last executing test programs:

3.551692337s ago: executing program 0 (id=1073):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0)
write$proc_mixer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='DIGITAL1\nIGAIN\nSYNTH \'Synth Capture Switch\'\t'], 0x71)
dup3(r1, r0, 0x0)

3.387567853s ago: executing program 0 (id=1076):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$eJzs3MtvG8UfAPDvrpO26eOX/Ep59AEECiLikTRpgR44AAKJA0hIXMoxJGlV6jaoCRKtKggIlSOqxB1xROIv4AQXBJyQuMIdVapQLxRORmvv1o/abpI6cag/H2mTmd1xZr6eHXt2p9sABtZ49iOJ2B0Rv0XEaC3bXGC89uvG9Utzf1+/NJdEpfLWn0m13F/XL80VRYvX7cozE2lE+mkSB9vUu3Th4pnZcnnhfJ6fWj773tTShYvPnD47e2rh1MK5mePHjx2dfv65mWd7Euf/s7Ye+HDx0P7X3r7yxtyJK+/89E1SxN8Sxx0bqf4c71bk8UqlZ9VtBXsa0slQHxvCmpQiIuuu4er4H41S1DtvNF79pK+NAzZUJdfh8EoFuIsl0e8WAP1RfNFn17/Ftnmzj/679lLtAiiL+0a+1Y4MRRq1C6PhluvbXhqPiBMr/3yZbdHr+xAAAG18l81/nm43/0vjvoZy/8vXhsbytZS9EXFPROyLiHsjqmXvj4gH1lh/6yLJrfOf9Oq6AlulbP73Qr621Tz/S4siY6U8t6eaGU5Oni4vHMnfk4kY3p7lp7vU8f0rv37e6Vjj/C/bsvqLuWDejqtD25tfMz+7PHsnMTe69nHEgaF28Sc3VwKSiNgfEQfWWcfpJ78+1OlYa/yVpNtferE524N1pspXEU/U+n8lWuIvJN3XJ6d2RHnhyFRxVtzq518uv9mp/tv3/8bK+n9n2/P/ZvxjSeN67dLa67j8+2cdr2km13X+13dsy39/MLu8fH46Ylvyeq3Rjftn6q8t8kX5LP6Jw+3H/96ovxMHIyI7iR+MiIci4uG87x6JiEcj4nCnAFcifnz5sXc7Hd4K/T/f0v9jzUVa+r+e2Bate9onSmd++Lb5L9aTq/v8O1ZNTeR7VvP5t5p2re9sBgAAgP+eNCJ2R5JO3kyn6eRk7d/w74udaXlxafmpk4vvn5uvPSMwFsNpcaerdj+4dj90Or+sL/IzLfmj+X3jL0oj1fzk3GJ5vt/Bw4Db1WH8Z/4o9bt1wIbzvBYMLuMfBpfxD4PL+IfB1Wb8j/SjHcDma/f9/1E9WRndzMYAm6pl/Fv2gwHi+h8Gl/EPg6tx/Hd9/h64myyNxO0fkpfYyokdRVdubu2RboHYe5VINngU7O53gI2J4v/+7F64zx9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPfJvAAAA//+Zfec0")
chdir(&(0x7f0000000080)='./file0\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)

3.349581833s ago: executing program 4 (id=1079):
getpid()
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
read$FUSE(r0, &(0x7f000000a4c0)={0x2020}, 0xa5)

2.964350816s ago: executing program 4 (id=1084):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0xd, 0x10, 0x0, 0xe6, 0x80000000, 0x8, 0x800400}, {0x1, 0x2, 0x1, 0x6, 0x8, 0xffffdfff, 0x5}]})

2.887882248s ago: executing program 2 (id=1085):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
recvmmsg(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, &(0x7f0000003200)=""/17, 0x11}}], 0x1, 0x102, 0x0)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a)

2.692148544s ago: executing program 4 (id=1089):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000)

2.587501168s ago: executing program 4 (id=1091):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x1000016, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

2.577801708s ago: executing program 0 (id=1092):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0})

2.534864309s ago: executing program 4 (id=1093):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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")
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xdd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000400)='2', 0xfe1e, 0x8000c61)

2.368210164s ago: executing program 0 (id=1095):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
lseek(r0, 0x30, 0x4)

2.21085318s ago: executing program 0 (id=1098):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000040)=ANY=[], 0xfd, 0x5531, &(0x7f0000000540)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810000000000000000001100000024000980"], 0x38}}, 0x0)

2.073812064s ago: executing program 2 (id=1099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r2, @ANYBLOB="0200000000004200240012800b00010065727370616e000014000280050016000000000006000e00d53c"], 0x44}}, 0x20000010)

1.88596645s ago: executing program 2 (id=1102):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="80fd0200000510", 0x7}], 0x1, 0x0, 0x5)

1.57809081s ago: executing program 2 (id=1104):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.535604581s ago: executing program 1 (id=1105):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
pread64(r1, &(0x7f00000002c0)=""/118, 0x76, 0x22)

1.403505135s ago: executing program 2 (id=1107):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)

1.318622608s ago: executing program 1 (id=1108):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c)

1.196375432s ago: executing program 2 (id=1110):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="4014490000005b9840a147d843526e86c6e1bcd75d21089a4025994dd1cbc8f466a3ac7de6826e6330a8e04592368f72a27170f69ac30504667d836016aad5e1d1bf3c8517f6497067c1"], 0x0, 0x0})

1.157817623s ago: executing program 1 (id=1111):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@nobarrier}, {@grpid}]}, 0xfe, 0x469, &(0x7f0000002480)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30)
pwrite64(r0, &(0x7f0000000200)='a', 0x1, 0x80000000e0)

747.651686ms ago: executing program 3 (id=1113):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc)

747.529546ms ago: executing program 3 (id=1114):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff00c}, {0x28, 0x4, 0x1, 0x9}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

567.003112ms ago: executing program 1 (id=1115):
r0 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0xc0000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)

528.756003ms ago: executing program 3 (id=1116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000010000020000040900010073797a30000000000900020073797a320000000034000000080a05000000000000000000020000060900020073797a32000000000900010073797a30"], 0x88}}, 0x0)

512.185494ms ago: executing program 4 (id=1117):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000580)=[{&(0x7f00000008c0)="8897ef034a38006d7f39d0035e88f3652d0c084469072ef2a1e8b46cf5819ef2d7e99d0879381952dcad961be0e882ac916f178ccba62423a9a8f1a333d93fc820e24fd02208d27a83acf05874e0af5f1771d1d454209af220d38f4dd1a3bca21627d457bd8dd6fb3537ed64f4eb5ac9f4f469950bd0c1d00283daad714aa85871a53efa8468b41195d98a173637d78433d3ddd5678338ef29ee9272172cca1a23a90604cd1ce4714ea47bc4e52d35d4e232251f7e2c282baa5002ee95946634a0a4", 0xc2}, {&(0x7f0000000b00)="4f9e4b492cc8fce31b9cd0c138a2dd4d47fd679f4e86edb69181ed8267c95c3f02bc1c19966865586ef69ab99e344299372ec8f251b10ba6a04660eeba3ca992403d2607b5fd1e80e6ce4c3095c6143f1ba12181795667ff373f932a093c86adcd53a8193d96c51b398d89d7c02dd8c74ce4b133b5bccaf626cd64261377e48844756faf909617d41cd4f43b580d8b9f866cc81617bb9081bdf6dfc0337472f6913819c8a4b21442cbcc7d02f978ffc8d6ae53c89be2e1f1b6e9f73780df35710f260933d438d543a13ebb99b7de3b8accbd412a7a1c72", 0xd7}, {&(0x7f00000000c0)="bf3f9ce35aa4f0d71a96515e6c8a3cf1b61da3bf05134a56572ffccbcbc8a2dd22fbcb8df3459aca98dd74a964f75b8da3bd69842182e987c467fc341fba2ceacca3b6b0144be6ebaf0ce743ed8b7a8f940d98d9b94253db36b148cd6f8c5132dc", 0x61}, {&(0x7f00000001c0)="0433825c0dacd57ce7d88b2ec674e722a5ecf14741a19af783b0ac8db2793744f400c92d0a33a32b44db35fc86fb546c7a807c7a076200bdf93eb3ea59b38f95b3", 0x41}, {&(0x7f0000000240)="86a24ac5bd0ec0a7b55dec877f67b3a4bf14c8a13e4523de5d8b2b5b57c3a0f3ec01e71a1918742224ebc878de7a2583", 0x30}, {&(0x7f0000000440)="5a5a195695b33d149da6d527c429db2d0db39cc225140e8efdbf305cad065daec3127c3ec0cf6a515cfaf48a3d916e6996da9e4c7c4eea1b15913bfe31cd58ba90e1d65d237eedc4b0ab7c3c98939ecb651567344da4f7e8d22feba39822d753556c5d552096709a9519bfa5d9ab7512e6222414700ff251409b7265c27565574e195157084d2e284f26abcdcd", 0x8d}], 0x6)

379.609538ms ago: executing program 3 (id=1118):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100001c0000000000000a000000000008000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800010010"], 0x38}}, 0x0)

254.194162ms ago: executing program 3 (id=1119):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00')

236.763943ms ago: executing program 1 (id=1120):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[])

81.022137ms ago: executing program 1 (id=1121):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

19.992779ms ago: executing program 3 (id=1122):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a"], 0x48}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

0s ago: executing program 0 (id=1123):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d000000000000ff00000000000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

