last executing test programs:

2m51.623263757s ago: executing program 4 (id=1843):
unshare(0x20000600)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f0000000280)=ANY=[], 0x1, 0x278, &(0x7f0000000000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x301842, 0x0)
ftruncate(r0, 0x4000000000006)

2m51.47607097s ago: executing program 4 (id=1846):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000000), &(0x7f00000004c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc)

2m51.289316254s ago: executing program 4 (id=1850):
r0 = socket(0xa, 0x1, 0x0)
listen(r0, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
accept4(r0, 0x0, 0x0, 0x80000)

2m51.132826188s ago: executing program 4 (id=1851):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_net\x00', 0x777)
mount(0x0, &(0x7f00000000c0)='./proc_net\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_net/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

2m51.027446151s ago: executing program 4 (id=1853):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"})
write$sndseq(r0, &(0x7f0000000140)=[{0x5, 0xff, 0xf8, 0x0, @time, {0x0, 0x3}, {0x8, 0x1}, @result}], 0x1c)

2m50.900228834s ago: executing program 4 (id=1856):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='inet 2', 0x6)

2m40.662415311s ago: executing program 1 (id=1981):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x22280, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x121080e, &(0x7f0000000380)={[{@usrquota}, {@debug}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

2m40.157652763s ago: executing program 1 (id=1988):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
close(0x3)

2m38.60668308s ago: executing program 0 (id=1995):
syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
syz_mount_image$nilfs2(&(0x7f0000002680), &(0x7f00000026c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0023e555b9c3fa6eb33ac47b8ff4af91652bcdadba6016b4febaefbf7ab1de9f9fc4b85dd11eb3d1d8f02b8edbb8d57cae0b642b13f86ad961208d93d147b403510e2bb85973c96a68a34335934125f954a59319e300306af03272e8040cbe7d49670be69710ee3b2abd38392a1b548c10073c15bb0e88fd0885977f8a07d1334f2abd76c074e6a8e645961aefc9"], 0x1, 0x267d, &(0x7f0000002740)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000040)={0x5, 0x1, 0x9, 0x0, 0x7, 0x4fe4, 0x2401})

2m38.207294339s ago: executing program 0 (id=1996):
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x80}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000380)=""/88, 0x58}], 0x2, 0x6, 0xff}}], 0x48}, 0x0)

2m37.851758598s ago: executing program 0 (id=1999):
setreuid(0x0, 0xee00)
r0 = shmget$private(0x0, 0x1000, 0x78001900, &(0x7f0000ffe000/0x1000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf}, 0x88b, 0xfffffffffffffffa, 0x8, 0x1003, 0x0, 0x0, 0x1})
shmctl$SHM_LOCK(r0, 0xb)

2m37.820936389s ago: executing program 0 (id=2000):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000017c0)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0)

2m36.596486269s ago: executing program 0 (id=2006):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x448c0)

2m35.440926716s ago: executing program 32 (id=1856):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000600)='inet 2', 0x6)

2m31.598439929s ago: executing program 0 (id=2034):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00')
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, 0x1fd, 0x6)

2m31.370500204s ago: executing program 33 (id=2034):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00')
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, 0x1fd, 0x6)

2m26.652060428s ago: executing program 1 (id=1988):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
close(0x3)

2m26.441579983s ago: executing program 1 (id=2060):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0)

2m26.1568287s ago: executing program 1 (id=2062):
r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xc, 0xa0, 0x0, {0x8, 0xb, 0x2, 0x2, 0x1, 0x1, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x8c4d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x6, 0x2, {0xa, 0x25, 0x25, 0x77, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x220, 0x7, 0x1, 0x8, {0xa, 0x25, 0x25, 0x0, 0x8, 0x1}}}}}}}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0)

2m24.739454874s ago: executing program 1 (id=2068):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

2m9.718902326s ago: executing program 34 (id=2068):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

1m16.304011432s ago: executing program 2 (id=2828):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
fcntl$notify(r1, 0x402, 0x80000030)
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0xadc091d}], 0x1, 0xc002a0, 0x0)

1m16.164728475s ago: executing program 2 (id=2832):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x6)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1261, 0x0)

1m15.640420828s ago: executing program 2 (id=2841):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @broadcast}}]}, 0x190)

1m15.56713762s ago: executing program 2 (id=2842):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000017c0)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0)

1m14.906119305s ago: executing program 2 (id=2846):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_newaddr={0x54, 0x14, 0x101, 0x70bd06, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6, 0x8, 0x8000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004051}, 0x0)

1m13.89686798s ago: executing program 2 (id=2855):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001c40), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000)

1m13.823514072s ago: executing program 35 (id=2855):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001c40), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000)

3.73450437s ago: executing program 6 (id=3586):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x9, 0x0, 0x3, 0x1, 0xe, 0x1124}, 0x17)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))

3.583630103s ago: executing program 6 (id=3589):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4620, 0x7, @private1, 0x9}}, 0x0, 0x0, 0x3f, 0x0, "9e3619ea5dad28c61339fe3860c334983aad0f8bb294f2c98d28abd36e5e3738791efca84096bdc61579dc502b0efd595a0a4267f683c3cade7b9bc76e0eb553aa02885b72adea9d8697155f9b5000"}, 0xd8)

3.456060566s ago: executing program 6 (id=3593):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x200}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x40}}, 0x0)

3.362820999s ago: executing program 6 (id=3595):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
semget$private(0x0, 0x1, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080))

2.008731201s ago: executing program 6 (id=3615):
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000a80)={0xe4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PROBE_RESP={0xcd, 0x91, "a5c9c2324134d185fbf13a9571523adfeb9e3b9eb34cfeb5316a56385c8007be1c43f96ae111b8c79495fc25132c8e843a21701acc7cb4ab78ed5dd10bcb6fe7c87de7129fd4e49f189b5d82a2a024342fb4fcae87c104713ba3161ab10655bad2c0bbf2d729f4fbca8ad67a72eab4bc0249430907cbf72cd7f6b0876ee30320e035738dcce135fce1257e555ae3ac2cbc646caa54993b01aa70a5ddd461288c32a7eca3d9e55e130a4e679148130f9cde9c18d0183425c6c0a9e641a41e439444b819e004f3239309"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4850}, 0x80)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, &(0x7f0000000380)=ANY=[], 0x4000)
close(r0)

1.284708468s ago: executing program 6 (id=3628):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0\n', 0x2)

1.23922863s ago: executing program 8 (id=3630):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x4}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000bc0)="e4e2", 0x2}], 0x1}, 0x4800)

1.178096871s ago: executing program 3 (id=3632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401010000009f9c02480000fff500050001000100"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x1, 0x4, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x26088888)

1.176469141s ago: executing program 7 (id=3633):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

1.090831223s ago: executing program 8 (id=3634):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x28, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x6)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c)

1.067910934s ago: executing program 5 (id=3635):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x9)

1.030748755s ago: executing program 7 (id=3636):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x4e, &(0x7f0000000540)={@random="3318ebba7f31", @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x18, 0x87, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@srh={0x3b, 0x2, 0x4, 0x1, 0x1, 0x28, 0x1, [@private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}, 0x0)

1.012701325s ago: executing program 3 (id=3637):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1f)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))

945.709997ms ago: executing program 8 (id=3638):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'default'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6c5, &(0x7f0000000400)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.&'], 0x0, 0x0, 0x0)

888.360178ms ago: executing program 7 (id=3639):
r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0)
io_setup(0x6, &(0x7f0000000540)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r0, 0x0}])
mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0)

887.958968ms ago: executing program 5 (id=3640):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x21081c22)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, r1)

