][ T5240] usb 1-1: config 242 interface 76 has no altsetting 0
[  118.047989][ T5243] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  118.084356][ T5243] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.095618][ T5774] loop3: detected capacity change from 0 to 32768
[  118.109366][ T5243] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.132087][ T5243] usb 2-1: config 0 interface 0 has no altsetting 0
[  118.133587][ T4553] usb 3-1: USB disconnect, device number 6
[  118.142459][ T5240] usb 1-1: New USB device found, idVendor=0c45, idProduct=6242, bcdDevice=a5.9c
[  118.165773][ T5243] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  118.176762][ T5240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.193471][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.203308][ T5240] usb 1-1: Product: syz
[  118.214141][ T5240] usb 1-1: Manufacturer: syz
[  118.221867][ T5243] usb 2-1: config 0 descriptor??
[  118.230129][ T5240] usb 1-1: SerialNumber: syz
[  118.292169][ T5774] XFS (loop3): Mounting V5 Filesystem
[  118.390644][ T5774] XFS (loop3): Ending clean mount
[  118.451793][ T4190] XFS (loop3): Unmounting Filesystem
[  118.491148][ T5758] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  118.594815][ T5240] hub 1-1:242.76: bad descriptor, ignoring hub
[  118.603770][ T5240] hub: probe of 1-1:242.76 failed with error -5
[  118.612644][ T5240] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6242
[  118.646106][ T5240] gspca_sn9c20x: Write register 1000 failed -71
[  118.653598][ T5240] gspca_sn9c20x: Device initialization failed
[  118.660106][ T5240] gspca_sn9c20x: probe of 1-1:242.76 failed with error -71
[  118.701356][ T5240] usb 1-1: USB disconnect, device number 4
[  118.709562][ T5243] holtek 0003:1241:5015.000A: unknown main item tag 0x0
[  118.735960][ T5243] holtek 0003:1241:5015.000A: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0
[  118.766336][ T5243] holtek 0003:1241:5015.000A: no inputs found
[  118.798037][ T1346] usb 3-1: Service connection timeout for: 256
[  118.804401][ T1346] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  118.825912][ T1346] ath9k_htc: Failed to initialize the device
[  118.851228][ T4553] usb 3-1: ath9k_htc: USB layer deinitialized
[  118.955948][ T5240] usb 2-1: USB disconnect, device number 7
[  119.397721][   T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  119.768095][   T23] usb 4-1: config 0 has an invalid interface number: 4 but max is 0
[  119.795676][   T23] usb 4-1: config 0 has no interface number 0
[  119.803568][   T23] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  119.831282][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.852288][ T1346] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  119.854323][   T23] usb 4-1: config 0 descriptor??
[  119.919066][   T23] ums-realtek 4-1:0.4: USB Mass Storage device detected
[  119.992792][ T5243] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  120.162218][ T5240] usb 4-1: USB disconnect, device number 8
[  120.287231][ T5839] loop4: detected capacity change from 0 to 4096
[  120.343220][ T5839] EXT4-fs (loop4): inline encryption not supported
[  120.369056][ T5839] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value
[  120.400455][ T5833] loop0: detected capacity change from 0 to 32768
[  120.407977][ T5243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.439102][ T5833] (syz.0.609,5833,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  120.454284][ T5243] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  120.465601][ T5243] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  120.488815][ T1346] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  120.498064][ T5243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.508593][ T5833] (syz.0.609,5833,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  120.520177][ T1346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.546210][ T5243] usb 3-1: config 0 descriptor??