dy
[   67.092389][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.104563][ T4189] device veth0_macvtap entered promiscuous mode
[   67.129835][ T4193] device veth0_macvtap entered promiscuous mode
[   67.143429][ T4201] device veth1_vlan entered promiscuous mode
[   67.151035][ T4189] device veth1_macvtap entered promiscuous mode
[   67.175567][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.178048][ T4193] device veth1_macvtap entered promiscuous mode
[   67.191477][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.201309][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.210010][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.221489][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.229872][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.238786][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.247409][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.284556][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.295207][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.305670][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.316379][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.329021][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.357602][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.368840][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.380278][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.391282][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.404952][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.414060][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.422052][   T23] Bluetooth: hci1: command 0x040f tx timeout
[   67.423430][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.435536][   T23] Bluetooth: hci0: command 0x040f tx timeout
[   67.436001][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.448045][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.458175][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.467234][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.476216][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.485175][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.494017][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.504402][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.512527][   T23] Bluetooth: hci4: command 0x040f tx timeout
[   67.518766][   T23] Bluetooth: hci3: command 0x040f tx timeout
[   67.525419][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.536025][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.536756][   T23] Bluetooth: hci2: command 0x040f tx timeout
[   67.556262][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.566956][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.578353][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.589521][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.599709][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.611698][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.622893][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.633654][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.643146][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.652169][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.661168][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.674642][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.684149][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.694097][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.718533][ T4201] device veth0_macvtap entered promiscuous mode
[   67.729287][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.741018][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.752124][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.764088][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.774168][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.785811][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.797205][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.819521][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.828960][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.838222][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.851209][ T4201] device veth1_macvtap entered promiscuous mode
[   67.864800][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.874812][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.897409][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.917691][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.921158][ T4263] loop3: detected capacity change from 0 to 128
[   67.955182][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.970872][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.025745][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.075885][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.097556][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.107575][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.118206][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.128695][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.142263][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.152527][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.163842][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.180673][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.203153][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.215455][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.280425][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.318853][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.344127][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.355353][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.365594][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.391977][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.404358][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.420207][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.434374][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.470824][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.500575][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.540059][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.561718][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.593900][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.602150][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.609987][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.640761][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.682737][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.727042][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.736369][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.762793][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.809456][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.821718][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.829638][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.848604][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.888099][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.906134][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.978058][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.012301][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.032462][ T4261] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   69.050031][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.124038][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.158294][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.183800][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.203297][ T4280] ubi0: attaching mtd0
[   69.441756][ T4261] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   69.467862][ T4261] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   69.501829][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[   69.502287][ T4234] Bluetooth: hci1: command 0x0419 tx timeout
[   69.531511][   T13] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   69.561673][ T4261] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[   69.585904][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   69.596001][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[   69.598540][ T4261] usb 4-1: SerialNumber: syz
[   69.625589][    T7] Bluetooth: hci3: command 0x0419 tx timeout
[   69.653128][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[   69.681367][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   69.693758][ T4261] usb 4-1: 0:2 : does not exist
[   69.700768][ T4261] usb 4-1: unit 102 not found!
[   69.785308][ T4297] process 'syz.1.15' launched './file1' with NULL argv: empty string added
[   69.801227][ T4295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'.
[   69.896476][   T13] usb 1-1: config 0 interface 0 has no altsetting 0
[   69.908044][   T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[   69.948300][ T4229] usb 4-1: USB disconnect, device number 2
[   69.961059][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.991234][   T13] usb 1-1: config 0 descriptor??
[   70.001488][   T21] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   70.111223][ T4306] loop2: detected capacity change from 0 to 512
[   70.247709][ T4306] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.19: bad orphan inode 11862016
[   70.263884][ T4279] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   70.305869][ T4306] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   70.318610][ T4306] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.401677][   T21] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[   70.412310][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.427051][   T21] usb 5-1: config 0 descriptor??
[   70.483991][   T21] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[   70.555092][   T13] logitech 0003:046D:C211.0001: unknown main item tag 0x2
[   70.584471][   T13] logitech 0003:046D:C211.0001: unknown main item tag 0x6
[   70.616974][ T4322] loop1: detected capacity change from 0 to 512
[   70.627139][   T13] logitech 0003:046D:C211.0001: ignoring exceeding usage max
[   70.670098][   T13] logitech 0003:046D:C211.0001: hidraw0: USB HID v0.81 Device [HID 046d:c211] on usb-dummy_hcd.0-1/input0
[   70.685034][   T13] logitech 0003:046D:C211.0001: no inputs found
[   70.704163][ T4330] capability: warning: `syz.3.29' uses 32-bit capabilities (legacy support in use)
[   70.721727][   T21] gp8psk: usb in 128 operation failed.
[   70.740796][ T4322] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   70.816871][   T13] usb 1-1: USB disconnect, device number 2
[   70.833156][ T4322] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.25: bad orphan inode 15
[   70.860197][ T4322] ext4_test_bit(bit=14, block=18) = 1
[   70.869256][ T4334] netlink: 'syz.3.30': attribute type 29 has an invalid length.
[   70.870134][ T4322] is_bad_inode(inode)=0
[   70.884813][ T4334] netlink: 'syz.3.30': attribute type 29 has an invalid length.
[   70.891007][ T4322] NEXT_ORPHAN(inode)=1023
[   70.901637][ T4231] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.905073][ T4322] max_ino=32
[   70.925477][ T4322] i_nlink=0
[   70.935280][ T4322] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #15: comm syz.1.25: corrupted xattr block 19
[   70.938408][ T4335] fido_id[4335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   70.981429][ T4322] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117)
[   70.999638][ T4322] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   71.021902][   T21] gp8psk: usb in 137 operation failed.
[   71.027546][   T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   71.051533][   T21] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[   71.078646][   T21] usb 5-1: USB disconnect, device number 2
[   71.088450][ T4322] EXT4-fs (loop1): shut down requested (2)
[   71.257505][ T4342] loop3: detected capacity change from 0 to 8192
[   71.292983][ T4344] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.307385][ T4342] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   71.327062][ T4342] REISERFS (device loop3): using ordered data mode
[   71.337874][ T4342] reiserfs: using flush barriers
[   71.354040][ T4342] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   71.403350][ T4349] loop0: detected capacity change from 0 to 256
[   71.414344][ T4342] REISERFS (device loop3): checking transaction log (loop3)
[   71.505872][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.512510][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.522524][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.534016][ T4349] FAT-fs (loop0): Directory bread(block 64) failed
[   71.543921][ T4349] FAT-fs (loop0): Directory bread(block 65) failed
[   71.548915][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.563376][ T4349] FAT-fs (loop0): Directory bread(block 66) failed
[   71.569952][ T4349] FAT-fs (loop0): Directory bread(block 67) failed
[   71.592771][ T4231] usb 3-1: Product: syz
[   71.613795][ T4342] REISERFS (device loop3): Using tea hash to sort names
[   71.628865][ T4231] usb 3-1: Manufacturer: syz
[   71.629086][ T4349] FAT-fs (loop0): Directory bread(block 68) failed
[   71.644794][ T4231] usb 3-1: SerialNumber: syz
[   71.648449][ T4353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'.
[   71.651059][ T4342] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   71.659105][ T4349] FAT-fs (loop0): Directory bread(block 69) failed
[   71.696852][ T4349] FAT-fs (loop0): Directory bread(block 70) failed
[   71.724904][ T4349] FAT-fs (loop0): Directory bread(block 71) failed
[   71.749617][ T4349] FAT-fs (loop0): Directory bread(block 72) failed
[   71.787197][ T4349] FAT-fs (loop0): Directory bread(block 73) failed
[   72.182301][ T4369] loop3: detected capacity change from 0 to 1024
[   72.235886][ T4369] EXT4-fs (loop3): Ignoring removed orlov option
[   72.253128][ T4369] EXT4-fs (loop3): Ignoring removed oldalloc option
[   72.259795][ T4369] EXT4-fs (loop3): Ignoring removed orlov option
[   72.278976][ T4376] loop1: detected capacity change from 0 to 256
[   72.298110][ T4374] tipc: Started in network mode
[   72.315735][ T4369] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[   72.318447][ T4374] tipc: Node identity ac14140f, cluster identity 4711
[   72.330209][ T4369] System zones: 0-1, 3-12
[   72.339306][ T4369] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,debug,max_dir_size_kb=0x0000000000000003,orlov,oldalloc,orlov,nogrpid,resuid=0x0000000000000000,grpjquota=,,errors=continue. Quota mode: none.
[   72.339766][ T4374] tipc: New replicast peer: 255.255.255.255
[   72.362118][ T4376] exfat: Deprecated parameter 'utf8'
[   72.373228][ T4376] exfat: Deprecated parameter 'namecase'
[   72.379043][ T4376] exfat: Deprecated parameter 'namecase'
[   72.384002][ T4374] tipc: Enabled bearer <udp:syz2>, priority 10
[   72.450831][ T4376] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   72.581123][ T4383] netlink: 296 bytes leftover after parsing attributes in process `syz.3.47'.
[   72.604039][ T4231] cdc_ncm 3-1:1.0: SET_CRC_MODE failed
[   72.628156][ T4231] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed
[   72.681678][ T4231] cdc_ncm 3-1:1.0: bind() failure
[   72.708277][ T4231] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   72.754348][ T4231] cdc_ncm 3-1:1.1: bind() failure
[   72.796858][ T4231] usb 3-1: USB disconnect, device number 2
[   72.809949][ T4391] loop3: detected capacity change from 0 to 512
[   72.870561][ T4391] EXT4-fs (loop3): Ignoring removed oldalloc option
[   72.908331][ T4391] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none.
[   73.006287][ T4397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.55'.