861.619789ms ago: executing program 3 (id=3641):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
lseek(r0, 0xffffffffffffffff, 0x2)

783.027291ms ago: executing program 5 (id=3642):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x1e)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

769.984171ms ago: executing program 3 (id=3643):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x40000, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32874000)
read(r0, &(0x7f0000000080)=""/92, 0x5c)

668.673953ms ago: executing program 8 (id=3644):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x3dc], [0xfffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, 0x88}}, 0x8000)

665.829004ms ago: executing program 7 (id=3645):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060012000000000006000f"], 0x44}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

581.261286ms ago: executing program 3 (id=3646):
syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x148, &(0x7f0000000240)="$eJzs0LFLOnEYx/HP/e5+EqVZZGBBJjR0JOZ5Yk0NGklCdlC4NAl2UaAYCeVoRFtD0OpgCU3iv2BZi6UQ9k+0uAWOxd0JYrS0f17Lce/n4Rm+G2ttGV6g54RpPZc9PtHzeX3fu6MlYrsf9XrE6DYAI0Nza/8hAhwaXwnongNGfnIAB0cZfTmdyxj/3QggA4iOWV2BtTtqNJfVgv0mLwCNaaupv7RQv81KQNQ5uPd1Cywa9yYH9z4BFEq+WvVlu9WM+5fu50Rcxn3zU8Jw9+hXamymYneLSOrPd4ia8/dA0/8WqFU77VZiS0to7ZCqroSUoKKEO9prKx4uXkPatJ8Cez/u2eD2SEngQgBuzFn3UXAAaJR7WnZ8tWw9HYpnohcQCqV0yv2/knJN/IMoQwAREREREREREREREREREdFffQcAAP//YC1mmA==")
open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

237.429304ms ago: executing program 5 (id=3647):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper, 0x1})

223.240494ms ago: executing program 8 (id=3648):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010804000000fddbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="28005080110001004abee339084eeef16f162471f40000000800030005ac0f0005000200050000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

150.554536ms ago: executing program 7 (id=3649):
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7c, 0x0, &(0x7f0000000280)="87466f9cd4b3ff0ecf976ef31519f737a47ba037e130bbf9db180e02dcb01397666e1ac5715214921d5d450600c2db066013a545d6cee9aac75c5eae28e48b446148c10262d2a84365420e2e0f55c37c72979d0a4a21831bfba7a8f9a23f535064f30ef186005e8e20ddeca95f2f6362733a3eed8ca270d9b63bec8e", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

127.455126ms ago: executing program 3 (id=3650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xffffffffffffffc3, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)

122.918757ms ago: executing program 8 (id=3651):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

115.654187ms ago: executing program 5 (id=3652):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd31, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xff, 0x0, 0x100}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x0)

687.739µs ago: executing program 5 (id=3653):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40850)

0s ago: executing program 7 (id=3654):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

kernel console output (not intermixed with test programs):

ilesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  311.121961][T11598] loop6: detected capacity change from 0 to 512
[  311.229705][T11598] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  311.258004][T11598] System zones: 0-2, 18-18, 34-35
[  311.270357][T11598] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  311.318268][T11598] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.538360][T11613] program syz.3.2588 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  311.642876][T11609] loop7: detected capacity change from 0 to 2048
[  311.712820][T11621] loop6: detected capacity change from 0 to 256
[  311.807037][T11621] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  311.828168][T11621] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  311.839995][T11626] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  311.848624][T11621] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  312.586514][ T4652] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  312.757284][T11634] loop3: detected capacity change from 0 to 32768
[  312.848008][ T4652] usb 8-1: Using ep0 maxpacket: 8
[  312.897241][T11634] XFS (loop3): Mounting V5 Filesystem
[  312.952289][T11636] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  312.968262][ T4652] usb 8-1: config 0 interface 0 has no altsetting 0
[  312.975280][ T4652] usb 8-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  312.984735][ T4652] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.996263][ T4652] usb 8-1: config 0 descriptor??
[  313.012572][T11636] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  313.032106][T11634] XFS (loop3): Ending clean mount
[  313.056327][T11636] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff
[  313.098435][T11636] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6
[  313.153793][T11636] F2FS-fs (loop2): invalid crc value
[  313.206290][T11636] F2FS-fs (loop2): Found nat_bits in checkpoint
[  313.220431][ T4194] XFS (loop3): Unmounting Filesystem
[  313.338017][T11662] set_capacity_and_notify: 2 callbacks suppressed
[  313.338035][T11662] loop4: detected capacity change from 0 to 7
[  313.385718][    C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  313.396792][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  313.432580][T11662] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  313.468571][T11662] Buffer I/O error on dev loop4, logical block 0, async page read
[  313.479523][T11636] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  313.485073][ T4652] wacom 0003:056A:0057.000D: unknown main item tag 0x0
[  313.487179][T11636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  313.504351][ T4652] wacom 0003:056A:0057.000D: ignoring exceeding usage max
[  313.508331][T11662] ldm_validate_partition_table(): Disk read failed.
[  313.522549][ T4652] wacom 0003:056A:0057.000D: hidraw0: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.7-1/input0
[  313.564141][T11662] Dev loop4: unable to read RDB block 0
[  313.607834][    C1] vkms_vblank_simulate: vblank timer overrun
[  313.637898][T11662]  loop4: unable to read partition table
[  313.686979][T11662] loop4: partition table beyond EOD, truncated
[  313.714721][T11662] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  313.800438][ T5967] usb 8-1: USB disconnect, device number 4
[  313.844863][ T4193] attempt to access beyond end of device
[  313.844863][ T4193] loop2: rw=2049, want=45112, limit=40427
[  314.485280][T11684] loop7: detected capacity change from 0 to 4096
[  314.570302][T11684] NILFS (loop7): invalid segment: Checksum error in segment payload
[  314.600350][T11688] loop3: detected capacity change from 0 to 8
[  314.615287][T11684] NILFS (loop7): trying rollback from an earlier position
[  314.679192][T11684] NILFS (loop7): recovery complete
[  314.730843][T11692] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  315.076259][T11700] loop3: detected capacity change from 0 to 2048
[  315.084284][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'.
[  315.099791][T11702] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5)
[  315.186593][T11700] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  315.203163][T11711] program syz.7.2624 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  315.212352][T11700] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  315.288027][T11700] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  315.297626][T11700] UDF-fs: Scanning with blocksize 512 failed
[  315.358858][T11700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  316.485073][T11745] loop6: detected capacity change from 0 to 32768
[  316.611024][T11745] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  316.627225][T11759] loop2: detected capacity change from 0 to 512
[  316.669030][T11745] JBD2: Ignoring recovery information on journal
[  316.672174][T11759] EXT4-fs (loop2): Ignoring removed orlov option
[  316.765489][T11745] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  316.789520][T11759] EXT4-fs (loop2): 1 truncate cleaned up
[  316.810145][T11759] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,sysvgroups,orlov,noauto_da_alloc,init_itable,discard,journal_ioprio=0x0000000000000004,errors=remount-ro,nodiscard,. Quota mode: none.
[  316.842344][   T26] audit: type=1800 audit(1785205773.059:74): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2638" name="file1" dev="loop6" ino=17059 res=0 errno=0
[  316.941120][ T9900] ocfs2: Unmounting device (7,6) on (node local)
[  317.019729][T11759] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2643: invalid indirect mapped block 234881024 (level 0)
[  317.101544][T11759] EXT4-fs (loop2): Remounting filesystem read-only
[  317.150932][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2647'.
[  317.370552][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  317.378794][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  317.378916][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  317.508021][ T4647] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  317.757943][ T4647] usb 4-1: Using ep0 maxpacket: 8
[  317.827190][T11795] loop2: detected capacity change from 0 to 512
[  317.844505][T11798] loop7: detected capacity change from 0 to 1024
[  318.038455][ T4647] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  318.059874][ T4647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.076794][T11809] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2664'.
[  318.087167][ T4647] usb 4-1: Product: syz
[  318.092975][ T4647] usb 4-1: Manufacturer: syz
[  318.098211][ T4647] usb 4-1: SerialNumber: syz
[  318.139207][T11809] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2664'.
[  318.162582][T11810] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2664'.
[  318.182332][T11809] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2664'.
[  318.241006][T11813] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2665'.
[  318.263687][T11815] loop2: detected capacity change from 0 to 512
[  318.441133][T11815] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2667: invalid indirect mapped block 10 (level 1)
[  318.502433][T11815] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2667: invalid indirect mapped block 8 (level 1)
[  318.537598][T11815] EXT4-fs (loop2): 1 truncate cleaned up
[  318.544701][T11815] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,,errors=continue. Quota mode: none.
[  318.570072][T11815] EXT4-fs (loop2): shut down requested (1)
[  318.598175][ T4647] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4)
[  318.606497][ T4647] mxuport: probe of 4-1:254.0 failed with error -5
[  318.751870][T11829] netlink: 'syz.2.2674': attribute type 4 has an invalid length.
[  318.838076][ T4647] usb 4-1: USB disconnect, device number 18
[  318.846140][T11830] rdma_rxe: rxe_register_device failed with error -23
[  318.870187][T11830] rdma_rxe: failed to add lo
[  318.948634][T11827] infiniband syz1: set active
[  318.953467][T11827] infiniband syz1: added syz_tun
[  319.034344][T11827] RDS/IB: syz1: added
[  319.039568][T11827] smc: adding ib device syz1 with port count 1
[  319.057896][T11827] smc:    ib device syz1 port 1 has pnetid 
[  319.337980][ T4647] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  319.358239][ T2239] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  319.702360][ T4647] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  319.717969][ T2239] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  319.727370][ T2239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.748257][ T4647] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  319.762399][ T2239] usb 3-1: config 0 descriptor??
[  319.773524][ T4647] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.819199][ T2239] cp210x 3-1:0.0: cp210x converter detected
[  319.834098][ T4647] gspca_main: stv0680-2.14.0 probing 041e:4007
[  320.257957][ T2239] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  320.291565][T11847] loop3: detected capacity change from 0 to 40427
[  320.302025][T11860] loop5: detected capacity change from 0 to 256
[  320.320868][ T2239] usb 3-1: cp210x converter now attached to ttyUSB0
[  320.344800][T11847] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  320.371971][T11847] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  320.396420][T11847] F2FS-fs (loop3): invalid crc value
[  320.471452][T11847] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  320.532396][ T4233] usb 3-1: USB disconnect, device number 21
[  320.551731][ T4233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  320.584807][ T4233] cp210x 3-1:0.0: device disconnected
[  320.747934][T11847] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  320.774995][T11847] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  320.855273][T11877] loop5: detected capacity change from 0 to 256
[  320.935904][T11877] exfat: Deprecated parameter 'namecase'
[  320.959625][T11877] exfat: Deprecated parameter 'utf8'
[  320.970034][ T4194] attempt to access beyond end of device
[  320.970034][ T4194] loop3: rw=2049, want=40976, limit=40427
[  320.972296][T11877] exfat: Deprecated parameter 'namecase'
[  320.998139][T11877] exfat: Deprecated parameter 'utf8'
[  321.028162][ T4647] stv0680 8-1:4.0: Could not get descriptor 0200
[  321.079030][T11877] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  321.247971][ T4647] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  321.302776][ T4647] stv0680 8-1:4.0: last error: 34,  command = 0x4
[  321.334865][ T4647] usb 8-1: USB disconnect, device number 5
[  321.519080][T11887] loop2: detected capacity change from 0 to 512