[  120.552053][ T1346] usb 2-1: Product: syz
[  120.556540][ T1346] usb 2-1: Manufacturer: syz
[  120.575888][ T1346] usb 2-1: SerialNumber: syz
[  120.600002][ T5243] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  120.617797][ T5833] JBD2: Ignoring recovery information on journal
[  120.634998][ T5243] dvb-usb: bulk message failed: -22 (3/0)
[  120.654917][ T1346] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  120.685630][ T5243] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  120.768078][ T5243] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  120.811044][ T5817] dvb-usb: bulk message failed: -22 (2/0)
[  120.829646][ T5243] usb 3-1: media controller created
[  120.838341][ T5243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.853258][ T5833] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  120.877066][ T5844] exfat: Deprecated parameter 'debug'
[  120.890265][ T5844] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  120.905047][ T5844] exFAT-fs (loop4): unable to read boot sector
[  120.923674][ T5243] dvb-usb: bulk message failed: -22 (6/0)
[  120.946823][ T5243] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  120.966581][ T5844] exFAT-fs (loop4): failed to read boot sector
[  120.988858][ T5844] exFAT-fs (loop4): failed to recognize exfat type
[  121.049287][ T5243] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[  121.112020][ T5833] (syz.0.609,5833,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  121.119448][ T5243] dvb-usb: schedule remote query interval to 150 msecs.
[  121.144582][ T5243] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  121.152159][ T5833] (syz.0.609,5833,0):update_backups:188 ERROR: status = -12
[  121.180463][ T5833] ocfs2: Failed to update super blocks on 7,0 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[  121.191150][ T5243] usb 3-1: USB disconnect, device number 7
[  121.285319][ T5243] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  121.301015][ T4553] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  121.321984][ T5852] loop3: detected capacity change from 0 to 512
[  121.376592][ T5475] ocfs2: Unmounting device (7,0) on (node local)
[  121.595970][ T5852] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  121.650957][ T5852] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.713542][ T5869] tipc: Started in network mode
[  121.782714][ T5869] tipc: Node identity , cluster identity 4711
[  121.801333][ T5852] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.617: bg 0: block 217: padding at end of block bitmap is not set
[  121.867286][ T5871] loop0: detected capacity change from 0 to 512
[  121.904981][ T5852] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  121.949759][ T5242] usb 2-1: USB disconnect, device number 8
[  121.960570][ T5871] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  122.026428][ T5871] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  122.045585][ T5871] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.625: invalid indirect mapped block 2683928664 (level 1)
[  122.138738][ T5871] EXT4-fs (loop0): Remounting filesystem read-only
[  122.191879][ T5871] EXT4-fs (loop0): 1 truncate cleaned up
[  122.244219][ T5871] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback.
[  122.279554][ T5889] loop2: detected capacity change from 0 to 256
[  122.318411][ T5871] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[  122.472230][ T5889] FAT-fs (loop2): Directory bread(block 64) failed
[  122.514669][ T5889] FAT-fs (loop2): Directory bread(block 65) failed
[  122.554748][ T5889] FAT-fs (loop2): Directory bread(block 66) failed
[  122.573983][ T5889] FAT-fs (loop2): Directory bread(block 67) failed
[  122.608697][ T5900] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma?
[  122.628081][ T5889] FAT-fs (loop2): Directory bread(block 68) failed
[  122.637825][ T4553] usb 2-1: Service connection timeout for: 256
[  122.644869][ T4553] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  122.694979][ T5889] FAT-fs (loop2): Directory bread(block 69) failed
[  122.695604][ T4553] ath9k_htc: Failed to initialize the device
[  122.722128][ T5889] FAT-fs (loop2): Directory bread(block 70) failed
[  122.748087][ T5889] FAT-fs (loop2): Directory bread(block 71) failed
[  122.761619][ T5889] FAT-fs (loop2): Directory bread(block 72) failed
[  122.813465][ T5242] usb 2-1: ath9k_htc: USB layer deinitialized
[  122.825230][ T5889] FAT-fs (loop2): Directory bread(block 73) failed
[  122.976374][ T5922] netlink: 'syz.0.649': attribute type 4 has an invalid length.
[  123.091303][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.652'.