[   73.338389][ T4410] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   73.385918][ T4229] tipc: Node number set to 2886997007
[   73.590584][ T4420] loop2: detected capacity change from 0 to 256
[   73.637343][ T4420] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[   73.768540][ T4426] capability: warning: `syz.1.68' uses deprecated v2 capabilities in a way that may be insecure
[   73.836482][ T4420] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008)
[   73.963196][ T4403] loop4: detected capacity change from 0 to 32768
[   74.040189][ T4403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.56 (4403)
[   74.148392][ T4434] loop2: detected capacity change from 0 to 16
[   74.159968][ T4403] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   74.215010][ T4434] erofs: (device loop2): mounted with root inode @ nid 36.
[   74.223738][ T4403] BTRFS info (device loop4): using free space tree
[   74.230329][ T4403] BTRFS info (device loop4): has skinny extents
[   74.454121][ T4447] loop1: detected capacity change from 0 to 1024
[   74.473538][ T4403] BTRFS info (device loop4): enabling ssd optimizations
[   75.050607][ T4474] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.81'.
[   75.211151][ T4477] netlink: 104 bytes leftover after parsing attributes in process `syz.0.83'.
[   75.450662][ T4496] loop4: detected capacity change from 0 to 256
[   75.763698][   T26] audit: type=1326 audit(1780706435.131:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f385d2e59 code=0x0
[   76.197068][ T4538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'.
[   76.207139][ T4538] netlink: 'syz.4.107': attribute type 6 has an invalid length.
[   76.300981][ T4540] loop4: detected capacity change from 0 to 512
[   76.400174][ T4540] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback.
[   76.542207][ T4540] EXT4-fs (loop4): shut down requested (2)
[   76.707067][ T4535] loop1: detected capacity change from 0 to 40427
[   76.820247][ T4511] loop3: detected capacity change from 0 to 40427
[   76.885375][ T4511] =======================================================
[   76.885375][ T4511] WARNING: The mand mount option has been deprecated and
[   76.885375][ T4511]          and is ignored by this kernel. Remove the mand
[   76.885375][ T4511]          option from the mount to silence this warning.
[   76.885375][ T4511] =======================================================
[   76.964545][ T4535] F2FS-fs (loop1): invalid crc value
[   76.984675][ T4511] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   77.001653][ T4511] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   77.021728][ T4535] F2FS-fs (loop1): Found nat_bits in checkpoint
[   77.068406][ T4511] F2FS-fs (loop3): invalid crc value
[   77.149628][ T4537] loop2: detected capacity change from 0 to 32768
[   77.176713][ T4511] F2FS-fs (loop3): Found nat_bits in checkpoint
[   77.203980][ T4535] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   77.264803][ T4537] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.108 (4537)
[   77.304460][ T4511] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   77.329488][ T4511] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   77.342235][ T4537] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   77.412080][ T4537] BTRFS info (device loop2): using free space tree
[   77.438962][ T4537] BTRFS info (device loop2): has skinny extents
[   77.471441][ T4466] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   77.489143][ T4196] attempt to access beyond end of device
[   77.489143][ T4196] loop1: rw=2049, want=45104, limit=40427
[   77.711650][ T4466] usb 1-1: Using ep0 maxpacket: 8
[   77.718244][ T4537] BTRFS info (device loop2): enabling ssd optimizations
[   77.741259][ T4566] loop4: detected capacity change from 0 to 8192
[   77.831762][ T4466] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.926835][ T4466] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[   77.980158][ T4466] usb 1-1: config 0 interface 0 has no altsetting 0
[   78.036088][ T4466] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[   78.101418][ T4466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.142246][ T4466] usb 1-1: config 0 descriptor??
[   78.633651][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.641024][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.658957][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.671258][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.694080][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.735083][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.735296][ T4607] input: syz0 as /devices/virtual/input/input5
[   78.776190][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.813298][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.840086][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.850387][ T4466] petalynx 0003:18B1:0037.0002: unknown main item tag 0x0
[   78.870804][ T4466] petalynx 0003:18B1:0037.0002: collection stack underflow
[   78.884631][ T4466] petalynx 0003:18B1:0037.0002: item 0 0 0 12 parsing failed
[   78.894204][ T4466] petalynx 0003:18B1:0037.0002: parse failed
[   78.900448][ T4466] petalynx: probe of 0003:18B1:0037.0002 failed with error -22
[   78.918968][ T4466] usb 1-1: USB disconnect, device number 3
[   79.185614][ T4622] loop1: detected capacity change from 0 to 128
[   79.252429][ T4622] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   79.324504][ T4622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   79.742834][ T4646] loop2: detected capacity change from 0 to 512
[   79.814662][ T4653] loop0: detected capacity change from 0 to 256
[   79.870426][ T4648] loop3: detected capacity change from 0 to 1024
[   79.874256][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'.
[   79.915115][ T4646] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   79.931120][ T4646] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[   79.944751][ T4646] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.139: Corrupt directory, running e2fsck is recommended
[   79.975694][ T4646] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   79.988889][ T4653] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   79.989703][ T4646] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.139: corrupted in-inode xattr
[   80.018727][ T4660] loop1: detected capacity change from 0 to 512
[   80.033892][ T4646] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.139: couldn't read orphan inode 15 (err -117)
[   80.072887][ T4646] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000003,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001001,grpid,,,errors=continue. Quota mode: writeback.
[   80.084555][ T4660] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   80.130472][ T4660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   80.158694][ T4660] EXT4-fs (loop1): 1 truncate cleaned up
[   80.179502][ T4660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.376911][ T4668] mkiss: ax0: crc mode is auto.
[   80.393841][ T4670] loop1: detected capacity change from 0 to 256
[   80.503111][ T4674] loop0: detected capacity change from 0 to 2048
[   80.540752][ T4676] netlink: 56 bytes leftover after parsing attributes in process `syz.2.152'.
[   80.640084][ T4674] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.833268][ T4689] sctp: [Deprecated]: syz.2.158 (pid 4689) Use of int in maxseg socket option.
[   80.833268][ T4689] Use struct sctp_assoc_value instead
[   81.025531][ T4700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   81.277693][ T4711] program syz.1.169 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   81.588908][ T4726] netlink: 76 bytes leftover after parsing attributes in process `syz.2.174'.
[   81.771454][ T4466] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   81.910590][ T4678] loop3: detected capacity change from 0 to 32768
[   81.958360][ T4737] loop2: detected capacity change from 0 to 164
[   82.044310][ T4737] Zero length message leads to an empty skb
[   82.131621][ T4466] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[   82.143594][ T4466] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   82.158749][ T4466] usb 1-1: config 0 interface 0 has no altsetting 0
[   82.160331][ T4678] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   82.165837][ T4466] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[   82.184502][ T4466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.195884][ T4466] usb 1-1: config 0 descriptor??
[   82.215618][ T4720] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   82.605888][ T4748] loop4: detected capacity change from 0 to 4096
[   82.674440][ T4466] kye 0003:0458:501A.0003: unknown main item tag 0x7
[   82.731137][ T4466] kye 0003:0458:501A.0003: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0
[   82.765714][ T4466] kye 0003:0458:501A.0003: tablet-enabling feature report not found
[   82.767037][ T4198] ocfs2: Unmounting device (7,3) on (node local)
[   82.803200][ T4466] kye 0003:0458:501A.0003: tablet enabling failed
[   83.061427][ T4759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.073238][ T4748] EXT4-fs (loop4): Test dummy encryption mode enabled
[   83.085236][ T4466] usb 1-1: USB disconnect, device number 4
[   83.099884][ T4748] EXT4-fs (loop4): Ignoring removed orlov option
[   83.154424][ T4748] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback.
[   83.165330][ T4760] fido_id[4760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   83.320577][ T4748] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[   83.414406][ T4748] EXT4-fs (loop4): Ignoring removed orlov option
[   83.452081][ T4748] EXT4-fs (loop4): Remounting file system with no journal so ignoring journalled data option
[   83.502478][ T4748] EXT4-fs (loop4): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,nouid32,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback.
[   83.814844][ T4786] netlink: 72 bytes leftover after parsing attributes in process `syz.2.199'.
[   84.281834][ T4813] program syz.1.211 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.311978][ T4816] tap0: tun_chr_ioctl cmd 1074025677
[   84.319136][ T4816] tap0: linktype set to 270
[   84.791118][ T4844] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   84.825203][ T4847] set_capacity_and_notify: 1 callbacks suppressed
[   84.825219][ T4847] loop0: detected capacity change from 0 to 256
[   84.874696][ T4844] netlink: 112 bytes leftover after parsing attributes in process `syz.1.228'.
[   85.000941][ T4854] netlink: 'syz.3.231': attribute type 1 has an invalid length.
[   85.049574][ T4854] netlink: 'syz.3.231': attribute type 2 has an invalid length.
[   86.085636][ T4903] loop3: detected capacity change from 0 to 2048
[   86.107018][ T4904] loop4: detected capacity change from 0 to 2048
[   86.192665][ T4903] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   86.281153][ T4913] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.327678][ T4904] loop4: detected capacity change from 0 to 256
[   86.372087][ T4918] loop1: detected capacity change from 0 to 256
[   86.819378][ T4930] loop2: detected capacity change from 0 to 64
[   86.873664][ T1107] cfg80211: failed to load regulatory.db
[   87.460912][ T4911] loop0: detected capacity change from 0 to 32768
[   87.642090][ T4926] loop4: detected capacity change from 0 to 32768
[   87.676637][ T4911] XFS (loop0): Mounting V5 Filesystem
[   87.786135][ T4959] loop2: detected capacity change from 0 to 64
[   87.992145][ T4959] hfs: request for non-existent node 131072 in B*Tree
[   87.999770][ T4959] hfs: request for non-existent node 131072 in B*Tree
[   88.021698][ T4911] XFS (loop0): Ending clean mount
[   88.409782][ T4980] device gretap1 entered promiscuous mode
[   88.422972][ T4189] XFS (loop0): Unmounting Filesystem
[   88.527640][ T4938] loop1: detected capacity change from 0 to 32768
[   88.650821][ T4938] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   88.702910][ T4938] lbmIODone: I/O error in JFS log
[   88.716387][ T4938] *** Log Format Error ! ***
[   88.752240][ T4938] lmLogInit: exit(-22)
[   88.756602][ T4938] lmLogOpen: exit(-22)
[   88.850344][ T4938] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   88.880639][ T4938] lbmIODone: I/O error in JFS log
[   88.900938][ T4938] *** Log Format Error ! ***
[   88.933838][ T4938] lmLogInit: exit(-22)
[   88.958988][ T4938] lmLogOpen: exit(-22)
[   89.210401][ T5002] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   89.312063][ T4996] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[   89.347810][ T4996] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   89.351375][ T5000] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   89.374853][ T4996] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   89.436041][ T4996] ntfs: volume version 3.1.
[   89.661144][ T4996] ntfs: (device loop2): parse_options(): Option iocharset is deprecated. Please use option nls=<charsetname> in the future.
[   89.680841][   T26] audit: type=1326 audit(1780706449.041:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.0.304" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f385d2e59 code=0x0
[   89.704687][ T4996] ntfs: (device loop2): parse_options(): Unrecognized mount option anchor.
[   89.724811][ T4996] ntfs: (device loop2): parse_options(): Invalid gid option argument: forget
[   89.833287][ T4201] ntfs: (device loop2): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   90.456387][ T5021] set_capacity_and_notify: 2 callbacks suppressed
[   90.456403][ T5021] loop1: detected capacity change from 0 to 32768
[   90.469854][ T5038] loop2: detected capacity change from 0 to 8192
[   90.564404][ T5021] ERROR: (device loop1): dbAllocBits: leaf page corrupt
[   90.564404][ T5021] 
[   90.612834][ T5038] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   90.640998][ T5038] REISERFS (device loop2): using ordered data mode
[   90.648511][ T5038] reiserfs: using flush barriers
[   90.669724][ T5038] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   90.687506][ T5038] REISERFS (device loop2): checking transaction log (loop2)
[   90.694926][ T5021] ERROR: (device loop1): remounting filesystem as read-only
[   90.695258][ T5021] ERROR: (device loop1): dbAllocBits: leaf page corrupt
[   90.695258][ T5021] 
[   90.720328][ T5038] REISERFS (device loop2): Using r5 hash to sort names
[   90.732892][ T5021] ERROR: (device loop1): dbAllocBits: leaf page corrupt
[   90.732892][ T5021] 
[   90.745342][ T5048] attempt to access beyond end of device
[   90.745342][ T5048] loop1: rw=1, want=4680040, limit=32768
[   90.746007][ T5038] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   90.759625][ T5021] attempt to access beyond end of device
[   90.759625][ T5021] loop1: rw=2051, want=4696064, limit=32768
[   90.793670][ T5048] metapage_write_end_io: I/O error
[   90.851818][ T5021] JFS: sb_issue_discard(ffff888027b2c000, 585984, 1024, GFP_NOFS, 0) = -5 => failed!
[   90.879014][ T5048] blkno = 8ed2c, nblocks = 1
[   90.892710][ T5048] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[   90.892710][ T5048] 
[   90.919886][ T5021] blkno = 8f100, nblocks = 400
[   90.925473][ T5021] ERROR: (device loop1): dbFree: block to be freed is outside the map
[   90.925473][ T5021] 
[   90.948837][   T26] audit: type=1800 audit(1780706450.311:4): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.315" name="file1" dev="loop2" ino=2 res=0 errno=0
[   91.000159][ T5048] UFO tlock:0xffffc900028c22d0
[   91.048925][ T5021] attempt to access beyond end of device
[   91.048925][ T5021] loop1: rw=2051, want=4696064, limit=32768