[  321.629410][T11890] loop3: detected capacity change from 0 to 128
[  321.678450][T11890] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  321.679172][T11887] FAT-fs (loop2): Directory bread(block 199916) failed
[  321.738816][T11887] FAT-fs (loop2): Directory bread(block 199917) failed
[  321.768066][T11887] FAT-fs (loop2): Directory bread(block 199918) failed
[  321.775465][T11887] FAT-fs (loop2): Directory bread(block 199919) failed
[  321.809326][T11887] FAT-fs (loop2): Directory bread(block 199920) failed
[  321.868006][T11887] FAT-fs (loop2): Directory bread(block 199921) failed
[  321.912178][T11887] FAT-fs (loop2): Directory bread(block 199922) failed
[  321.963107][T11887] FAT-fs (loop2): Directory bread(block 199923) failed
[  322.191151][T11887] FAT-fs (loop2): FAT read failed (blocknr 128)
[  322.406104][    C1] vkms_vblank_simulate: vblank timer overrun
[  322.451946][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2705'.
[  322.503701][T11907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2705'.
[  322.958319][T11906] loop2: detected capacity change from 0 to 65536
[  323.188118][T11906] XFS (loop2): Mounting V5 Filesystem
[  323.324229][T11906] XFS (loop2): Ending clean mount
[  323.421103][   T26] audit: type=1800 audit(1785205779.639:75): pid=11906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2703" name="file1" dev="loop2" ino=70 res=0 errno=0
[  323.441869][    C1] vkms_vblank_simulate: vblank timer overrun
[  323.521384][ T4193] XFS (loop2): Unmounting Filesystem
[  323.832520][T11948] loop6: detected capacity change from 0 to 7
[  323.898180][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  323.925433][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  323.936584][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  323.988487][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  324.000301][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  324.027979][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  324.038941][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  324.058091][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  324.069057][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  324.107991][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  324.119323][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  324.525224][ T2239] hid-generic 0005:0B57:0000.000E: item fetching failed at offset 0/1
[  324.526276][T11952] loop7: detected capacity change from 0 to 4096
[  324.598305][ T2239] hid-generic: probe of 0005:0B57:0000.000E failed with error -22
[  324.632384][T11952] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  324.685603][T11952] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  324.752357][T11952] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  324.797947][T11952] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  324.857974][T11952] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  324.882526][T11961] loop3: detected capacity change from 0 to 4096
[  324.897753][T11965] loop2: detected capacity change from 0 to 2048
[  324.904087][T11952] ntfs: volume version 3.1.
[  324.945051][T11952] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  324.959934][T11952] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  324.969462][T11961] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  324.987728][T11952] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  324.992736][    C1] vkms_vblank_simulate: vblank timer overrun
[  325.037348][T11969] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  325.088763][T11965] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  325.135151][T11961] ntfs: volume version 3.1.
[  325.188060][T11965] Remounting filesystem read-only
[  325.798894][T11984] loop7: detected capacity change from 0 to 256
[  325.883067][T11988] tap0: tun_chr_ioctl cmd 1074025677
[  325.919252][T11988] tap0: linktype set to 804
[  326.210204][T12001] loop6: detected capacity change from 0 to 2048
[  326.278419][T12005] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  326.303863][T12003] loop2: detected capacity change from 0 to 2048
[  326.415740][T12003] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  326.448168][T12003] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  326.491014][T12003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  326.735313][T12018] loop7: detected capacity change from 0 to 1024
[  326.870728][T12018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  326.910529][T12026] loop3: detected capacity change from 0 to 512
[  326.972095][T12028] netlink: 'syz.5.2756': attribute type 9 has an invalid length.
[  327.089782][T12026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022]
[  327.108110][T12026] System zones: 1-12
[  327.139073][T12026] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2744: Directory hole found for htree index block 0
[  327.168899][T12026] EXT4-fs (loop3): Remounting filesystem read-only
[  327.175736][T12026] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  327.211658][T12026] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2744: Directory hole found for htree index block 0
[  327.289059][T12026] EXT4-fs (loop3): Remounting filesystem read-only
[  327.295966][T12026] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  327.346830][T12026] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback.
[  327.532338][T12049] netlink: 'syz.5.2764': attribute type 3 has an invalid length.
[  328.339536][T12082] netlink: 'syz.7.2778': attribute type 1 has an invalid length.
[  328.347511][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2778'.
[  328.428058][ T4233] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  328.651310][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2785'.
[  328.825583][ T4233] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 180, changing to 11
[  328.841613][ T4233] usb 4-1: config 0 interface 0 has no altsetting 0
[  328.865542][ T4233] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00
[  328.917284][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.957734][ T4233] usb 4-1: config 0 descriptor??
[  329.048671][ T5242] Bluetooth: hci6: command 0x0411 tx timeout
[  329.267450][T12075] loop5: detected capacity change from 0 to 32768
[  329.489898][ T4233] ntrig 0003:1B96:000F.000F: ignoring exceeding usage max
[  329.518936][ T4233] ntrig 0003:1B96:000F.000F: unbalanced collection at end of report description
[  329.553868][ T4233] ntrig 0003:1B96:000F.000F: parse failed
[  329.583599][ T4233] ntrig: probe of 0003:1B96:000F.000F failed with error -22
[  329.617991][ T4655] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  329.637750][T12075] XFS (loop5): Mounting V5 Filesystem
[  329.744922][T12116] loop6: detected capacity change from 0 to 40427
[  329.764542][ T2239] usb 4-1: USB disconnect, device number 19
[  329.772435][T12075] XFS (loop5): Ending clean mount
[  329.802860][T12116] F2FS-fs (loop6): invalid crc value
[  329.804409][T12075] XFS (loop5): Quotacheck needed: Please wait.
[  329.843792][T12116] F2FS-fs (loop6): Found nat_bits in checkpoint
[  329.868030][ T4655] usb 8-1: Using ep0 maxpacket: 32
[  329.933233][T12075] XFS (loop5): Quotacheck: Done.
[  329.980523][T12116] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1
[  329.988082][ T4655] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  330.002169][ T4655] usb 8-1: config 0 has no interface number 0
[  330.015798][ T4655] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  330.020369][T12116] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  330.028860][ T4655] usb 8-1: config 0 interface 1 has no altsetting 0
[  330.068479][ T9801] XFS (loop5): Unmounting Filesystem
[  330.262924][ T4655] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  330.273209][ T4655] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.274702][ T9900] attempt to access beyond end of device
[  330.274702][ T9900] loop6: rw=2049, want=45104, limit=40427
[  330.295062][ T4655] usb 8-1: Product: syz
[  330.327236][ T4655] usb 8-1: Manufacturer: syz
[  330.336408][ T4655] usb 8-1: SerialNumber: syz
[  330.358701][ T4655] usb 8-1: config 0 descriptor??
[  330.659874][ T4655] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  330.698067][ T4655] cx231xx 8-1:0.1: Failed to read PCB config
[  330.704496][ T4655] cx231xx: probe of 8-1:0.1 failed with error -71
[  330.737904][ T4655] usb 8-1: USB disconnect, device number 6
[  331.006521][T12153] loop3: detected capacity change from 0 to 64
[  331.211955][T12159] loop3: detected capacity change from 0 to 512
[  331.291521][T12159] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  331.321112][T12159] EXT4-fs (loop3): inline encryption not supported
[  331.341349][T12161] loop5: detected capacity change from 0 to 1024
[  331.358451][T12159] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  331.377861][T12159] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  331.399317][T12137] loop2: detected capacity change from 0 to 32768
[  331.406449][T12159] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  331.430723][T12159] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  331.440682][T12159] EXT4-fs (loop3): orphan cleanup on readonly fs
[  331.505567][T12170] loop6: detected capacity change from 0 to 2048
[  331.519979][T12159] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2809: bg 0: block 34: padding at end of block bitmap is not set
[  331.629706][T12161] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none.
[  331.638484][T12159] __quota_error: 24 callbacks suppressed
[  331.638502][T12159] Quota error (device loop3): write_blk: dquota write failed
[  331.643236][T12170] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  331.649180][T12159] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  331.685412][T12159] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.2809: Failed to acquire dquot type 1
[  331.697875][T12161] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.699518][T12170] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.720242][T12159] EXT4-fs (loop3): 1 truncate cleaned up
[  331.776769][T12159] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback.
[  331.938079][T12170] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2814: bg 0: block 345: padding at end of block bitmap is not set
[  332.020014][T12170] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  332.059142][T12170] EXT4-fs (loop6): This should not happen!! Data will be lost
[  332.059142][T12170] 
[  332.437333][T12193] tmpfs: Bad value for 'size'