[  124.042813][ T5975] loop2: detected capacity change from 0 to 764
[  124.129925][ T5975] Symlink component flag not implemented
[  124.159190][ T5981] loop0: detected capacity change from 0 to 4096
[  124.168065][ T5975] Symlink component flag not implemented (116)
[  124.203338][ T5923] loop3: detected capacity change from 0 to 32768
[  124.284524][ T5923] XFS (loop3): Mounting V5 Filesystem
[  124.341000][ T5981] ntfs3: loop0: ino=1f, "file3" failed to undo rename
[  124.478421][ T1346] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  124.501104][ T5923] XFS (loop3): Ending clean mount
[  124.737175][ T4190] XFS (loop3): Unmounting Filesystem
[  124.758009][ T1346] usb 2-1: Using ep0 maxpacket: 16
[  124.918196][ T1346] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  124.942250][ T1346] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  124.960351][ T1346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.995888][ T1346] usb 2-1: config 0 descriptor??
[  125.047508][ T5999] loop0: detected capacity change from 0 to 32768
[  125.121155][ T5999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.680 (5999)
[  125.170463][ T5999] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  125.197865][ T5999] BTRFS info (device loop0): using free space tree
[  125.228238][ T5999] BTRFS info (device loop0): has skinny extents
[  125.368298][ T6001] loop2: detected capacity change from 0 to 32768
[  125.415888][ T6018] MPTCP: kernel_bind error, err=-22
[  125.490227][ T1346] hid-picolcd 0003:04D8:C002.000B: ignoring exceeding usage max
[  125.506156][ T1346] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x4
[  125.514701][ T1346] hid-picolcd 0003:04D8:C002.000B: collection stack underflow
[  125.515606][ T6001] XFS (loop2): Mounting V5 Filesystem
[  125.523115][ T1346] hid-picolcd 0003:04D8:C002.000B: item 0 0 0 12 parsing failed
[  125.523619][ T1346] hid-picolcd 0003:04D8:C002.000B: device report parse failed
[  125.544743][ T1346] hid-picolcd: probe of 0003:04D8:C002.000B failed with error -22
[  125.544803][ T5999] BTRFS info (device loop0): enabling ssd optimizations
[  125.673779][ T6001] XFS (loop2): Ending clean mount
[  125.699469][ T1346] usb 2-1: USB disconnect, device number 9
[  125.713471][ T6001] XFS (loop2): Quotacheck needed: Please wait.
[  125.752629][ T5999] BTRFS info (device loop0): balance: start -f
[  125.796465][ T5999] BTRFS info (device loop0): balance: ended with status: 0
[  125.862922][ T6001] XFS (loop2): Quotacheck: Done.
[  126.004023][ T4189] XFS (loop2): Unmounting Filesystem
[  126.115155][ T4547] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  126.324018][ T5243] kernel write not supported for file /sg0 (pid: 5243 comm: kworker/1:21)
[  126.377864][ T6043] loop0: detected capacity change from 0 to 2048
[  126.408585][ T6043] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  126.495865][ T6043] attempt to access beyond end of device
[  126.495865][ T6043] loop0: rw=524288, want=33554432, limit=2048
[  126.514169][ T6046] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.529637][ T4547] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  126.547832][ T4547] usb 4-1: config 0 has no interface number 0
[  126.554690][ T4547] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.590933][ T6043] attempt to access beyond end of device
[  126.590933][ T6043] loop0: rw=0, want=9437256, limit=2048
[  126.604248][ T4547] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.627818][ T4547] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  126.641244][ T6043] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0)
[  126.696006][ T6047] attempt to access beyond end of device
[  126.696006][ T6047] loop0: rw=0, want=9437256, limit=2048
[  126.717912][ T6047] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0)
[  126.748007][ T4547] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  126.757298][ T4547] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  126.784650][ T4547] usb 4-1: Product: syz
[  126.824677][ T4547] usb 4-1: config 0 descriptor??