[   91.077735][ T5021] JFS: sb_issue_discard(ffff888027b2c000, 585984, 1024, GFP_NOFS, 0) = -5 => failed!
[   91.121919][ T5021] blkno = 8f100, nblocks = 400
[   91.126783][ T5021] ERROR: (device loop1): dbFree: block to be freed is outside the map
[   91.126783][ T5021] 
[   91.158776][ T5058] loop3: detected capacity change from 0 to 4096
[   91.191230][ T5021] attempt to access beyond end of device
[   91.191230][ T5021] loop1: rw=2051, want=4696064, limit=32768
[   91.192753][ T5063] device ipvlan2 entered promiscuous mode
[   91.206274][ T5021] JFS: sb_issue_discard(ffff888027b2c000, 585984, 1024, GFP_NOFS, 0) = -5 => failed!
[   91.222541][ T5063] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   91.239129][ T5021] blkno = 8f100, nblocks = 400
[   91.248521][ T5021] ERROR: (device loop1): dbFree: block to be freed is outside the map
[   91.248521][ T5021] 
[   91.303263][ T5058] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[   91.409528][ T5069] Attempt to restore checkpoint with obsolete wellknown handles
[   91.512679][ T4228] attempt to access beyond end of device
[   91.512679][ T4228] loop1: rw=1, want=4680040, limit=32768
[   91.556922][ T4228] metapage_write_end_io: I/O error
[   91.564821][ T1107] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   91.586755][ T4228] JFS: metapage_get_blocks failed
[   91.612618][  T276] blkno = 8ed2c, nblocks = 4
[   91.617264][  T276] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[   91.617264][  T276] 
[   91.689467][ T4196] attempt to access beyond end of device
[   91.689467][ T4196] loop1: rw=1, want=4680040, limit=32768
[   91.717315][ T4196] metapage_write_end_io: I/O error
[   91.731948][ T4196] JFS: metapage_get_blocks failed
[   91.737320][ T4196] JFS: metapage_get_blocks failed
[   91.748778][ T4196] JFS: metapage_get_blocks failed
[   91.821095][ T5084] loop3: detected capacity change from 0 to 64
[   91.989175][ T1107] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   92.004889][ T4198] hfs: request for non-existent node 131072 in B*Tree
[   92.010923][ T5088] loop0: detected capacity change from 0 to 1024
[   92.031535][ T1107] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[   92.060354][ T1107] usb 5-1: config 0 interface 0 has no altsetting 0
[   92.069312][ T1107] usb 5-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[   92.174513][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.212779][ T1107] usb 5-1: config 0 descriptor??
[   92.234552][ T5067] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   92.349738][ T4742] hfsplus: b-tree write err: -5, ino 25
[   92.369557][ T4742] hfsplus: b-tree write err: -5, ino 4
[   92.408094][ T4742] hfsplus: b-tree write err: -5, ino 2
[   92.437976][ T4742] hfsplus: b-tree write err: -5, ino 20
[   92.526997][ T5109] loop1: detected capacity change from 0 to 256
[   92.623515][ T5109] exfat: Deprecated parameter 'utf8'
[   92.640068][ T5115] loop0: detected capacity change from 0 to 1024
[   92.685017][ T5115] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   92.702363][ T5109] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d)
[   92.735517][ T1107] wacom 0003:056A:002A.0004: unknown main item tag 0x3
[   92.761579][ T1107] wacom 0003:056A:002A.0004: unknown main item tag 0x0
[   92.771793][ T5115] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   92.779004][ T1107] wacom 0003:056A:002A.0004: unknown main item tag 0x0
[   92.820041][ T1107] wacom 0003:056A:002A.0004: unknown main item tag 0x0
[   92.830199][ T5115] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: inode #5: comm syz.0.350: unexpected bad inode w/o EXT4_IGET_BAD
[   92.839996][ T1107] wacom 0003:056A:002A.0004: unknown main item tag 0x0
[   92.856840][ T1107] wacom 0003:056A:002A.0004: unknown main item tag 0x0
[   92.864383][ T1107] wacom 0003:056A:002A.0004: unknown main item tag 0x0
[   92.871293][ T1107] wacom 0003:056A:002A.0004: unknown main item tag 0x0
[   92.872232][ T5115] EXT4-fs (loop0): no journal found
[   92.879262][ T1107] wacom 0003:056A:002A.0004: Unknown device_type for 'HID 056a:002a'. Assuming pen.
[   92.900183][ T5115] EXT4-fs (loop0): can't get journal size
[   92.905071][ T1107] wacom 0003:056A:002A.0004: hidraw0: USB HID v0.05 Device [HID 056a:002a] on usb-dummy_hcd.4-1/input0
[   92.923505][ T1107] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:002A.0004/input/input6
[   92.946041][ T5115] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x0000000000000005,abort,,errors=continue. Quota mode: writeback.
[   93.045941][ T1107] usb 5-1: USB disconnect, device number 3
[   93.052384][ T4603] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   93.199864][ T5104] loop2: detected capacity change from 0 to 40427
[   93.290218][ T5104] F2FS-fs (loop2): invalid crc value
[   93.331491][ T4603] usb 4-1: Using ep0 maxpacket: 32
[   93.385495][ T5104] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   93.471684][ T4603] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   93.497642][ T5124] fido_id[5124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   93.601467][ T5104] F2FS-fs (loop2): Start checkpoint disabled!
[   93.672143][ T5104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   93.711865][ T4603] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[   93.720961][ T4603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.749973][ T4603] usb 4-1: Product: syz
[   93.766214][ T4603] usb 4-1: Manufacturer: syz
[   93.771047][ T4603] usb 4-1: SerialNumber: syz
[   93.802622][ T5135] loop0: detected capacity change from 0 to 128
[   93.850956][ T5135] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[   93.897546][ T5135] hpfs: filesystem error: improperly stopped
[   93.925207][ T4228] attempt to access beyond end of device
[   93.925207][ T4228] loop2: rw=2049, want=45104, limit=40427
[   93.926503][ T5135] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   93.945435][ T5135] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[   93.956791][ T5135] hpfs: You really don't want any checks? You are crazy...
[   93.970411][ T5135] hpfs: hpfs_map_sector(): read error
[   93.976087][ T5135] hpfs: code page support is disabled
[   93.977073][ T5118] loop1: detected capacity change from 0 to 32768
[   93.982701][ T5135] hpfs: hpfs_map_4sectors(): unaligned read
[   93.994422][ T5135] hpfs: hpfs_map_4sectors(): unaligned read
[   94.000363][ T5135] hpfs: filesystem error: unable to find root dir
[   94.021425][ T4264] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   94.051853][ T4603] usb 4-1: selecting invalid altsetting 1
[   94.188221][ T5118] XFS (loop1): Mounting V5 Filesystem
[   94.271637][ T4603] LME2510(C): Firmware Status: 1a 03 34 00 32 00
[   94.271724][ T4603] dvb_usb_lmedm04: probe of 4-1:2.0 failed with error -22
[   94.324706][ T5118] XFS (loop1): Ending clean mount
[   94.523736][ T4603] usb 4-1: USB disconnect, device number 3
[   94.545997][ T4196] XFS (loop1): Unmounting Filesystem
[   94.551855][ T4264] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[   94.563963][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.572478][ T4264] usb 5-1: Product: syz
[   94.576761][ T4264] usb 5-1: Manufacturer: syz
[   94.581683][ T4264] usb 5-1: SerialNumber: syz
[   94.588494][ T4264] usb 5-1: config 0 descriptor??
[   94.597740][ T5149] EXT4-fs (loop0): 1 truncate cleaned up
[   94.603535][ T5149] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.617545][ T5149] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.633755][ T4264] gspca_main: sq905c-2.14.0 probing 2770:9052
[   95.193567][   T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   95.510633][ T4264] usb 5-1: USB disconnect, device number 4
[   95.585462][   T23] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   95.601820][ T4603] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   95.619226][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[   95.643468][   T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[   95.663051][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.689109][   T23] usb 3-1: config 0 descriptor??
[   95.848101][ T5209] set_capacity_and_notify: 1 callbacks suppressed
[   95.848118][ T5209] loop0: detected capacity change from 0 to 128
[   95.916640][ T5209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[   95.926351][ T5209] System zones: 1-3, 19-19, 35-36
[   95.937498][ T5209] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none.
[   95.950444][ T5209] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.976324][ T5209] EXT4-fs warning (device loop0): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new)
[   95.989949][ T4603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.992030][ T5209] EXT4-fs warning (device loop0): ext4_group_extend:1852: can't read last block, resize aborted
[   96.001075][ T4603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.022137][ T4603] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   96.031460][ T4603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.045949][ T4603] usb 4-1: config 0 descriptor??
[   96.172288][   T23] wacom 0003:056A:0023.0005: unknown main item tag 0x2
[   96.200938][   T23] wacom 0003:056A:0023.0005: unknown main item tag 0x6
[   96.226377][   T23] wacom 0003:056A:0023.0005: unbalanced collection at end of report description
[   96.256872][   T23] wacom 0003:056A:0023.0005: parse failed
[   96.282475][   T23] wacom: probe of 0003:056A:0023.0005 failed with error -22
[   96.424393][   T23] usb 3-1: USB disconnect, device number 3
[   96.504527][ T4603] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[   96.523198][ T4603] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[   96.550758][ T4603] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[   96.568476][ T4603] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[   96.577434][ T4603] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[   96.607724][ T4603] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[   96.620255][ T4603] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[   96.672355][ T4603] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[   96.701609][ T4603] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints?
[   96.771435][    C1] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init
[   97.140838][ T1107] usb 4-1: USB disconnect, device number 4
[   97.225838][ T5258] tap0: tun_chr_ioctl cmd 2147767520
[   97.263883][ T5260] netlink: 232 bytes leftover after parsing attributes in process `syz.0.408'.
[   98.118611][ T5275] loop3: detected capacity change from 0 to 4096
[   98.239624][ T5275] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   98.288240][ T5275] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   98.345120][ T5275] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   98.368050][ T5264] loop0: detected capacity change from 0 to 32768
[   98.401744][ T5275] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   98.435854][ T5275] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   98.484260][ T5275] ntfs: volume version 3.1.
[   98.496680][ T5267] loop2: detected capacity change from 0 to 32768
[   98.551103][ T5275] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   98.571836][ T5275] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   98.627312][ T5275] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   98.667904][ T5264] XFS (loop0): Mounting V5 Filesystem
[   98.673916][ T5275] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   98.699906][ T5274] loop1: detected capacity change from 0 to 32768
[   98.746902][ T5267] XFS (loop2): Mounting V5 Filesystem
[   98.841626][ T5275] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[   98.962006][ T5299] syzkaller0: tun_chr_ioctl cmd 1074025692
[   99.035213][ T5264] XFS (loop0): Ending clean mount
[   99.063049][ T5264] XFS (loop0): Quotacheck needed: Please wait.
[   99.105302][ T5267] XFS (loop2): Starting recovery (logdev: internal)
[   99.304940][ T5267] XFS (loop2): Ending recovery (logdev: internal)
[   99.320295][ T5264] XFS (loop0): Quotacheck: Done.
[   99.616781][ T4201] XFS (loop2): Unmounting Filesystem
[   99.726157][ T4189] XFS (loop0): Unmounting Filesystem
[   99.942962][   T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  100.307390][ T5330] netlink: 52 bytes leftover after parsing attributes in process `syz.2.425'.
[  100.351548][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.391405][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  100.482740][   T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  100.506084][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  100.541105][   T23] usb 4-1: SerialNumber: syz
[  100.624205][ T5334] loop1: detected capacity change from 0 to 8192
[  100.709804][ T5342] loop0: detected capacity change from 0 to 24
[  100.885294][   T23] usb 4-1: 0:2 : does not exist
[  100.974319][   T23] usb 4-1: USB disconnect, device number 5
[  101.224644][ T5347] loop0: detected capacity change from 0 to 1024
[  101.314232][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.647613][ T5360] netlink: 452 bytes leftover after parsing attributes in process `syz.3.445'.
[  101.718030][ T5364] loop4: detected capacity change from 0 to 512
[  101.757691][ T5364] EXT4-fs (loop4): Ignoring removed bh option
[  101.864854][ T5364] EXT4-fs (loop4): 1 truncate cleaned up
[  101.870959][ T5364] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,errors=remount-ro,usrjquota=,. Quota mode: none.
[  101.964314][ T5364] EXT4-fs (loop4): shut down requested (1)
[  102.549593][ T5401] loop2: detected capacity change from 0 to 512
[  102.682153][ T5401] EXT4-fs error (device loop2): ext4_fill_super:4872: inode #2: comm syz.2.464: inode has both inline data and extents flags
[  102.706476][ T5401] EXT4-fs (loop2): get root inode failed
[  102.731472][ T4466] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  102.746872][ T5401] EXT4-fs (loop2): mount failed
[  102.747557][ T5379] loop1: detected capacity change from 0 to 40427
[  102.804700][ T5379] F2FS-fs (loop1): invalid crc value
[  102.831601][ T5379] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  102.840200][ T5401] 9p: Unknown Cache mode n
[  102.971753][ T5406] loop2: detected capacity change from 0 to 512
[  102.991595][ T4466] usb 4-1: Using ep0 maxpacket: 8
[  103.054553][ T5406] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback.
[  103.082439][ T5394] loop4: detected capacity change from 0 to 40427
[  103.085463][ T5379] F2FS-fs (loop1): Start checkpoint disabled!
[  103.092485][ T5406] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.122070][ T5394] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[  103.153048][ T5379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  103.180019][ T5394] F2FS-fs (loop4): invalid crc value
[  103.246443][ T5394] F2FS-fs (loop4): Found nat_bits in checkpoint
[  103.271677][ T4466] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  103.301001][ T4466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.303382][    T9] attempt to access beyond end of device
[  103.303382][    T9] loop1: rw=1, want=45104, limit=40427
[  103.339894][ T4466] usb 4-1: Product: syz
[  103.343204][    T9] attempt to access beyond end of device
[  103.343204][    T9] loop1: rw=2049, want=45112, limit=40427
[  103.350036][ T4466] usb 4-1: Manufacturer: syz
[  103.380976][ T4466] usb 4-1: SerialNumber: syz
[  103.393007][ T4466] usb 4-1: config 0 descriptor??
[  103.411528][ T5394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  103.434599][ T4466] gspca_main: sq930x-2.14.0 probing 2770:930c
[  103.550194][ T4193] attempt to access beyond end of device