[  332.491507][T12199] overlayfs: unrecognized mount option "verity=on" or missing value
[  332.717979][ T4655] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  332.722550][T12211] loop7: detected capacity change from 0 to 512
[  332.783233][T12211] EXT4-fs (loop7): Ignoring removed nobh option
[  332.860351][T12211] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback.
[  332.904152][T12211] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.951312][T12211] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.2830: corrupted inode contents
[  332.964318][ T4655] usb 4-1: Using ep0 maxpacket: 8
[  332.977486][T12211] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #2: comm syz.7.2830: mark_inode_dirty error
[  333.013633][T12211] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.2830: corrupted inode contents
[  333.035533][T12211] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.2830: mark_inode_dirty error
[  333.088124][ T4655] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.114776][ T4655] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  333.128655][ T4655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.158820][ T4655] usb 4-1: config 0 descriptor??
[  333.184764][T12230] loop6: detected capacity change from 0 to 1024
[  333.204737][ T4655] gspca_main: vc032x-2.14.0 probing 046d:0892
[  333.206987][T12230] EXT4-fs (loop6): inline encryption not supported
[  333.218640][T12230] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  333.283332][T12230] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,nodelalloc,inlinecrypt,nouid32,nomblk_io_submit,max_dir_size_kb=0x0000000000000001,init_itable=0x0000000000000005,,errors=continue. Quota mode: none.
[  333.319620][T12232] loop5: detected capacity change from 0 to 512
[  333.345952][T12230] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.472605][T12232] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2840: bg 0: block 104: invalid block bitmap
[  333.526986][T12232] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  333.580981][T12232] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2840: invalid indirect mapped block 1 (level 1)
[  333.648830][ T2239] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  333.665431][T12240] loop2: detected capacity change from 0 to 32768
[  333.695444][T12232] EXT4-fs (loop5): 1 truncate cleaned up
[  333.702614][T12232] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  333.883325][ T4655] gspca_vc032x: reg_r err -71
[  333.889911][ T4655] vc032x: probe of 4-1:0.0 failed with error -71
[  333.906786][ T4655] usb 4-1: USB disconnect, device number 20
[  334.009089][ T2239] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.030445][ T2239] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.043229][ T4193] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  334.043229][ T4193] 
[  334.055866][ T2239] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  334.071498][ T4193] ERROR: (device loop2): remounting filesystem as read-only
[  334.080678][ T2239] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  334.091896][ T4193] xtLookup: xtSearch returned -5
[  334.096877][ T4193] free_index: error reading directory table
[  334.106116][ T2239] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.123514][ T4193] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  334.123514][ T4193] 
[  334.148047][ T4193] xtLookup: xtSearch returned -5
[  334.151476][ T2239] usb 8-1: config 0 descriptor??
[  334.154205][ T4193] free_index: error reading directory table
[  334.166607][ T4193] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  334.166607][ T4193] 
[  334.178331][ T4193] xtLookup: xtSearch returned -5
[  334.184062][ T4193] free_index: error reading directory table
[  334.191767][ T4193] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  334.191767][ T4193] 
[  334.209871][ T4193] xtLookup: xtSearch returned -5
[  334.214960][ T4193] free_index: error reading directory table
[  334.221376][ T4193] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  334.221376][ T4193] 
[  334.231746][ T4193] xtLookup: xtSearch returned -5
[  334.236887][ T4193] free_index: error reading directory table
[  334.246720][ T4193] non-latin1 character 0x2e66 found in JFS file name
[  334.255947][ T4193] mount with iocharset=utf8 to access
[  334.540915][T12257] loop3: detected capacity change from 0 to 1024
[  334.655221][ T2239] plantronics 0003:047F:FFFF.0010: unbalanced delimiter at end of report description
[  334.675475][ T2239] plantronics 0003:047F:FFFF.0010: parse failed
[  334.702762][ T2239] plantronics: probe of 0003:047F:FFFF.0010 failed with error -22
[  334.871111][ T5967] usb 8-1: USB disconnect, device number 7
[  334.922592][ T4227] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.019173][ T4227] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.106963][ T4227] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.212545][T12255] XFS (loop5): Mounting V5 Filesystem
[  335.298396][ T4227] device netdevsim0 left promiscuous mode
[  335.304932][ T4227] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.445262][T12255] XFS (loop5): Ending clean mount
[  335.455568][T12255] XFS (loop5): Quotacheck needed: Please wait.
[  335.571750][T12283] device batadv_slave_0 entered promiscuous mode
[  335.613635][T12284] device batadv_slave_0 left promiscuous mode
[  335.621321][ T4278] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  335.661071][T12255] XFS (loop5): Quotacheck: Done.
[  335.767967][ T4655] Bluetooth: hci6: command 0x0405 tx timeout
[  335.861778][ T9801] XFS (loop5): Unmounting Filesystem
[  335.908754][    C1] vkms_vblank_simulate: vblank timer overrun
[  336.108382][ T4278] usb 4-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30
[  336.140016][ T4278] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  336.171834][ T4278] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  336.195492][ T4278] usb 4-1: config 0 interface 0 has no altsetting 0
[  336.215816][ T4278] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00
[  336.245575][ T4278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.272988][ T4278] usb 4-1: config 0 descriptor??
[  336.706691][T12286] chnl_net:caif_netlink_parms(): no params data found
[  336.743129][ T4278] logitech-hidpp-device 0003:046D:C088.0011: hidraw0: USB HID v0.00 Device [HID 046d:c088] on usb-dummy_hcd.3-1/input0
[  336.942248][ T2239] usb 4-1: USB disconnect, device number 21
[  337.188537][T12319] fido_id[12319]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  337.205262][T12286] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.213658][T12286] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.239426][T12286] device bridge_slave_0 entered promiscuous mode
[  337.302570][T12286] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.330789][T12286] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.370412][T12286] device bridge_slave_1 entered promiscuous mode
[  337.393856][T12344] trusted_key: encrypted_key: keyword 'up�ate' not recognized
[  337.526857][T12286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.612143][T12286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.613634][T12350] set_capacity_and_notify: 3 callbacks suppressed
[  337.613648][T12350] loop6: detected capacity change from 0 to 256
[  337.746714][T12350] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  337.840554][T12286] team0: Port device team_slave_0 added
[  337.876542][T12286] team0: Port device team_slave_1 added
[  337.967926][ T2239] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  338.008171][ T4652] Bluetooth: hci3: command 0x0409 tx timeout
[  338.029005][T12286] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.036246][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.093976][T12286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.155219][    C1] vkms_vblank_simulate: vblank timer overrun
[  338.186101][T12286] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.210698][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.237377][ T4655] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  338.245417][ T2239] usb 6-1: Using ep0 maxpacket: 8
[  338.284216][T12286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.378071][ T2239] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  338.407918][ T2239] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  338.429523][ T2239] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  338.457076][ T2239] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  338.483600][ T2239] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  338.494612][ T2239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.518386][ T4655] usb 4-1: Using ep0 maxpacket: 16
[  338.531581][T12286] device hsr_slave_0 entered promiscuous mode
[  338.562962][T12286] device hsr_slave_1 entered promiscuous mode
[  338.591747][T12286] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.629472][T12286] Cannot create hsr debugfs directory
[  338.648007][ T4655] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.667950][ T4655] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  338.720825][ T4655] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  338.758122][ T4655] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  338.797951][ T2239] usb 6-1: GET_CAPABILITIES returned 0
[  338.803587][ T2239] usbtmc 6-1:16.0: can't read capabilities
[  338.853698][T12394] loop7: detected capacity change from 0 to 512
[  338.911219][ T4655] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  338.921132][T12396] loop6: detected capacity change from 0 to 16
[  338.944403][ T4655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  338.955514][ T4655] usb 4-1: SerialNumber: syz
[  339.002448][ T5238] usb 6-1: USB disconnect, device number 5
[  339.013811][T12364] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  339.058274][T12364] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  339.061516][T12396] erofs: (device loop6): mounted with root inode @ nid 36.
[  339.078519][ T4655] hub 4-1:1.0: bad descriptor, ignoring hub
[  339.084595][ T4655] hub: probe of 4-1:1.0 failed with error -5
[  339.095937][ T4227] device batadv0 left promiscuous mode
[  339.118592][ T4227] device hsr_slave_0 left promiscuous mode
[  339.189025][ T4227] device hsr_slave_1 left promiscuous mode
[  339.198434][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.233748][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.242130][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  339.278186][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1