[  127.056941][ T6057] loop0: detected capacity change from 0 to 512
[  127.117906][ T6057] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  127.195271][ T6057] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  127.196996][ T6061] tipc: Started in network mode
[  127.212567][ T6057] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  127.278197][ T6061] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  127.299637][ T6061] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000
[  127.314068][ T6061] tipc: Enabled bearer <udp:syz0>, priority 10
[  127.349579][ T4547] chicony 0003:04F2:1421.000C: collection stack underflow
[  127.356801][ T6045] loop1: detected capacity change from 0 to 40427
[  127.367077][ T4547] chicony 0003:04F2:1421.000C: item 0 1 0 12 parsing failed
[  127.375983][ T4547] chicony 0003:04F2:1421.000C: Chicony hid parse failed: -22
[  127.395519][ T4547] chicony: probe of 0003:04F2:1421.000C failed with error -22
[  127.484625][ T6045] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  127.503894][ T6045] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  127.548008][ T6045] F2FS-fs (loop1): invalid crc value
[  127.563816][ T6072] loop0: detected capacity change from 0 to 2048
[  127.592833][ T6045] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  127.611734][ T4228] usb 4-1: USB disconnect, device number 9
[  127.680047][ T6072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.850014][ T6045] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  127.898248][ T6045] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  128.202573][ T5304] attempt to access beyond end of device
[  128.202573][ T5304] loop1: rw=2049, want=45104, limit=40427
[  128.276429][ T6070] loop4: detected capacity change from 0 to 32768
[  128.318005][ T4547] tipc: Node number set to 1
[  128.357936][ T6070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.697 (6070)
[  128.359035][ T6092] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  128.397871][ T6092] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.465740][ T6092] EXT4-fs warning (device loop3): verify_group_input:165: Last group not full
[  128.540427][ T6070] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  128.606290][ T6070] BTRFS info (device loop4): using free space tree
[  128.650154][ T6070] BTRFS info (device loop4): has skinny extents
[  128.914747][   T26] audit: type=1326 audit(1779785565.723:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.714" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9efb3ee59 code=0x0
[  129.018540][ T6122] exfat: Deprecated parameter 'utf8'
[  129.034658][ T6122] exfat: Deprecated parameter 'utf8'
[  129.040620][ T6122] exfat: Deprecated parameter 'utf8'
[  129.066733][ T6070] BTRFS info (device loop4): enabling ssd optimizations
[  129.103528][ T6084] 
[  129.103528][ T6084]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.103528][ T6084] 
[  129.132844][ T6070] BTRFS info (device loop4): balance: start -f
[  129.133765][ T6122] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  129.141757][ T6070] BTRFS info (device loop4): balance: ended with status: 0
[  129.227882][ T5242] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  129.246773][ T6084] ERROR: (device loop2): diWrite: ixpxd invalid
[  129.246773][ T6084] 
[  129.299716][ T6084] ERROR: (device loop2): txCommit: 
[  129.299716][ T6084] 
[  129.339115][ T6131] ERROR: (device loop2): dtSearch: stack overrun!