[  103.550194][ T4193] loop4: rw=2049, want=45104, limit=40427
[  103.572276][ T5415] loop2: detected capacity change from 0 to 4096
[  103.706525][ T5416] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.779019][ T5415] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean
[  103.795201][ T5415] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean
[  103.924386][ T5419] loop1: detected capacity change from 0 to 64
[  103.988984][ T5421] program syz.2.469 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  104.062538][ T4601] Bluetooth: hci5: command 0x1003 tx timeout
[  104.075510][ T4195] Bluetooth: hci5: sending frame failed (-49)
[  104.092753][ T5419] attempt to access beyond end of device
[  104.092753][ T5419] loop1: rw=0, want=414, limit=64
[  104.140647][ T5419] Trying to free block not in datazone
[  104.229759][ T5425] attempt to access beyond end of device
[  104.229759][ T5425] loop1: rw=0, want=414, limit=64
[  104.291557][ T4466] gspca_sq930x: ucbus_write failed -71
[  104.338499][ T5425] Buffer I/O error on dev loop1, logical block 206, async page read
[  104.347610][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  104.347624][   T26] audit: type=1800 audit(1780706463.711:5): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.466" name="file1" dev="loop1" ino=5 res=0 errno=0
[  104.435649][ T5437] loop2: detected capacity change from 0 to 1024
[  104.501519][ T5437] EXT4-fs (loop2): Ignoring removed orlov option
[  104.541701][ T4466] gspca_sq930x: Sensor ov9630 not yet treated
[  104.548005][ T4466] sq930x: probe of 4-1:0.0 failed with error -22
[  104.558038][ T5437] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,errors=remount-ro,orlov,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none.
[  104.640497][ T4466] usb 4-1: USB disconnect, device number 6
[  104.654278][ T5450] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  104.936944][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  104.957660][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.993724][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.019384][ T5448] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  105.046262][    C0] Illegal XDP return value 16128, expect packet loss!
[  105.147511][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'.
[  105.336457][ T5472] loop2: detected capacity change from 0 to 2048
[  105.379779][ T5472] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  105.405508][ T5472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.843736][ T5494] program syz.4.500 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.163694][   T23] Bluetooth: hci5: command 0x1001 tx timeout
[  106.191750][ T4195] Bluetooth: hci5: sending frame failed (-49)
[  106.274467][ T5510] set_capacity_and_notify: 1 callbacks suppressed
[  106.274483][ T5510] loop2: detected capacity change from 0 to 512
[  106.292935][ T5504] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  106.403504][ T5504] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  106.431365][ T5510] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[  106.451669][ T5510] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.456404][ T5504] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  106.491446][ T5504] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  106.554631][ T5504] ntfs: volume version 3.1.
[  106.562979][ T5510] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #12: comm syz.2.507: directory missing '.'
[  106.581891][ T5510] EXT4-fs (loop2): Remounting filesystem read-only
[  106.804356][ T5520] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  106.862011][ T5520] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x42, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  106.913717][ T5523] loop3: detected capacity change from 0 to 512
[  106.995929][  T151] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  107.001084][ T5507] loop1: detected capacity change from 0 to 32768
[  107.013948][  T151] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  107.031064][  T151] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  107.059204][ T5523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  107.139444][ T5523] EXT4-fs (loop3): 1 truncate cleaned up
[  107.197223][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.260948][ T5530] loop2: detected capacity change from 0 to 2048
[  107.335023][ T5530] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  107.350022][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'.
[  107.414093][ T5533] netlink: 'syz.4.513': attribute type 25 has an invalid length.
[  107.422594][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[  107.436659][ T5530] EXT4-fs (loop2): shut down requested (1)
[  107.589289][ T5539] loop4: detected capacity change from 0 to 4096
[  107.723996][ T5539] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  107.910059][ T5539] fs-verity: sha256 using implementation "sha256-avx2"
[  107.979389][ T5546] loop3: detected capacity change from 0 to 8192
[  108.065098][ T5546] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  108.095499][ T5546] REISERFS (device loop3): using ordered data mode
[  108.102929][ T5546] reiserfs: using flush barriers
[  108.154545][ T5546] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  108.174108][ T5546] REISERFS (device loop3): checking transaction log (loop3)
[  108.210120][ T5562] tap0: tun_chr_ioctl cmd 1074812118
[  108.222243][ T4601] Bluetooth: hci5: command 0x1009 tx timeout
[  108.458352][ T5546] REISERFS (device loop3): Using tea hash to sort names
[  108.487212][ T5546] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  108.818532][ T5586] netlink: 'syz.4.537': attribute type 25 has an invalid length.
[  108.827223][ T5586] netlink: 'syz.4.537': attribute type 7 has an invalid length.
[  108.841635][ T5586] netlink: 164 bytes leftover after parsing attributes in process `syz.4.537'.
[  108.966501][ T5590] loop4: detected capacity change from 0 to 256
[  108.999574][ T5592] loop3: detected capacity change from 0 to 512
[  109.007128][ T5590] exfat: Deprecated parameter 'namecase'
[  109.045142][ T5590] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  109.178289][ T5594] loop2: detected capacity change from 0 to 256
[  109.586967][ T5612] loop4: detected capacity change from 0 to 512
[  109.733813][ T5612] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  109.771448][ T5612] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.883304][ T5623] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  110.100957][ T5617] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  110.247389][ T5617] ntfs3: loop2: failed to convert "0080" to macgaelic
[  110.321284][ T5617] ntfs3: loop2: failed to convert name for inode 1e.
[  110.474544][ T1125] hfsplus: b-tree write err: -5, ino 8
[  110.785087][ T5662] tap0: tun_chr_ioctl cmd 21731
[  111.000799][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'.
[  111.199819][ T5686] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.337573][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'.
[  111.364443][ T5671] syz.4.577 (5671) used greatest stack depth: 20144 bytes left
[  111.625701][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'.
[  111.920631][ T5715] input: syz1 as /devices/virtual/input/input9
[  112.149535][ T5735] set_capacity_and_notify: 4 callbacks suppressed
[  112.149547][ T5735] loop1: detected capacity change from 0 to 2048
[  112.171973][ T4264] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  112.242285][ T5735] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,acl,mb_optimize_scan=0x0000000000000000,journal_dev=0x0000000000000801,quota,noblock_validity,,errors=continue. Quota mode: writeback.
[  112.264531][ T5735] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.293898][ T5735] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.604: bg 0: block 345: padding at end of block bitmap is not set
[  112.313378][ T5735] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  112.351480][ T4466] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  112.365784][ T4601] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.411615][ T4264] usb 4-1: Using ep0 maxpacket: 8
[  112.531777][ T4264] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  112.556702][ T5744] loop0: detected capacity change from 0 to 64
[  112.565105][ T5742] netlink: 'syz.1.606': attribute type 11 has an invalid length.
[  112.573674][ T5742] netlink: 'syz.1.606': attribute type 11 has an invalid length.
[  112.581835][ T5742] netlink: 2704 bytes leftover after parsing attributes in process `syz.1.606'.
[  112.591933][ T4466] usb 5-1: Using ep0 maxpacket: 32
[  112.595233][ T5744] hfs: part requires an argument
[  112.611714][ T5744] hfs: unable to parse mount options
[  112.712902][ T4264] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  112.732665][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.761749][ T4264] usb 4-1: Product: syz
[  112.766161][ T4264] usb 4-1: Manufacturer: syz
[  112.781855][ T4601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.785815][ T4264] usb 4-1: SerialNumber: syz
[  112.809012][ T4601] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  112.839616][ T4601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.860794][ T4601] usb 3-1: config 0 descriptor??
[  112.885451][ T4466] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  112.905086][ T4466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.933919][ T4466] usb 5-1: Product: syz
[  112.938179][ T4466] usb 5-1: Manufacturer: syz
[  112.958000][ T4466] usb 5-1: SerialNumber: syz
[  113.077552][ T5744] loop0: detected capacity change from 0 to 32768
[  113.102466][ T5744] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.607 (5744)
[  113.145035][ T5744] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  113.161763][ T5744] BTRFS info (device loop0): using free space tree
[  113.168425][ T5744] BTRFS info (device loop0): has skinny extents
[  113.283999][ T4264] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[  113.317093][ T4264] usb 4-1: USB disconnect, device number 7
[  113.366516][ T5744] BTRFS info (device loop0): enabling ssd optimizations
[  113.390014][ T4601] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  113.427558][ T4601] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input10
[  113.566319][ T4601] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  113.701836][   T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  113.891569][ T4466] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[  113.961553][ T4466] usb 5-1: 2:1: cannot get freq (v2/v3): err -71
[  113.982210][   T23] usb 2-1: Using ep0 maxpacket: 32
[  113.994652][ T4466] usb 5-1: 2:1: cannot set freq 44100 (v2/v3): err -71
[  114.123471][   T23] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  114.147029][ T4466] usb 5-1: USB disconnect, device number 5
[  114.149556][   T23] usb 2-1: config 0 has no interface number 0
[  114.165257][   T23] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  114.348262][ T5790] netlink: 'syz.3.615': attribute type 1 has an invalid length.
[  114.358963][ T5790] netlink: 152 bytes leftover after parsing attributes in process `syz.3.615'.
[  114.372277][ T4264] usb 3-1: USB disconnect, device number 4
[  114.401944][   T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  114.441988][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.454531][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.461096][   T23] usb 2-1: Product: syz
[  114.548477][   T23] usb 2-1: Manufacturer: syz
[  114.571775][   T23] usb 2-1: SerialNumber: syz
[  114.603827][   T23] usb 2-1: config 0 descriptor??
[  114.651976][ T5771] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  114.879039][ T5771] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  115.095816][ T5822] loop2: detected capacity change from 0 to 1024
[  115.220851][ T5822] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  115.269301][ T5822] EXT4-fs (loop2): shut down requested (0)
[  115.407757][ T5814] loop3: detected capacity change from 0 to 32768
[  115.445093][ T5835] loop4: detected capacity change from 0 to 256
[  115.534684][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  115.534711][   T26] audit: type=1800 audit(1780706474.901:6): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.626" name="file1" dev="loop3" ino=4 res=0 errno=0
[  115.562909][   T23] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  115.612547][   T23] asix: probe of 2-1:0.188 failed with error -71
[  115.639135][   T23] usb 2-1: USB disconnect, device number 2
[  115.835714][ T5840] loop4: detected capacity change from 0 to 512
[  115.876088][ T5840] EXT4-fs (loop4): Ignoring removed nobh option
[  115.921524][ T5840] EXT4-fs (loop4): Ignoring removed nobh option
[  115.952293][ T5840] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  115.974772][ T5844] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  115.987696][ T5840] EXT4-fs (loop4): 1 truncate cleaned up
[  116.023839][ T5847] loop2: detected capacity change from 0 to 256
[  116.030938][ T5840] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,usrjquota=,nobh,nobh,i_version,,errors=continue. Quota mode: none.
[  116.089702][ T5847] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  116.296994][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'.
[  116.348018][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'.
[  116.366217][ T5854] netlink: 'syz.3.645': attribute type 19 has an invalid length.
[  117.349976][ T5911] loop3: detected capacity change from 0 to 256
[  117.489030][ T5911] FAT-fs (loop3): Directory bread(block 64) failed
[  117.518805][ T5919] loop4: detected capacity change from 0 to 1024
[  117.528782][ T5911] FAT-fs (loop3): Directory bread(block 65) failed
[  117.550896][ T5911] FAT-fs (loop3): Directory bread(block 66) failed
[  117.566499][ T5911] FAT-fs (loop3): Directory bread(block 67) failed
[  117.574642][ T5911] FAT-fs (loop3): Directory bread(block 68) failed
[  117.582625][ T5911] FAT-fs (loop3): Directory bread(block 69) failed
[  117.587122][ T5923] program syz.2.676 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  117.589456][ T5911] FAT-fs (loop3): Directory bread(block 70) failed
[  117.606535][ T5911] FAT-fs (loop3): Directory bread(block 71) failed
[  117.613544][ T5911] FAT-fs (loop3): Directory bread(block 72) failed
[  117.620392][ T5911] FAT-fs (loop3): Directory bread(block 73) failed
[  117.736942][ T1125] hfsplus: b-tree write err: -5, ino 25
[  117.786346][ T1125] hfsplus: b-tree write err: -5, ino 4
[  117.804643][ T1125] hfsplus: b-tree write err: -5, ino 2
[  118.217255][ T5936] loop0: detected capacity change from 0 to 4096
[  118.349232][ T5951] loop3: detected capacity change from 0 to 2048
[  118.889985][ T5975] loop3: detected capacity change from 0 to 512
[  118.953770][ T1125] wlan1: Trigger new scan to find an IBSS to join
[  118.984424][ T5975] EXT4-fs (loop3): Ignoring removed orlov option
[  118.999264][ T5975] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  119.022230][ T5975] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.697: corrupted in-inode xattr
[  119.070244][ T5975] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.697: couldn't read orphan inode 15 (err -117)
[  119.084667][ T5975] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  119.112203][ T4598] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  119.415781][ T5979] loop0: detected capacity change from 0 to 32768