[  339.283905][T12364] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  339.303418][ T4227] device bridge_slave_0 left promiscuous mode
[  339.311874][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.320008][T12364] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  339.359714][ T4227] device veth1_macvtap left promiscuous mode
[  339.365874][ T4227] device veth0_macvtap left promiscuous mode
[  339.399126][ T4227] device veth1_vlan left promiscuous mode
[  339.405061][ T4227] device veth0_vlan left promiscuous mode
[  339.880376][T12415] loop6: detected capacity change from 0 to 4096
[  339.982165][T12415] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  340.046692][ T4227] team0 (unregistering): Port device team_slave_1 removed
[  340.072835][ T4227] team0 (unregistering): Port device team_slave_0 removed
[  340.088317][ T4652] Bluetooth: hci3: command 0x041b tx timeout
[  340.109566][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.130602][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.193782][ T4227] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  340.321582][T12429] loop5: detected capacity change from 0 to 64
[  340.424474][   T26] audit: type=1800 audit(1785205796.639:76): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2900" name="file1" dev="loop5" ino=5 res=0 errno=0
[  340.449693][ T4227] bond0 (unregistering): Released all slaves
[  340.574982][T12431] loop5: detected capacity change from 0 to 128
[  340.597952][ T4655] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[  340.681574][T12431] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  340.694635][ T4655] usb 4-1: USB disconnect, device number 22
[  340.719377][T12286] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  340.719772][ T4655] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[  340.974289][T12286] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  341.040404][T12286] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  341.115495][T12286] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  341.611379][T12286] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.772028][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  341.793936][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  341.839167][T12286] 8021q: adding VLAN 0 to HW filter on device team0
[  341.881808][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  341.911117][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  341.957368][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.964672][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.027670][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  342.071324][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  342.090950][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  342.117484][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.124884][ T7533] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.154439][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  342.168351][ T5967] Bluetooth: hci3: command 0x040f tx timeout
[  342.176582][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  342.247555][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  342.294118][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  342.323779][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  342.374522][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  342.404233][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  342.429398][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  342.454634][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  342.483424][T12286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  342.506739][T12286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  342.531096][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  342.564080][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  342.566664][T12490] loop5: detected capacity change from 0 to 256
[  342.698738][T12461] loop7: detected capacity change from 0 to 40427
[  342.742094][   T26] audit: type=1800 audit(1785205798.959:77): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2925" name="file1" dev="loop5" ino=1048707 res=0 errno=0
[  342.766974][T12490] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  342.780888][T12490] FAT-fs (loop5): Filesystem has been set read-only
[  342.824198][T12461] F2FS-fs (loop7): invalid crc value
[  342.941310][T12461] F2FS-fs (loop7): Found nat_bits in checkpoint
[  343.115678][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  343.154113][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  343.192106][T12286] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.219496][T12461] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  343.426185][T12522] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2928'.
[  343.469825][T10555] attempt to access beyond end of device
[  343.469825][T10555] loop7: rw=2049, want=45104, limit=40427
[  343.545719][T12524] loop3: detected capacity change from 0 to 4096
[  343.626412][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2930'.
[  343.656201][T12531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  343.758194][   T26] audit: type=1800 audit(1785205799.979:78): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2940" name="bus" dev="loop3" ino=18 res=0 errno=0
[  343.810404][T12536] loop5: detected capacity change from 0 to 8
[  343.999055][T12536] SQUASHFS error: Unable to read inode 0x11f
[  344.067898][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  344.079891][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  344.180917][T12286] device veth0_vlan entered promiscuous mode
[  344.205080][T12542] loop3: detected capacity change from 0 to 512
[  344.221593][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  344.248742][ T4655] Bluetooth: hci3: command 0x0419 tx timeout
[  344.266396][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  344.299160][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  344.331204][T12542] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  344.331995][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  344.360554][T12546] loop7: detected capacity change from 0 to 512
[  344.380627][T12542] EXT4-fs (loop3): invalid journal inode
[  344.386470][T12542] EXT4-fs (loop3): can't get journal size
[  344.403342][T12544] loop5: detected capacity change from 0 to 4096
[  344.405054][T12286] device veth1_vlan entered promiscuous mode
[  344.431136][T12542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[  344.440320][T12542] System zones: 1-12, 13-13
[  344.447037][T12542] EXT4-fs (loop3): 1 truncate cleaned up
[  344.453893][T12542] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback.
[  344.485728][   T26] audit: type=1800 audit(1785205800.699:79): pid=12542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2945" name="file1" dev="loop3" ino=15 res=0 errno=0
[  344.635857][T12546] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  344.648890][T12286] device veth0_macvtap entered promiscuous mode
[  344.679199][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  344.699412][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  344.713081][T12555] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  344.765517][T12546] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  344.847937][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  344.940226][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  344.968733][T12546] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  345.013336][T12286] device veth1_macvtap entered promiscuous mode
[  345.049903][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  345.072357][T12546] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  345.084719][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  345.158181][T12546] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.2929: Failed to acquire dquot type 0
[  345.182237][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.234836][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.264190][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.295855][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.326468][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.361616][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.381268][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.401757][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.411973][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.423179][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.434270][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.445628][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.516137][T12286] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.549192][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.628250][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.657035][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.695569][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.726161][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.790270][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.820788][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.851912][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.891324][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.916307][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.926971][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.947432][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.987217][T12286] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.049171][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  346.067423][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  346.077578][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  346.161212][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  346.195034][T12286] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.216976][T12286] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.246221][T12286] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.269852][T12286] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.519613][T12603] loop3: detected capacity change from 0 to 512
[  346.569596][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.598241][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.635407][ T7533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  346.748856][ T5449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.770092][T12603] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  346.794353][ T5449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.802066][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  346.818476][T12603] ext4 filesystem being mounted at /592/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.073514][T12619] loop8: detected capacity change from 0 to 256