[  129.339115][ T6131] 
[  129.366965][ T6131] btstack dump:
[  129.382975][ T6131] bn = 0, index = 0
[  129.431538][ T6131] bn = 0, index = 0
[  129.442538][ T6131] bn = 0, index = 0
[  129.460601][ T6131] bn = 0, index = 0
[  129.464759][ T6131] bn = 0, index = 0
[  129.482508][ T6131] bn = 0, index = 0
[  129.498811][ T5242] usb 1-1: Using ep0 maxpacket: 8
[  129.505130][ T6131] bn = 0, index = 0
[  129.521697][ T6131] bn = 0, index = 0
[  129.526850][ T6131] jfs_mkdir: dtSearch returned -5
[  129.677997][ T5242] usb 1-1: unable to get BOS descriptor or descriptor too short
[  129.940488][ T5242] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[  129.950875][ T4189] 
[  129.950875][ T4189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.950875][ T4189] 
[  129.973445][ T5242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.982641][ T5242] usb 1-1: Product: syz
[  129.986856][ T5242] usb 1-1: Manufacturer: syz
[  129.992191][ T5242] usb 1-1: SerialNumber: syz
[  129.997291][ T4189] 
[  129.997291][ T4189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.997291][ T4189] 
[  130.019819][ T6141] xt_policy: neither incoming nor outgoing policy selected
[  130.087339][ T5242] snd-ua101 1-1:1.1: sample format descriptor not found
[  130.149090][ T5242] snd-ua101 1-1:1.0: invalid num_altsetting
[  130.272893][ T6147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.282581][ T6147] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.291940][ T6147] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.301028][ T6147] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.376356][ T4547] usb 1-1: USB disconnect, device number 5
[  130.415993][ T6149] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1'
[  130.670559][ T6152] set_capacity_and_notify: 3 callbacks suppressed
[  130.670577][ T6152] loop4: detected capacity change from 0 to 2048
[  130.798117][ T6152] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  130.855410][ T6166] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.901725][ T6152] NILFS (loop4): unrecognized mount option "2"
[  131.028419][ T4547] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  131.267724][ T4547] usb 3-1: Using ep0 maxpacket: 16
[  131.301899][ T6184] loop3: detected capacity change from 0 to 64
[  131.428120][ T4547] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  131.461089][ T4547] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  131.485576][ T4547] usb 3-1: config 1 has no interface number 1
[  131.499272][ T4547] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  131.510503][ T6192] loop1: detected capacity change from 0 to 8
[  131.529029][ T4547] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  131.547781][ T6041] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  131.569390][ T4547] usb 3-1: config 1 interface 105 has no altsetting 0
[  131.614352][ T6192] SQUASHFS error: Failed to read block 0x2d7: -5
[  131.647770][ T6192] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  131.727990][ T4547] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  131.743557][ T4547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.779052][ T4547] usb 3-1: Product: syz
[  131.783293][ T4547] usb 3-1: Manufacturer: syz
[  131.792683][ T4547] usb 3-1: SerialNumber: syz
[  131.828947][ T6041] usb 1-1: Using ep0 maxpacket: 32
[  131.848171][ T6164] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  131.981961][ T6041] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  131.997474][ T6041] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  132.012320][ T6041] usb 1-1: config 0 interface 0 has no altsetting 0
[  132.037783][ T6041] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  132.038725][ T6208] loop3: detected capacity change from 0 to 4096
[  132.047058][ T6041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.105383][ T6041] usb 1-1: config 0 descriptor??
[  132.113499][ T4547] aqc111: probe of 3-1:1.105 failed with error -22
[  132.140861][ T6208] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  132.305943][ T4190] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22.
[  132.322483][ T4190] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  132.349231][ T4190] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22.
[  132.369334][ T4228] usb 3-1: USB disconnect, device number 8
[  132.512479][ T4547] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  132.618345][ T6041] hid (null): unknown global tag 0xc
[  132.625426][ T6041] glorious 0003:258A:0036.000D: unknown main item tag 0x2
[  132.670042][ T6041] glorious 0003:258A:0036.000D: unknown global tag 0xc
[  132.685737][ T6041] glorious 0003:258A:0036.000D: item 0 2 1 12 parsing failed
[  132.711579][ T6041] glorious: probe of 0003:258A:0036.000D failed with error -22
[  132.783790][ T6238] loop3: detected capacity change from 0 to 512
[  132.799694][ T6240] loop4: detected capacity change from 0 to 1024
[  132.807799][ T4547] usb 2-1: Using ep0 maxpacket: 8
[  132.838731][ T6240] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  132.876864][ T5242] usb 1-1: USB disconnect, device number 6
[  132.920384][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'.
[  132.949961][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.957098][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.968191][ T4547] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  132.987185][ T6238] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  133.004961][ T4547] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  133.008028][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.770'.
[  133.033065][ T4547] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  133.048177][ T6238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  133.056552][ T6238] System zones: 1-12
[  133.067667][ T4547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.082304][ T6238] EXT4-fs (loop3): orphan cleanup on readonly fs
[  133.102086][ T6238] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.767: bg 0: block 361: padding at end of block bitmap is not set
[  133.114761][ T4547] usb 2-1: config 0 descriptor??