[  119.501708][ T4598] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  119.531465][ T4598] usb 5-1: config 0 interface 0 has no altsetting 0
[  119.711999][ T4598] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  119.732460][ T4598] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  119.742427][ T4598] usb 5-1: Product: syz
[  119.761655][ T4598] usb 5-1: Manufacturer: syz
[  119.766333][ T4598] usb 5-1: SerialNumber: syz
[  119.775633][ T5992] loop3: detected capacity change from 0 to 1024
[  119.788756][ T4598] usb 5-1: config 0 descriptor??
[  119.822193][ T5970] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  119.854408][ T4598] usb 5-1: selecting invalid altsetting 0
[  119.982670][ T5985] loop1: detected capacity change from 0 to 32768
[  120.159091][ T5970] usb 5-1: selecting invalid altsetting 0
[  120.189378][ T5970] usb 5-1: 0:0: usb_set_interface failed (-22)
[  120.212039][ T5985] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  120.229905][ T5970] usb 5-1: selecting invalid altsetting 0
[  120.321889][ T5970] usb 5-1: 0:0: usb_set_interface failed (-22)
[  120.359228][ T5970] usb 5-1: selecting invalid altsetting 0
[  120.376748][ T6008] loop3: detected capacity change from 0 to 64
[  120.401974][ T4233] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  120.415021][ T5970] usb 5-1: 0:0: usb_set_interface failed (-22)
[  120.431925][ T5970] usb 5-1: selecting invalid altsetting 0
[  120.442029][ T5970] usb 5-1: 0:0: usb_set_interface failed (-22)
[  120.461277][ T5970] usb 5-1: selecting invalid altsetting 0
[  120.471165][ T4196] ocfs2: Unmounting device (7,1) on (node local)
[  120.475330][ T5970] usb 5-1: 0:0: usb_set_interface failed (-22)
[  120.536235][ T6008] MINIX-fs: mounting file system with errors, running fsck is recommended
[  120.557896][   T23] usb 5-1: USB disconnect, device number 6
[  120.576326][ T6008] Trying to free block not in datazone
[  120.787112][ T4233] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  120.816205][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.864615][ T4233] usb 3-1: config 0 descriptor??
[  121.156492][ T4233] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[  121.170332][ T4233] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  121.371454][ T4233] [drm:udl_init] *ERROR* Selecting channel failed
[  121.468273][ T4233] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  121.495141][ T4233] [drm] Initialized udl on minor 2
[  121.497440][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.721'.
[  121.543216][ T4233] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  121.558471][ T6036] device bond0 entered promiscuous mode
[  121.584759][ T6036] device bond_slave_0 entered promiscuous mode
[  121.586314][ T4233] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  121.605174][ T6036] device bond_slave_1 entered promiscuous mode
[  121.649926][ T6036] device bond0 left promiscuous mode
[  121.659946][ T4233] usb 3-1: USB disconnect, device number 5
[  121.675279][ T1346] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  121.694605][ T1346] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  121.705479][ T1346] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  121.729692][ T6036] device bond_slave_0 left promiscuous mode
[  121.761633][ T6036] device bond_slave_1 left promiscuous mode
[  121.833528][ T6019] loop1: detected capacity change from 0 to 40427
[  121.844407][ T6040] sp0: Synchronizing with TNC
[  121.956673][ T6045] EXT4-fs (loop0): Ignoring removed orlov option
[  121.978130][ T6019] F2FS-fs (loop1): inline encryption not supported
[  121.989472][ T6019] F2FS-fs (loop1): invalid crc value
[  121.995460][    T9] wlan1: Trigger new scan to find an IBSS to join
[  122.034083][ T6019] F2FS-fs (loop1): Found nat_bits in checkpoint
[  122.076614][ T6045] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,errors=remount-ro,orlov,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none.
[  122.190291][ T6019] F2FS-fs (loop1): Start checkpoint disabled!
[  122.280687][ T6019] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  122.469438][ T6070] set_capacity_and_notify: 1 callbacks suppressed
[  122.469455][ T6070] loop3: detected capacity change from 0 to 22
[  122.493740][    T9] attempt to access beyond end of device
[  122.493740][    T9] loop1: rw=2049, want=45104, limit=40427
[  122.542536][ T6070] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  122.566790][ T6070] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  122.581814][ T6019] attempt to access beyond end of device
[  122.581814][ T6019] loop1: rw=2049, want=53384, limit=40427
[  123.012682][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.739'.
[  123.178726][ T6088] loop2: detected capacity change from 0 to 256
[  123.202399][ T6087] loop0: detected capacity change from 0 to 2048
[  124.085752][ T6118] loop2: detected capacity change from 0 to 512
[  124.126717][ T6125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.760'.
[  124.268761][ T6118] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  124.340521][ T6118] EXT4-fs (loop2): 1 truncate cleaned up
[  124.354752][ T6118] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none.
[  124.639601][   T26] audit: type=1326 audit(1780706484.001:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  124.728945][   T26] audit: type=1326 audit(1780706484.011:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  124.830455][   T26] audit: type=1326 audit(1780706484.021:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  124.951272][   T26] audit: type=1326 audit(1780706484.021:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  125.022100][    T9] wlan1: Trigger new scan to find an IBSS to join
[  125.047311][   T26] audit: type=1326 audit(1780706484.021:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  125.107624][ T6162] tipc: Started in network mode
[  125.118192][ T6162] tipc: Node identity ac14140f, cluster identity 4711
[  125.135650][   T26] audit: type=1326 audit(1780706484.021:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  125.175746][ T6162] tipc: New replicast peer: 255.255.255.255
[  125.184302][ T6162] tipc: Enabled bearer <udp:syz2>, priority 10
[  125.190729][   T26] audit: type=1326 audit(1780706484.021:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  125.216480][   T26] audit: type=1326 audit(1780706484.021:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  125.277834][   T26] audit: type=1326 audit(1780706484.021:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  125.317749][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'.
[  125.349121][   T26] audit: type=1326 audit(1780706484.021:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.4.770" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3e173e59 code=0x7ffc0000
[  125.452802][ T6169] loop1: detected capacity change from 0 to 4096
[  125.601699][ T6169] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  125.998265][ T4586] wlan1: Creating new IBSS network, BSSID 0a:ff:dc:3d:a7:cb
[  126.142992][ T4466] Bluetooth: hci4: command 0x0407 tx timeout
[  126.312113][ T4596] tipc: Node number set to 2886997007
[  126.334011][ T6212] loop4: detected capacity change from 0 to 16
[  126.431178][ T6212] erofs: (device loop4): mounted with root inode @ nid 36.
[  126.520176][ T6212] attempt to access beyond end of device
[  126.520176][ T6212] loop4: rw=0, want=34359738488, limit=16
[  126.550218][ T6221] loop1: detected capacity change from 0 to 512
[  126.586837][ T6224] loop0: detected capacity change from 0 to 256
[  126.635861][ T6226] loop2: detected capacity change from 0 to 256
[  126.693077][ T6224] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  126.844004][ T6221] EXT4-fs (loop1): 1 truncate cleaned up
[  126.896674][ T6221] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  126.951943][ T6221] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.169258][ T6243] netlink: 'syz.0.812': attribute type 5 has an invalid length.
[  128.151528][ T4233] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  128.233682][ T6246] loop4: detected capacity change from 0 to 32768
[  128.431493][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  128.551689][ T4233] usb 3-1: unable to get BOS descriptor or descriptor too short
[  128.610136][ T6266] loop3: detected capacity change from 0 to 32768
[  128.651589][ T4233] usb 3-1: config 63 has an invalid interface number: 66 but max is 0
[  128.669075][ T4233] usb 3-1: config 63 has an invalid descriptor of length 184, skipping remainder of the config
[  128.682335][ T6266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.820 (6266)
[  128.715821][ T4233] usb 3-1: config 63 has no interface number 0
[  128.749733][ T4233] usb 3-1: config 63 interface 66 has no altsetting 0
[  128.777822][ T6266] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  128.827825][ T6266] BTRFS info (device loop3): setting nodatasum
[  128.861939][   T23] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  128.881735][ T6266] BTRFS info (device loop3): force zlib compression, level 3
[  128.889233][ T6266] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  128.899870][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.926527][ T4233] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  128.937178][   T23] usb 2-1: config 0 descriptor??
[  128.945261][ T6276] loop0: detected capacity change from 0 to 32768
[  128.951456][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.955529][ T6266] BTRFS info (device loop3): use lzo compression, level 0
[  128.991087][ T4233] usb 3-1: Product: syz
[  128.998125][ T6266] BTRFS info (device loop3): turning on flush-on-commit
[  129.015757][ T6266] BTRFS info (device loop3): enabling auto defrag
[  129.015851][ T4233] usb 3-1: Manufacturer: syz
[  129.027709][ T6266] BTRFS info (device loop3): max_inline at 4096
[  129.052296][ T6266] BTRFS info (device loop3): using free space tree
[  129.058859][ T6266] BTRFS info (device loop3): has skinny extents
[  129.091650][ T4233] usb 3-1: SerialNumber: syz
[  129.126740][ T6276] XFS (loop0): Mounting V5 Filesystem
[  129.185812][ T6266] BTRFS info (device loop3): enabling ssd optimizations
[  129.251974][   T23] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[  129.271125][   T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  129.368090][ T6276] XFS (loop0): Ending clean mount
[  129.393779][ T6276] XFS (loop0): Quotacheck needed: Please wait.
[  129.453176][ T6292] loop4: detected capacity change from 0 to 32768
[  129.472216][   T23] [drm:udl_init] *ERROR* Selecting channel failed
[  129.507138][   T23] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  129.518244][   T23] [drm] Initialized udl on minor 2
[  129.534823][ T6276] XFS (loop0): Quotacheck: Done.
[  129.546110][   T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  129.566159][ T4233] uvcvideo 3-1:63.66: Found Unit with invalid ID 0
[  129.571655][   T23] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  129.589317][ T4233] usb 3-1: Found UVC 0.07 device syz (174f:8acf)
[  129.605471][   T23] usb 2-1: USB disconnect, device number 3
[  129.607580][ T6292] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.825 (6292)
[  129.631780][ T4233] usb 3-1: No valid video chain found.
[  129.669894][ T4233] usb 3-1: USB disconnect, device number 6
[  129.704161][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  129.724221][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  129.755490][ T1107] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  129.924286][ T4189] XFS (loop0): Unmounting Filesystem
[  130.000937][ T6292] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  130.071586][ T6292] BTRFS info (device loop4): using free space tree
[  130.079314][ T6292] BTRFS info (device loop4): has skinny extents
[  130.657928][ T6292] BTRFS info (device loop4): enabling ssd optimizations
[  131.036383][ T6339] loop3: detected capacity change from 0 to 131072
[  131.127898][ T6339] F2FS-fs (loop3): invalid crc value
[  131.202019][ T6339] F2FS-fs (loop3): Found nat_bits in checkpoint
[  131.291935][ T6339] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  131.357851][ T6378] device erspan0 entered promiscuous mode
[  131.999106][ T6365] loop1: detected capacity change from 0 to 32768
[  132.141541][ T6365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.832 (6365)
[  132.199879][ T6365] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  132.237311][ T6365] BTRFS info (device loop1): setting nodatasum
[  132.278226][ T6365] BTRFS info (device loop1): force zlib compression, level 3
[  132.306709][ T6365] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  132.361775][ T6365] BTRFS info (device loop1): use lzo compression, level 0
[  132.369178][ T6365] BTRFS info (device loop1): turning on flush-on-commit
[  132.421529][ T6365] BTRFS info (device loop1): enabling auto defrag
[  132.428128][ T6365] BTRFS info (device loop1): max_inline at 4096
[  132.466940][ T6365] BTRFS info (device loop1): using free space tree
[  132.560090][ T6365] BTRFS info (device loop1): has skinny extents
[  132.881599][ T4233] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  132.918578][ T6365] BTRFS info (device loop1): enabling ssd optimizations
[  132.944776][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.951161][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.068571][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  133.068589][   T26] audit: type=1800 audit(1780706492.431:28): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.832" name="file1" dev="loop1" ino=260 res=0 errno=0
[  133.144522][ T6453] program syz.2.857 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.419665][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.439942][ T4233] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  133.451586][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.458901][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.467398][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.467719][ T4233] usb 5-1: Product: syz
[  133.485193][ T4233] usb 5-1: Manufacturer: syz
[  133.488540][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.489819][ T4233] usb 5-1: SerialNumber: syz
[  133.507902][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.528146][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.549059][ T4233] usb 5-1: config 0 descriptor??
[  133.551628][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.579791][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.600312][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.602772][ T4233] ch341 5-1:0.0: ch341-uart converter detected
[  133.619103][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.637298][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.651842][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.669500][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.687625][ T6461] binder: 6460:6461 ioctl 4020ae46 7f642f634fc0 returned -22
[  133.850968][ T6455] loop0: detected capacity change from 0 to 32768
[  133.999892][ T6455] XFS (loop0): Mounting V5 Filesystem
[  134.111792][ T6455] XFS (loop0): Ending clean mount
[  134.142073][ T1107] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  134.264072][ T4233] usb 5-1: failed to send control message: -71
[  134.280905][ T4233] ch341-uart: probe of ttyUSB0 failed with error -71
[  134.304539][ T4189] XFS (loop0): Unmounting Filesystem
[  134.337273][ T4233] usb 5-1: USB disconnect, device number 7
[  134.358857][ T4233] ch341 5-1:0.0: device disconnected
[  134.386550][ T1107] usb 4-1: Using ep0 maxpacket: 8
[  134.549568][ T6494] loop1: detected capacity change from 0 to 1024