[  347.518237][T12593] loop5: detected capacity change from 0 to 32768
[  347.562323][T12595] loop7: detected capacity change from 0 to 32768
[  347.765590][T12593] XFS (loop5): Mounting V5 Filesystem
[  347.780568][T12595] XFS (loop7): Mounting V5 Filesystem
[  347.890982][T12660] loop6: detected capacity change from 0 to 164
[  347.902770][T12653] loop8: detected capacity change from 0 to 256
[  347.940698][T12595] XFS (loop7): Ending clean mount
[  347.953201][T12593] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  347.967108][T12595] XFS (loop7): Quotacheck needed: Please wait.
[  348.007700][T12593] XFS (loop5): Starting recovery (logdev: internal)
[  348.041267][T12653] exfat: Deprecated parameter 'utf8'
[  348.116729][T12653] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  348.135209][T12595] XFS (loop7): Quotacheck: Done.
[  348.135544][T12593] XFS (loop5): Ending recovery (logdev: internal)
[  348.206372][T12593] XFS (loop5): Quotacheck needed: Please wait.
[  348.342863][T10555] XFS (loop7): Unmounting Filesystem
[  348.417913][T12593] XFS (loop5): Quotacheck: Done.
[  348.822732][ T9801] XFS (loop5): Unmounting Filesystem
[  349.094238][ T4278] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  349.348068][ T4278] usb 9-1: Using ep0 maxpacket: 32
[  349.488337][ T4278] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  349.676022][T12712] loop5: detected capacity change from 0 to 512
[  349.688393][ T4278] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  349.718046][ T4278] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.736494][ T4278] usb 9-1: Product: syz
[  349.746637][ T4278] usb 9-1: Manufacturer: syz
[  349.757924][ T4278] usb 9-1: SerialNumber: syz
[  349.810762][T12712] EXT4-fs (loop5): Test dummy encryption mode enabled
[  349.821905][ T4278] snd-ua101 9-1:1.1: sample format descriptor not found
[  349.839126][T12712] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  349.850030][T12717] program syz.3.2980 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  349.864457][ T4278] snd-ua101 9-1:1.0: invalid num_altsetting
[  349.910922][T12712] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  349.972288][T12712] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=errors=continue,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  350.031800][T12733] 9p: Unknown uid 18446744073709551615
[  350.120178][ T4233] usb 9-1: USB disconnect, device number 2
[  350.282946][T12744] loop5: detected capacity change from 0 to 64
[  350.912301][T12773] loop3: detected capacity change from 0 to 512
[  350.920066][T12774] netlink: 'syz.8.3003': attribute type 12 has an invalid length.
[  351.397049][T12736] loop6: detected capacity change from 0 to 32768
[  351.428195][T12789] loop8: detected capacity change from 0 to 2048
[  351.556668][T12789] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  351.593579][T12736] XFS (loop6): Mounting V5 Filesystem
[  351.629854][   T26] audit: type=1800 audit(1785205807.849:80): pid=12789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3008" name="file1" dev="loop8" ino=15 res=0 errno=0
[  351.646962][T12789] EXT4-fs (loop8): Online defrag not supported with bigalloc
[  351.742903][T12736] XFS (loop6): Ending clean mount
[  351.795784][T12770] loop7: detected capacity change from 0 to 32768
[  351.937030][T12770] XFS (loop7): Mounting V5 Filesystem
[  352.143929][T12770] XFS (loop7): Ending clean mount
[  352.158943][T12793] loop3: detected capacity change from 0 to 32768
[  352.182602][T12819] sp0: Synchronizing with TNC
[  352.192250][ T9900] XFS (loop6): Unmounting Filesystem
[  352.244950][T12770] XFS (loop7): Quotacheck needed: Please wait.
[  352.359958][T12793] XFS (loop3): Mounting V5 Filesystem
[  352.393221][T12828] loop8: detected capacity change from 0 to 16
[  352.462676][T12828] erofs: (device loop8): mounted with root inode @ nid 36.
[  352.547349][T12828] erofs: (device loop8): z_erofs_readahead: readahead error at page 2 @ nid 89
[  352.558796][T12770] XFS (loop7): Quotacheck: Done.
[  352.589200][T12793] XFS (loop3): Ending clean mount
[  352.628765][   T26] audit: type=1800 audit(1785205808.849:81): pid=12770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3001" name="bus" dev="loop7" ino=9291 res=0 errno=0
[  352.653174][ T4188] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[  352.752631][T12828] erofs: (device loop8): z_erofs_readahead: readahead error at page 10 @ nid 89
[  352.837994][ T4194] XFS (loop3): Unmounting Filesystem
[  352.866312][T12828] erofs: (device loop8): z_erofs_readahead: readahead error at page 9 @ nid 89
[  352.963537][T10555] XFS (loop7): Unmounting Filesystem
[  352.973560][T12828] erofs: (device loop8): z_erofs_readahead: readahead error at page 8 @ nid 89
[  353.099125][T12828] erofs: (device loop8): z_erofs_readahead: readahead error at page 7 @ nid 89
[  353.118253][T12828] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 89
[  353.198076][T12828] erofs: (device loop8): z_erofs_readahead: readahead error at page 5 @ nid 89
[  353.207090][T12828] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89
[  353.265817][T12842] openvswitch: netlink: Actions may not be safe on all matching packets
[  353.354239][T12828] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[  353.358146][T12834] syz.8.3015 (12834): drop_caches: 2
[  353.473550][   T26] audit: type=1800 audit(1785205809.689:82): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3015" name="file3" dev="loop8" ino=89 res=0 errno=0
[  353.634446][T12853] loop6: detected capacity change from 0 to 512
[  354.102699][T12853] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  354.113856][T12865] program syz.8.3026 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  354.161936][T12853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  354.211122][T12853] System zones: 1-12
[  354.261373][T12853] EXT4-fs (loop6): 1 truncate cleaned up
[  354.286543][T12853] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback.
[  354.349327][T12869] loop8: detected capacity change from 0 to 8
[  354.440135][T12863] loop3: detected capacity change from 0 to 40427
[  354.509603][T12863] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  354.516093][T12863] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  354.603766][T12863] F2FS-fs (loop3): invalid crc value
[  354.686650][T12863] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  354.856959][T12881] loop5: detected capacity change from 0 to 4096
[  354.958972][T12863] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  354.966408][T12863] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  355.127411][T12895] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  355.351425][T12901] i2c i2c-0: new_device: Can't parse I2C address
[  355.907519][T12886] loop7: detected capacity change from 0 to 32768
[  355.969031][T12917] loop5: detected capacity change from 0 to 64
[  356.028773][T12886] JBD2: Ignoring recovery information on journal
[  356.036187][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3050'.
[  356.304237][T12886] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  356.357615][T12898] loop8: detected capacity change from 0 to 32768
[  356.493569][T12941] loop6: detected capacity change from 0 to 256
[  356.622325][T12898] XFS (loop8): Mounting V5 Filesystem
[  356.718701][T12951] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3056'.
[  356.737038][T12944] OCFS2: ERROR (device loop7): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #74: signature = 
[  356.799055][T12898] XFS (loop8): Ending clean mount
[  356.819591][T12944] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  356.830955][T12944] OCFS2: File system is now read-only.
[  356.836475][T12944] (syz.7.3020,12944,1):ocfs2_assign_bh:2414 ERROR: status = -30
[  356.847281][T12944] (syz.7.3020,12944,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -30
[  356.861419][T12944] (syz.7.3020,12944,1):ocfs2_reserve_suballoc_bits:811 ERROR: status = -30
[  356.870410][T12944] (syz.7.3020,12944,1):ocfs2_reserve_new_inode:1113 ERROR: status = -30
[  356.903319][T12944] (syz.7.3020,12944,1):ocfs2_reserve_new_inode:1136 ERROR: status = -30
[  356.957536][T12944] (syz.7.3020,12944,1):ocfs2_symlink:1871 ERROR: status = -30
[  356.995171][T12944] (syz.7.3020,12944,1):ocfs2_symlink:2065 ERROR: status = -30
[  357.034208][T12286] XFS (loop8): Unmounting Filesystem
[  357.132503][T10555] ocfs2: Unmounting device (7,7) on (node local)
[  357.237207][    C1] vkms_vblank_simulate: vblank timer overrun
[  357.560062][T12972] loop6: detected capacity change from 0 to 512
[  357.669089][T12972] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  357.737237][T12972] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.751058][T12956] loop3: detected capacity change from 0 to 32768
[  357.985428][T12956] XFS (loop3): Mounting V5 Filesystem
[  358.174934][T12956] XFS (loop3): Ending clean mount
[  358.368246][ T4194] XFS (loop3): Unmounting Filesystem
[  358.372141][T13004] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  358.650021][T13011] tipc: Started in network mode
[  358.659375][T13011] tipc: Node identity ac14140f, cluster identity 4711
[  358.689214][T13011] tipc: New replicast peer: 255.255.255.255
[  358.699030][T13011] tipc: Enabled bearer <udp:syz2>, priority 10
[  359.007967][T13021] program syz.8.3084 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  359.029471][T12976] set_capacity_and_notify: 1 callbacks suppressed
[  359.029488][T12976] loop7: detected capacity change from 0 to 40427
[  359.225373][T12976] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  359.256067][T12976] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  359.259867][T13027] loop3: detected capacity change from 0 to 4096
[  359.302847][T12976] F2FS-fs (loop7): invalid crc value
[  359.371911][T12976] F2FS-fs (loop7): Found nat_bits in checkpoint
[  359.562453][T12976] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  359.582601][T12976] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  359.819944][ T4652] tipc: Node number set to 2886997007
[  359.875011][T13018] loop6: detected capacity change from 0 to 32768
[  360.482406][T13052] loop8: detected capacity change from 0 to 4096
[  360.598006][T13052] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512)
[  361.267329][T13078] loop6: detected capacity change from 0 to 512