[  133.136383][ T6238] EXT4-fs (loop3): Remounting filesystem read-only
[  133.143753][ T6238] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  133.162994][ T6238] EXT4-fs (loop3): Remounting filesystem read-only
[  133.184730][ T6238] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.767: invalid indirect mapped block 12 (level 1)
[  133.211794][ T6238] EXT4-fs (loop3): Remounting filesystem read-only
[  133.227696][ T6238] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.767: invalid indirect mapped block 2 (level 2)
[  133.267572][ T6238] EXT4-fs (loop3): Remounting filesystem read-only
[  133.275494][ T6238] EXT4-fs (loop3): 1 truncate cleaned up
[  133.326792][ T6238] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000080000,errors=remount-ro,jqfmt=vfsv0. Quota mode: none.
[  133.609534][ T4547] sony 0003:054C:0268.000E: ignoring exceeding usage max
[  133.626757][ T4547] sony 0003:054C:0268.000E: unknown main item tag 0x2
[  133.698076][ T4547] sony 0003:054C:0268.000E: hiddev0,hidraw0: USB HID v80.05 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0
[  133.734405][ T4547] sony 0003:054C:0268.000E: failed to claim input
[  133.887102][ T4547] usb 2-1: USB disconnect, device number 10
[  133.971882][ T6269] fido_id[6269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  134.287129][ T6249] loop4: detected capacity change from 0 to 40427
[  134.352406][ T6249] F2FS-fs (loop4): Invalid log blocks per segment (4278190089)
[  134.371151][ T6249] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  134.432975][ T6249] F2FS-fs (loop4): invalid crc value
[  134.443301][ T6296] loop2: detected capacity change from 0 to 128
[  134.528104][ T6296] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  134.556146][ T6249] F2FS-fs (loop4): Found nat_bits in checkpoint
[  134.568239][ T6296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.670078][ T6296] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  134.784342][ T6249] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  134.809012][ T6249] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  134.875649][ T6308] loop3: detected capacity change from 0 to 4096
[  134.935073][ T6315] loop1: detected capacity change from 0 to 1024
[  134.964133][ T6249] F2FS-fs (loop4): Corrupted max_depth of 3: 255
[  134.982332][ T6249] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  135.062453][ T6308] EXT4-fs (loop3): Test dummy encryption mode enabled
[  135.095123][ T6315] hfsplus: failed to load root directory
[  135.106137][ T6308] EXT4-fs (loop3): Test dummy encryption mode enabled
[  135.154564][ T6308] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[  135.154564][ T6308] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  135.154564][ T6308] 
[  135.327467][ T6308] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,user_xattr,test_dummy_encryption=v1,nodiscard,data_err=ignore,noacl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  135.470520][ T4189] hfs: node 4:3 still has 2 user(s)!
[  135.516780][ T6332] comedi comedi1: mpc624: I/O port conflict (0x100,16)
[  135.741439][ T6336] set_capacity_and_notify: 2 callbacks suppressed
[  135.741457][ T6336] loop2: detected capacity change from 0 to 4096
[  135.873256][ T6342] option changes via remount are deprecated (pid=6341 comm=syz.0.809)
[  135.885078][ T6342] cgroup: option or name mismatch, new: 0x0 "func", old: 0x0 ""
[  135.898359][ T6336] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  135.909937][ T6346] loop1: detected capacity change from 0 to 8
[  135.958854][ T6336] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  136.002795][ T6336] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  136.005391][ T6346] SQUASHFS error: lzo decompression failed, data probably corrupt
[  136.019923][ T6336] ntfs3: loop2: Failed to load $Bitmap.
[  136.025922][ T6336] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  136.032488][ T6346] SQUASHFS error: Failed to read block 0x202: -5
[  136.048699][ T6336] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22.