[  134.593515][ T1107] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  134.601764][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  134.618902][ T1107] usb 4-1: config 0 has no interface number 0
[  134.632343][ T1107] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.657135][ T1107] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  134.666600][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.691074][ T1107] usb 4-1: config 0 descriptor??
[  134.704258][ T1125] hfsplus: b-tree write err: -5, ino 25
[  134.710627][ T1125] hfsplus: b-tree write err: -5, ino 4
[  134.716879][ T1125] hfsplus: b-tree write err: -5, ino 2
[  134.743936][ T1107] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  134.768812][ T6496] loop0: detected capacity change from 0 to 16
[  134.834959][ T6496] erofs: (device loop0): mounted with root inode @ nid 36.
[  134.898881][   T26] audit: type=1800 audit(1780706494.261:29): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.872" name="file1" dev="loop0" ino=86 res=0 errno=0
[  135.030988][ T4598] usb 4-1: USB disconnect, device number 8
[  135.191409][   T23] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  135.200542][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.241441][   T23] usb 3-1: Product: syz
[  135.254694][   T23] usb 3-1: Manufacturer: syz
[  135.265599][   T23] usb 3-1: SerialNumber: syz
[  135.282730][   T23] usb 3-1: config 0 descriptor??
[  135.343623][   T23] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 007
[  135.505881][ T6524] loop4: detected capacity change from 0 to 8192
[  135.532779][ T6386] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  135.565639][ T6524] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  135.612441][ T6524] REISERFS (device loop4): using ordered data mode
[  135.629457][ T6524] reiserfs: using flush barriers
[  135.640897][ T6524] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  135.702737][ T6524] REISERFS (device loop4): checking transaction log (loop4)
[  135.720273][ T6524] REISERFS (device loop4): Using r5 hash to sort names
[  135.748337][ T6524] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  135.771637][   T23]  (null): failure reading functionality
[  135.858953][   T23] i2c i2c-1: connected i2c-tiny-usb device
[  135.901827][ T6386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  135.929632][ T6386] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  135.956305][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'.
[  135.969084][ T6386] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  135.975657][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'.
[  135.980921][ T6386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.005169][ T6386] usb 2-1: config 0 descriptor??
[  136.088646][   T23] usb 3-1: USB disconnect, device number 7
[  136.485398][ T6386] hid-alps 0003:044E:120C.0008: unknown main item tag 0x0
[  136.493912][ T6386] hid-alps 0003:044E:120C.0008: unexpected long global item
[  136.509266][ T6386] hid-alps 0003:044E:120C.0008: parse failed
[  136.515896][ T6386] hid-alps: probe of 0003:044E:120C.0008 failed with error -22
[  136.526066][ T4466] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  136.608741][ T6562] block nbd3: not configured, cannot reconfigure
[  136.668814][ T6564] trusted_key: encrypted_key: keyword 'upäate' not recognized
[  136.692609][ T4601] usb 2-1: USB disconnect, device number 4
[  136.915639][ T4466] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  136.928240][ T4466] usb 5-1: config 0 has no interface number 0
[  136.947339][ T4466] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  136.978948][ T4466] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.001429][ T4466] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.18
[  137.020724][ T4466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.039570][ T4466] usb 5-1: config 0 descriptor??
[  137.490075][   T26] audit: type=1326 audit(1780706496.851:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64313dbe59 code=0x7ffc0000
[  137.533321][ T4466] holtek_mouse 0003:04D9:A070.0009: unknown main item tag 0x0
[  137.548134][ T6585] loop3: detected capacity change from 0 to 512
[  137.555279][ T4466] holtek_mouse 0003:04D9:A070.0009: unknown main item tag 0x0
[  137.569318][ T4466] holtek_mouse 0003:04D9:A070.0009: unknown main item tag 0x0
[  137.578497][   T26] audit: type=1326 audit(1780706496.911:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64313dbe59 code=0x7ffc0000
[  137.603777][ T4466] holtek_mouse 0003:04D9:A070.0009: unknown main item tag 0x0
[  137.611714][ T4466] holtek_mouse 0003:04D9:A070.0009: unknown main item tag 0x0
[  137.620735][   T26] audit: type=1326 audit(1780706496.911:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64313dbe59 code=0x7ffc0000
[  137.646097][ T4466] holtek_mouse 0003:04D9:A070.0009: hidraw0: USB HID v0.00 Device [HID 04d9:a070] on usb-dummy_hcd.4-1/input1
[  137.662637][   T26] audit: type=1326 audit(1780706496.911:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f64313dbe59 code=0x7ffc0000
[  137.687278][   T26] audit: type=1326 audit(1780706496.911:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f64313dbbc2 code=0x7ffc0000
[  137.751963][   T26] audit: type=1326 audit(1780706496.911:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f643139c68e code=0x7ffc0000
[  137.780559][ T6585] EXT4-fs (loop3): 1 truncate cleaned up
[  137.796945][ T6585] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback.
[  137.819023][ T4466] usb 5-1: USB disconnect, device number 8
[  137.895563][ T6590] fido_id[6590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  137.918827][   T26] audit: type=1326 audit(1780706496.911:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f64313dbc87 code=0x7ffc0000
[  137.952000][ T6594] netlink: 104 bytes leftover after parsing attributes in process `syz.1.916'.
[  137.968610][   T26] audit: type=1326 audit(1780706496.911:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f643139c68e code=0x7ffc0000
[  138.031199][ T6598] loop2: detected capacity change from 0 to 128
[  138.086114][   T26] audit: type=1326 audit(1780706496.911:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64313dbaeb code=0x7ffc0000
[  138.110724][   T26] audit: type=1326 audit(1780706496.971:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f643139c68e code=0x7ffc0000
[  138.134630][    C1] vkms_vblank_simulate: vblank timer overrun
[  138.171431][   T26] audit: type=1326 audit(1780706496.971:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f643139c68e code=0x7ffc0000
[  138.181835][ T6598] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  138.195420][    C1] vkms_vblank_simulate: vblank timer overrun
[  138.217255][ T6602] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  138.257182][ T6602] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  138.280754][   T26] audit: type=1326 audit(1780706497.021:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f64313dacc7 code=0x7ffc0000
[  138.286523][ T6598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.331706][ T6602] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  138.338323][ T6602] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  138.365169][ T6602] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  138.391563][   T26] audit: type=1326 audit(1780706497.021:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f64313dd0ca code=0x7ffc0000
[  138.410796][ T6602] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  138.415782][    C1] vkms_vblank_simulate: vblank timer overrun
[  138.439243][ T6602] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  138.448119][ T6602] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  138.470285][   T26] audit: type=1326 audit(1780706497.201:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f643139c68e code=0x7ffc0000
[  138.486919][ T6602] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  138.528895][ T6604] binder: 6603:6604 ioctl c0306201 0 returned -14
[  138.541988][   T26] audit: type=1326 audit(1780706497.201:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f64313da297 code=0x7ffc0000
[  138.551625][ T6602] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  138.566059][    C1] vkms_vblank_simulate: vblank timer overrun
[  138.590280][   T26] audit: type=1326 audit(1780706497.201:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f643139c68e code=0x7ffc0000
[  138.615120][    C1] vkms_vblank_simulate: vblank timer overrun
[  138.730839][   T26] audit: type=1326 audit(1780706497.201:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64313dbaeb code=0x7ffc0000
[  138.767736][ T6610] loop4: detected capacity change from 0 to 16
[  138.792328][ T6610] erofs: (device loop4): mounted with root inode @ nid 36.
[  138.851382][   T26] audit: type=1326 audit(1780706497.201:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.914" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f643139c68e code=0x7ffc0000
[  138.924866][ T6600] loop1: detected capacity change from 0 to 32768
[  139.039028][ T6600] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  139.161882][ T6386] kernel write not supported for file /uinput (pid: 6386 comm: kworker/0:20)
[  139.235037][ T4196] ocfs2: Unmounting device (7,1) on (node local)
[  139.364356][ T6638] netlink: 56 bytes leftover after parsing attributes in process `syz.4.936'.
[  139.748082][ T6652] loop4: detected capacity change from 0 to 1024
[  139.798726][ T6655] loop0: detected capacity change from 0 to 1024
[  139.818580][ T6652] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  139.835964][ T6652] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  139.967642][ T6655] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.000506][ T6652] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc=0x0000000000000007,noblock_validity,delalloc,quota,errors=remount-ro,nomblk_io_submit,dioread_nolock,mb_optimize_scan=0x0000000000000000,. Quota mode: writeback.
[  140.055935][ T6655] EXT4-fs (loop0): shut down requested (0)
[  140.183662][ T6652] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.287639][ T6652] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.944: bg 0: block 112: padding at end of block bitmap is not set
[  140.341936][ T6670] netlink: 71 bytes leftover after parsing attributes in process `syz.2.951'.
[  140.363854][ T6652] EXT4-fs (loop4): Remounting filesystem read-only
[  140.537719][ T6675] program syz.2.953 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.604588][ T6632] loop1: detected capacity change from 0 to 40427
[  140.679015][ T6665] loop3: detected capacity change from 0 to 32768
[  140.685911][ T6632] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  140.694155][ T6632] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  140.738922][ T6632] F2FS-fs (loop1): invalid crc value
[  140.806671][ T6632] F2FS-fs (loop1): Found nat_bits in checkpoint
[  140.819308][ T6665] JBD2: Ignoring recovery information on journal
[  140.846831][ T6688] netlink: 'syz.4.956': attribute type 62 has an invalid length.
[  140.922084][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.956'.
[  140.952387][ T6665] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  141.048994][ T6632] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  141.087736][ T6632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  141.140719][ T6665] (syz.3.948,6665,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  141.322639][ T4198] ocfs2: Unmounting device (7,3) on (node local)
[  141.352928][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'.
[  141.881605][ T6386] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  142.015817][ T6726] loop3: detected capacity change from 0 to 2048
[  142.090316][ T6726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.241655][ T6386] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.269071][ T6386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.310793][ T6386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.320089][ T6701] loop0: detected capacity change from 0 to 32768
[  142.340254][ T6386] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  142.354879][ T6386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.372938][ T6386] usb 3-1: config 0 descriptor??
[  142.427676][ T6701] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.961 (6701)
[  142.458104][ T6701] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  142.492503][ T6701] BTRFS info (device loop0): using free space tree
[  142.505760][ T6701] BTRFS info (device loop0): has skinny extents
[  142.636017][ T6701] BTRFS info (device loop0): enabling ssd optimizations
[  142.801549][ T6335] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  142.845834][ T6386] hid-rmi 0003:0461:4E72.000A: item fetching failed at offset 10/11
[  142.866958][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.989'.
[  142.886141][ T6386] hid-rmi 0003:0461:4E72.000A: parse failed
[  142.920204][ T6386] hid-rmi: probe of 0003:0461:4E72.000A failed with error -22
[  142.929233][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.989'.
[  143.083642][ T6335] usb 4-1: Using ep0 maxpacket: 32
[  143.089286][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'.
[  143.141568][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'.
[  143.281628][ T1324] usb 3-1: USB disconnect, device number 8
[  143.411644][ T6335] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  143.432241][ T6335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.440312][ T6335] usb 4-1: Product: syz
[  143.450870][ T6335] usb 4-1: Manufacturer: syz
[  143.461376][ T6335] usb 4-1: SerialNumber: syz
[  143.473456][ T6335] usb 4-1: config 0 descriptor??
[  143.602391][ T6792] netlink: 124 bytes leftover after parsing attributes in process `syz.0.997'.
[  143.749911][ T6800] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1001'.
[  143.760024][ T6800] netem: unknown loss type 13
[  143.776204][ T6800] netem: change failed
[  143.791475][ T1324] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  143.846040][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'.
[  143.894445][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'.
[  143.961576][ T6335] airspy 4-1:0.0: Board ID: 00
[  143.966409][ T6335] airspy 4-1:0.0: Firmware version: 
[  144.161650][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  144.181507][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.201403][ T1324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  144.222793][ T6813] loop1: detected capacity change from 0 to 256
[  144.229175][ T1324] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  144.238577][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.256129][ T1324] usb 5-1: config 0 descriptor??
[  144.411498][ T6335] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e
[  144.420283][ T6796] loop2: detected capacity change from 0 to 40427
[  144.437101][ T6335] airspy 4-1:0.0: Registered as swradio24
[  144.443933][ T6335] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  144.450572][ T6796] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  144.457549][ T6335] usb 4-1: USB disconnect, device number 9
[  144.515227][ T6796] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  144.537953][ T6796] F2FS-fs (loop2): invalid crc value
[  144.577546][ T6796] F2FS-fs (loop2): Found nat_bits in checkpoint
[  144.652581][ T6796] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  144.665864][ T6796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  144.745567][ T1324] cypress 0003:04B4:0001.000B: unbalanced collection at end of report description