[  136.055121][ T6346] SQUASHFS error: Unable to read metadata cache entry [200]
[  136.120338][ T4228] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  136.247274][ T6354] loop4: detected capacity change from 0 to 256
[  136.269823][ T6354] exfat: Deprecated parameter 'utf8'
[  136.370474][ T6356] loop1: detected capacity change from 0 to 2048
[  136.372397][ T6354] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d)
[  136.403686][ T6336] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  136.444768][ T6356] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  136.461259][ T6356] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.527996][ T4228] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  136.553688][ T4228] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  136.567071][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.630330][ T4228] gspca_main: stv0680-2.14.0 probing 041e:4007
[  136.845266][ T6369] Zero length message leads to an empty skb
[  136.878491][ T6371] loop1: detected capacity change from 0 to 736
[  137.344598][ T6361] loop0: detected capacity change from 0 to 32768
[  137.597575][ T6366] loop2: detected capacity change from 0 to 32768
[  137.875026][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready
[  137.968013][ T4228] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  137.986915][ T4228] stv0680 4-1:4.0: last error: 2,  command = 0x30
[  138.038224][ T4228] usb 4-1: USB disconnect, device number 10
[  138.402486][ T6406] loop1: detected capacity change from 0 to 512
[  138.472573][ T6411] netlink: 'syz.0.840': attribute type 30 has an invalid length.
[  138.476064][ T6390] loop4: detected capacity change from 0 to 32768
[  138.544368][ T6406] EXT4-fs (loop1): Ignoring removed oldalloc option
[  138.562124][ T6406] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  138.587160][ T6390] diRead: diIAGRead returned -5
[  138.659451][ T6406] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.849: inode #216: comm syz.1.849: iget: illegal inode #
[  138.684908][ T6406] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.849: error while reading EA inode 216 err=-117
[  138.744629][ T6406] EXT4-fs (loop1): 1 truncate cleaned up
[  138.756599][ T6406] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[  139.119240][ T6446] netlink: 292 bytes leftover after parsing attributes in process `syz.2.857'.
[  139.302668][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'.
[  139.537982][ T5243] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  139.898004][ T5243] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  139.957709][ T5243] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config
[  139.995554][ T5243] usb 1-1: config 0 has no interface number 0
[  140.027822][ T6488] loop2: detected capacity change from 0 to 64
[  140.038918][ T5243] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  140.084540][ T5243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.118207][ T5243] usb 1-1: config 0 descriptor??
[  140.182786][ T5243] usb 1-1: bad CDC descriptors
[  140.207998][ T5243] usb 1-1: bad CDC descriptors
[  140.249834][  T144] ------------[ cut here ]------------
[  140.255801][  T144] kernel BUG at fs/hfs/inode.c:447!
[  140.278559][  T144] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  140.284783][  T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0
[  140.292692][  T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  140.303141][  T144] Workqueue: writeback wb_workfn (flush-7:2)
[  140.309359][  T144] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  140.315391][  T144] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 40 a0 8d ff e9 47 fe ff ff e8 76 81 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  140.336969][  T144] RSP: 0018:ffffc900016cf3c0 EFLAGS: 00010293
[  140.343197][  T144] RAX: ffffffff8230b49a RBX: ffff88805b1e7018 RCX: ffff88801bdb5940
[  140.351336][  T144] RDX: 0000000000000000 RSI: ffffffff8c4e3600 RDI: 0000000000000000
[  140.359521][  T144] RBP: ffffc900016cf550 R08: ffff88801bdb5940 R09: 0000000000000003
[  140.368234][  T144] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  140.376456][  T144] R13: 1ffff920002d9e7c R14: 0000000000000000 R15: ffff88805b1e6fd8
[  140.384725][  T144] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  140.392289][ T5243] usb 1-1: USB disconnect, device number 7
[  140.394166][  T144] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.394190][  T144] CR2: 00002000000000c0 CR3: 000000007388b000 CR4: 00000000003506f0
[  140.415643][  T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  140.424169][  T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  140.432917][  T144] Call Trace:
[  140.436492][  T144]  <TASK>
[  140.439940][  T144]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  140.445356][  T144]  ? __writeback_single_inode+0x471/0xda0
[  140.452138][  T144]  ? __rwlock_init+0x140/0x140
[  140.457896][  T144]  __writeback_single_inode+0x6c3/0xda0
[  140.463823][  T144]  writeback_sb_inodes+0xa4e/0x1680
[  140.469487][  T144]  ? queue_io+0x550/0x550
[  140.474196][  T144]  ? rcu_is_watching+0x11/0xa0
[  140.478961][  T144]  wb_writeback+0x45d/0xbe0
[  140.483825][  T144]  ? rcu_lock_release+0x20/0x20
[  140.488794][  T144]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  140.495016][  T144]  ? _raw_spin_unlock_irq+0x1f/0x40
[  140.500543][  T144]  wb_workfn+0x43a/0xf20
[  140.504942][  T144]  ? inode_wait_for_writeback+0x220/0x220
[  140.510916][  T144]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  140.517075][  T144]  ? read_lock_is_recursive+0x10/0x10
[  140.522550][  T144]  ? try_to_wake_up+0x6cf/0x1050
[  140.527767][  T144]  ? _raw_spin_unlock_irq+0x1f/0x40
[  140.533226][  T144]  process_one_work+0x85f/0x1010
[  140.538163][  T144]  ? worker_detach_from_pool+0x240/0x240
[  140.543880][  T144]  ? lockdep_hardirqs_off+0x70/0x100
[  140.549187][  T144]  ? _raw_spin_lock_irq+0xb7/0xf0
[  140.554410][  T144]  ? _raw_spin_lock_irqsave+0x100/0x100
[  140.560174][  T144]  ? wq_worker_running+0x97/0x170
[  140.565308][  T144]  worker_thread+0xaa6/0x1290
[  140.570475][  T144]  ? lockdep_hardirqs_on+0x94/0x140
[  140.575773][  T144]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  140.582108][  T144]  kthread+0x436/0x520
[  140.586209][  T144]  ? rcu_lock_release+0x20/0x20
[  140.591749][  T144]  ? kthread_blkcg+0xd0/0xd0
[  140.596688][  T144]  ret_from_fork+0x1f/0x30
[  140.601201][  T144]  </TASK>
[  140.604806][  T144] Modules linked in:
[  140.614711][  T144] ---[ end trace 734f9c6b2ab78122 ]---
[  140.621302][  T144] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  140.627519][  T144] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 40 a0 8d ff e9 47 fe ff ff e8 76 81 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  140.650677][  T144] RSP: 0018:ffffc900016cf3c0 EFLAGS: 00010293
[  140.657403][  T144] RAX: ffffffff8230b49a RBX: ffff88805b1e7018 RCX: ffff88801bdb5940
[  140.664824][ T6471] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  140.666565][  T144] RDX: 0000000000000000 RSI: ffffffff8c4e3600 RDI: 0000000000000000
[  140.684543][  T144] RBP: ffffc900016cf550 R08: ffff88801bdb5940 R09: 0000000000000003
[  140.693196][  T144] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  140.700712][ T6471] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  140.701784][  T144] R13: 1ffff920002d9e7c R14: 0000000000000000 R15: ffff88805b1e6fd8
[  140.721767][  T144] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  140.731914][ T6471] F2FS-fs (loop3): invalid crc value
[  140.758272][  T144] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.767461][ T6471] F2FS-fs (loop3): Found nat_bits in checkpoint
[  140.790076][  T144] CR2: 00002000000000c0 CR3: 0000000022c2b000 CR4: 00000000003506f0
[  140.809403][  T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  140.824054][  T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  140.834701][  T144] Kernel panic - not syncing: Fatal exception
[  140.840975][  T144] Kernel Offset: disabled
[  140.845490][  T144] Rebooting in 86400 seconds..