[  144.775938][ T1324] cypress 0003:04B4:0001.000B: parse failed
[  144.796032][ T1324] cypress: probe of 0003:04B4:0001.000B failed with error -22
[  144.902255][ T4201] attempt to access beyond end of device
[  144.902255][ T4201] loop2: rw=2049, want=45104, limit=40427
[  145.015812][ T4466] usb 5-1: USB disconnect, device number 9
[  145.126977][ T6830] loop1: detected capacity change from 0 to 1024
[  145.282988][ T6830] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.1015: lblock 2 mapped to illegal pblock 2 (length 1)
[  145.336119][ T6830] __quota_error: 15 callbacks suppressed
[  145.336138][ T6830] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  145.371068][ T6830] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.1015: lblock 0 mapped to illegal pblock 48 (length 1)
[  145.408674][ T6830] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  145.439195][ T6830] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1015: Failed to acquire dquot type 0
[  145.470368][ T6830] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  145.500738][ T6830] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.1015: mark_inode_dirty error
[  145.520093][ T6835] loop0: detected capacity change from 0 to 40427
[  145.537414][ T6830] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  145.552317][ T6830] EXT4-fs (loop1): 1 orphan inode deleted
[  145.559851][ T6835] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  145.571482][ T6830] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  145.571525][ T4586] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  145.638810][ T6835] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  145.670097][ T6835] F2FS-fs (loop0): invalid crc value
[  145.687766][ T4586] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  145.697596][ T4586] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0
[  145.729436][ T6835] F2FS-fs (loop0): Found nat_bits in checkpoint
[  145.807717][ T6830] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.1015: Invalid inode table block 1 in block_group 0
[  145.862492][ T6830] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  145.912030][ T6835] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  145.919122][ T6835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  145.952493][ T4196] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  146.027802][ T4196] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  146.061405][ T4196] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  146.146094][ T6856] loop4: detected capacity change from 0 to 1024
[  146.264434][ T6861] loop3: detected capacity change from 0 to 1024
[  146.317860][ T6861] EXT4-fs (loop3): Ignoring removed bh option
[  146.382487][ T6861] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000005,dioread_lock,debug_want_extra_isize=0x0000000000000008,barrier=0x0000000000000100,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,errors=continue,bh,init_itable,. Quota mode: none.
[  146.410819][    C1] vkms_vblank_simulate: vblank timer overrun
[  146.605563][ T6861] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 2. Delete some EAs or run e2fsck.
[  146.841414][ T1324] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  146.916903][ T6883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.925027][ T6883] IPv6: NLM_F_CREATE should be set when creating new route
[  146.932387][ T6883] IPv6: NLM_F_CREATE should be set when creating new route
[  146.939711][ T6883] IPv6: NLM_F_CREATE should be set when creating new route
[  146.985965][ T6883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  147.081444][ T1324] usb 5-1: Using ep0 maxpacket: 8
[  147.201960][ T1324] usb 5-1: config 0 interface 0 altsetting 29 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.246030][ T1324] usb 5-1: config 0 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  147.307522][ T1324] usb 5-1: config 0 interface 0 has no altsetting 0
[  147.327171][ T1324] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  147.379343][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.416079][ T1324] usb 5-1: config 0 descriptor??
[  147.640711][ T6919] loop2: detected capacity change from 0 to 128
[  147.790555][ T6921] loop0: detected capacity change from 0 to 4096
[  147.791131][ T6923] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  147.942013][ T1324] hid (null): unknown global tag 0xe
[  147.949705][ T1324] redragon 0003:0C45:760B.000C: unknown main item tag 0x2
[  148.001578][ T1324] redragon 0003:0C45:760B.000C: unknown main item tag 0x0
[  148.008780][ T1324] redragon 0003:0C45:760B.000C: unknown main item tag 0x0
[  148.017878][ T6930] sg_read: process 443 (syz.3.1052) changed security contexts after opening file descriptor, this is not allowed.
[  148.058056][ T1324] redragon 0003:0C45:760B.000C: unknown main item tag 0x0
[  148.076013][ T1324] redragon 0003:0C45:760B.000C: unknown main item tag 0x0
[  148.090175][ T1324] redragon 0003:0C45:760B.000C: unknown global tag 0xe
[  148.130997][ T6933] loop0: detected capacity change from 0 to 512
[  148.156835][ T1324] redragon 0003:0C45:760B.000C: item 0 0 1 14 parsing failed
[  148.172085][ T1324] redragon: probe of 0003:0C45:760B.000C failed with error -22
[  148.228072][ T1324] usb 5-1: USB disconnect, device number 10
[  148.319138][ T6940] input: syz1 as /devices/virtual/input/input12
[  148.761679][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1068'.
[  148.790649][ T6965] x_tables: unsorted underflow at hook 2
[  148.912991][ T6973] loop1: detected capacity change from 0 to 128
[  148.924177][ T6976] netlink: 'syz.4.1072': attribute type 1 has an invalid length.
[  148.986680][ T6973] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  149.011962][ T6973] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.096134][   T26] audit: type=1800 audit(1780706508.461:63): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1071" name="file1" dev="loop1" ino=12 res=0 errno=0
[  149.169678][ T6985] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  149.235135][ T6985] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1076: invalid indirect mapped block 32768 (level 2)
[  149.287946][ T6993] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  149.402512][ T6985] EXT4-fs (loop0): 1 orphan inode deleted
[  149.408321][ T6985] EXT4-fs (loop0): 1 truncate cleaned up
[  149.415567][ T6985] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,nolazytime,,errors=continue. Quota mode: none.
[  149.548162][ T6985] EXT4-fs error (device loop0): ext4_check_all_de:667: inode #12: block 7: comm syz.0.1076: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0
[  149.630742][ T7008] hsr0: VLAN not yet supported
[  149.677625][ T6985] EXT4-fs error (device loop0): ext4_check_all_de:667: inode #12: block 7: comm syz.0.1076: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0
[  149.739257][ T7014] set_capacity_and_notify: 2 callbacks suppressed
[  149.739272][ T7014] loop3: detected capacity change from 0 to 512
[  149.937264][ T7014] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  150.018145][ T7014] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback.
[  150.061608][ T7014] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.210558][ T7033] loop1: detected capacity change from 0 to 128
[  150.328461][ T7033] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  150.359047][ T7033] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.599513][   T26] audit: type=1326 audit(1780706509.961:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  150.719213][   T26] audit: type=1326 audit(1780706509.971:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  150.850261][   T26] audit: type=1326 audit(1780706509.971:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  150.899532][ T7023] loop4: detected capacity change from 0 to 32768
[  150.917037][   T26] audit: type=1326 audit(1780706510.051:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  151.008975][   T26] audit: type=1326 audit(1780706510.051:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  151.033785][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.149204][   T26] audit: type=1326 audit(1780706510.151:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  151.267003][   T26] audit: type=1326 audit(1780706510.151:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  151.344710][ T7066] loop1: detected capacity change from 0 to 512
[  151.361156][   T26] audit: type=1326 audit(1780706510.151:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  151.410247][ T7066] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  151.430656][ T7066] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  151.448437][   T26] audit: type=1326 audit(1780706510.161:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  151.551402][ T4598] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  151.574341][ T7066] EXT4-fs (loop1): 1 truncate cleaned up
[  151.595822][ T7035] loop0: detected capacity change from 0 to 40427
[  151.602686][   T26] audit: type=1326 audit(1780706510.161:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.1.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcced9aae59 code=0x7ffc0000
[  151.618583][ T7066] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,nobarrier,grpid,,errors=continue. Quota mode: none.
[  151.674209][ T7023] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  151.674209][ T7023] 
[  151.713731][ T7023] ERROR: (device loop4): remounting filesystem as read-only
[  151.734728][ T7035] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  151.748806][ T7035] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  151.781669][ T7023] ERROR: (device loop4): diWrite: ixpxd invalid
[  151.781669][ T7023] 
[  151.791092][ T7035] F2FS-fs (loop0): invalid crc value
[  151.829646][ T7023] ERROR: (device loop4): txCommit: 
[  151.829646][ T7023] 
[  151.839932][ T7035] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  151.935866][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'.
[  151.991816][ T4598] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  152.024291][ T4598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.090787][ T4598] usb 3-1: config 0 descriptor??
[  152.143180][ T7035] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  152.150393][ T7035] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  152.160162][ T4598] cp210x 3-1:0.0: cp210x converter detected
[  152.226924][ T7086] loop3: detected capacity change from 0 to 64
[  152.342196][ T7086] hfs: hfs: Invalid key length: 94
[  152.379780][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1098'.
[  152.408648][    T9] ------------[ cut here ]------------
[  152.421354][    T9] kernel BUG at fs/hfs/inode.c:447!
[  152.427941][    T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  152.434044][    T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  152.441536][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  152.451620][    T9] Workqueue: writeback wb_workfn (flush-7:3)
[  152.457643][    T9] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  152.463233][    T9] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 80 9b 8d ff e9 47 fe ff ff e8 26 82 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  152.475678][ T7091] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.1121'.
[  152.482958][    T9] RSP: 0000:ffffc90000ce73c0 EFLAGS: 00010293
[  152.482985][    T9] RAX: ffffffff8230c6ca RBX: ffff88807a4ebc18 RCX: ffff88813fe90000
[  152.482999][    T9] RDX: 0000000000000000 RSI: ffffffff8c4e3540 RDI: 0000000000000000
[  152.483011][    T9] RBP: ffffc90000ce7550 R08: ffff88813fe90000 R09: 0000000000000003
[  152.483024][    T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  152.483036][    T9] R13: 1ffff9200019ce7c R14: 0000000000000000 R15: ffff88807a4ebbd8
[  152.538734][    T9] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  152.547855][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.554532][    T9] CR2: 00007fccedc1b2d8 CR3: 0000000028043000 CR4: 00000000003506e0
[  152.562679][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  152.570655][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  152.578665][    T9] Call Trace:
[  152.581952][    T9]  <TASK>
[  152.584892][    T9]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  152.590287][    T9]  ? __writeback_single_inode+0x471/0xda0
[  152.596031][    T9]  ? __rwlock_init+0x140/0x140
[  152.600829][    T9]  __writeback_single_inode+0x6c3/0xda0
[  152.606383][    T9]  writeback_sb_inodes+0xa4e/0x1680
[  152.611615][    T9]  ? queue_io+0x550/0x550
[  152.615956][    T9]  ? rcu_is_watching+0x11/0xa0
[  152.620754][    T9]  wb_writeback+0x45d/0xbe0
[  152.625576][    T9]  ? rcu_lock_release+0x20/0x20
[  152.630433][    T9]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  152.636501][    T9]  ? mark_lock+0x94/0x320
[  152.640829][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  152.646198][    T9]  wb_workfn+0x43a/0xf20
[  152.650575][    T9]  ? inode_wait_for_writeback+0x220/0x220
[  152.656305][    T9]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  152.662311][    T9]  ? read_lock_is_recursive+0x10/0x10
[  152.667704][    T9]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  152.673682][    T9]  ? _raw_spin_unlock+0x40/0x40
[  152.678555][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  152.683765][    T9]  process_one_work+0x85f/0x1010
[  152.688721][    T9]  ? worker_detach_from_pool+0x240/0x240
[  152.694398][    T9]  ? lockdep_hardirqs_off+0x70/0x100
[  152.699683][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  152.704708][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  152.710251][    T9]  ? wq_worker_running+0x97/0x170
[  152.715292][    T9]  worker_thread+0xaa6/0x1290
[  152.719981][    T9]  kthread+0x436/0x520
[  152.724046][    T9]  ? rcu_lock_release+0x20/0x20
[  152.728895][    T9]  ? kthread_blkcg+0xd0/0xd0
[  152.733480][    T9]  ret_from_fork+0x1f/0x30
[  152.737899][    T9]  </TASK>
[  152.740921][    T9] Modules linked in:
[  152.745021][    C1] vkms_vblank_simulate: vblank timer overrun
[  152.760646][    T9] ---[ end trace 14547aaabfc8e606 ]---
[  152.767938][    T9] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  152.771390][ T4598] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  152.774743][    T9] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 80 9b 8d ff e9 47 fe ff ff e8 26 82 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  152.803999][    T9] RSP: 0000:ffffc90000ce73c0 EFLAGS: 00010293
[  152.810435][    T9] RAX: ffffffff8230c6ca RBX: ffff88807a4ebc18 RCX: ffff88813fe90000
[  152.838734][ T4598] usb 3-1: cp210x converter now attached to ttyUSB0
[  152.851476][    T9] RDX: 0000000000000000 RSI: ffffffff8c4e3540 RDI: 0000000000000000
[  152.860414][    T9] RBP: ffffc90000ce7550 R08: ffff88813fe90000 R09: 0000000000000003
[  152.878190][    T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  152.901336][    T9] R13: 1ffff9200019ce7c R14: 0000000000000000 R15: ffff88807a4ebbd8
[  152.910006][    T9] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  152.919357][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.926008][    T9] CR2: 000000110c300d0d CR3: 0000000065507000 CR4: 00000000003506f0
[  152.934149][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  152.942400][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  152.950406][    T9] Kernel panic - not syncing: Fatal exception
[  152.956812][    T9] Kernel Offset: disabled
[  152.961145][    T9] Rebooting in 86400 seconds..