[  361.847120][T13060] loop5: detected capacity change from 0 to 32768
[  362.034531][T13060] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  362.093275][T13066] loop7: detected capacity change from 0 to 32768
[  362.134239][T13066] 
[  362.134239][T13066]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  362.134239][T13066] 
[  362.251330][   T26] audit: type=1800 audit(1785205818.469:83): pid=13066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3094" name="file1" dev="loop7" ino=4 res=0 errno=0
[  362.271934][    C1] vkms_vblank_simulate: vblank timer overrun
[  362.285270][ T9801] ocfs2: Unmounting device (7,5) on (node local)
[  362.377287][T10555] 
[  362.377287][T10555]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  362.377287][T10555] 
[  362.421976][T10555] 
[  362.421976][T10555]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  362.421976][T10555] 
[  362.851780][T13100] loop8: detected capacity change from 0 to 32768
[  362.907432][T13121] loop5: detected capacity change from 0 to 8192
[  363.031975][   T26] audit: type=1800 audit(1785205819.249:84): pid=13121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3105" name="file2" dev="loop5" ino=1048716 res=0 errno=0
[  363.053804][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.086841][T13121] attempt to access beyond end of device
[  363.086841][T13121] loop5: rw=0, want=57848, limit=8192
[  363.106736][T13100] XFS (loop8): Mounting V5 Filesystem
[  363.144871][T13121] Buffer I/O error on dev loop5, logical block 57847, async page read
[  363.226182][T13100] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  363.314616][T13150] netlink: 'syz.3.3123': attribute type 1 has an invalid length.
[  363.347407][T13150] netlink: 'syz.3.3123': attribute type 1 has an invalid length.
[  363.363359][T13100] XFS (loop8): Starting recovery (logdev: internal)
[  363.444383][T13100] XFS (loop8): Ending recovery (logdev: internal)
[  363.665755][T13100] XFS (loop8): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8
[  363.687601][T13100] XFS (loop8): Unmount and run xfs_repair
[  363.758145][T12286] XFS (loop8): Unmounting Filesystem
[  363.893634][T13166] loop5: detected capacity change from 0 to 24
[  364.854797][T13190] loop5: detected capacity change from 0 to 8192
[  364.945368][T13190] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  364.976625][T13190] REISERFS (device loop5): using ordered data mode
[  364.986473][T13190] reiserfs: using flush barriers
[  365.000397][T13190] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  365.118735][T13190] REISERFS (device loop5): checking transaction log (loop5)
[  365.167956][ T5239] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  365.481856][T13190] REISERFS (device loop5): Using r5 hash to sort names
[  365.511392][T13190] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  365.528534][ T4652] Bluetooth: hci1: command 0x0406 tx timeout
[  365.536656][T13229] loop6: detected capacity change from 0 to 1024
[  365.608813][ T5239] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.629296][ T5239] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  365.647004][T13233] loop3: detected capacity change from 0 to 164
[  365.687989][ T5239] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  365.702908][T13229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  365.730430][ T5239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.761790][ T5239] usb 9-1: config 0 descriptor??
[  365.820434][ T5239] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  365.831518][T13190] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3385, free_space(entry_count) 2
[  365.868533][ T5239] dvb-usb: bulk message failed: -22 (3/0)
[  365.891652][ T5239] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  365.908140][T13190] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  365.928557][T13190] REISERFS (device loop5): Remounting filesystem read-only
[  365.974254][ T5239] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  366.001709][T13205] dvb-usb: bulk message failed: -22 (4/0)
[  366.028000][ T5239] usb 9-1: media controller created
[  366.065667][ T5239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  366.121799][ T5239] dvb-usb: bulk message failed: -22 (6/0)
[  366.149621][ T5239] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  366.184282][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3140'.
[  366.212065][T13245] loop3: detected capacity change from 0 to 1024
[  366.224154][ T5239] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input28
[  366.269296][ T5239] dvb-usb: schedule remote query interval to 150 msecs.
[  366.276843][ T5239] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  366.330932][ T5239] usb 9-1: USB disconnect, device number 3
[  366.427195][ T5239] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  366.449634][T13209] loop7: detected capacity change from 0 to 40427
[  366.635670][T13209] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  366.645844][T13209] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  366.706211][T13209] F2FS-fs (loop7): invalid crc value
[  366.778071][T13209] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  366.937649][T13274] loop8: detected capacity change from 0 to 1024
[  367.063341][T13209] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  367.097736][T13209] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  367.123568][T13288] loop6: detected capacity change from 0 to 256
[  367.135504][T13292] loop3: detected capacity change from 0 to 64
[  367.138158][T13274] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #3: block 2: comm syz.8.3150: lblock 2 mapped to illegal pblock 2 (length 1)
[  367.298269][T13288] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  367.320873][T13274] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  367.357995][T13274] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #3: block 48: comm syz.8.3150: lblock 0 mapped to illegal pblock 48 (length 1)
[  367.402551][T13301] loop5: detected capacity change from 0 to 64
[  367.411473][T13274] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  367.422323][T13288] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008)
[  367.432835][ T4194] hfs: node 4:3 still has 1 user(s)!
[  367.447477][T13274] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.3150: Failed to acquire dquot type 0
[  367.463669][T13288] exFAT-fs (loop6): Filesystem has been set read-only
[  367.481098][T13274] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  367.508805][T13288] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805e78b560 iblock : 8, err : -5)
[  367.558237][T13288] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008)
[  367.563159][T13274] EXT4-fs error (device loop8): ext4_evict_inode:284: inode #11: comm syz.8.3150: mark_inode_dirty error
[  367.586643][T13305] loop3: detected capacity change from 0 to 1024
[  367.629300][T13287] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008)
[  367.645934][T13274] EXT4-fs warning (device loop8): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  367.684417][T13274] EXT4-fs (loop8): 1 orphan inode deleted
[  367.714850][T13274] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none.
[  367.736773][    C1] vkms_vblank_simulate: vblank timer overrun
[  367.776161][ T1158] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  367.844915][ T1158] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  367.918258][ T1158] EXT4-fs error (device loop8): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0
[  368.009441][T13313] FAT-fs (loop3): Directory bread(block 199916) failed
[  368.047924][T13313] FAT-fs (loop3): Directory bread(block 199917) failed
[  368.085603][T13313] FAT-fs (loop3): Directory bread(block 199918) failed
[  368.111023][T13274] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz.8.3150: Invalid inode table block 1 in block_group 0
[  368.116927][T13313] FAT-fs (loop3): Directory bread(block 199919) failed
[  368.208045][T13313] FAT-fs (loop3): Directory bread(block 199920) failed
[  368.220620][T13313] FAT-fs (loop3): Directory bread(block 199921) failed
[  368.227557][T13313] FAT-fs (loop3): Directory bread(block 199922) failed
[  368.268254][T13274] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  368.328213][T13274] EXT4-fs error (device loop8): ext4_setattr:5490: inode #2: comm syz.8.3150: mark_inode_dirty error
[  368.398187][T13328] netlink: 'syz.6.3165': attribute type 3 has an invalid length.
[  368.406066][T13328] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3165'.
[  368.421033][T13313] FAT-fs (loop3): Directory bread(block 199923) failed
[  368.515071][T13327] EXT4-fs (loop7): Ignoring removed orlov option
[  368.649591][T13327] EXT4-fs (loop7): 1 truncate cleaned up
[  368.653661][ T7533] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  368.655288][T13327] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,sysvgroups,orlov,noauto_da_alloc,init_itable,discard,journal_ioprio=0x0000000000000004,errors=remount-ro,nodiscard,. Quota mode: none.
[  368.833774][T13313] FAT-fs (loop3): FAT read failed (blocknr 128)
[  368.861002][ T7533] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  368.874664][T13337] exfat: Deprecated parameter 'namecase'
[  368.893698][ T7533] EXT4-fs error (device loop8): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0
[  368.908081][T13337] exfat: Deprecated parameter 'utf8'
[  368.913652][T13337] exfat: Deprecated parameter 'namecase'
[  368.935787][T13337] exfat: Deprecated parameter 'utf8'
[  368.948114][T12286] EXT4-fs error (device loop8): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  368.998692][T13327] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3158: invalid indirect mapped block 234881024 (level 0)
[  369.003938][T13337] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  369.028270][T12286] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  369.086865][T12286] EXT4-fs error (device loop8): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  369.167437][T13327] EXT4-fs (loop7): Remounting filesystem read-only
[  369.842451][T13356] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  369.909620][T13356] ext4 filesystem being mounted at /640/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  369.966600][T13373] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  369.992622][T13373] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  370.017543][T13356] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3174: bg 0: block 345: padding at end of block bitmap is not set
[  370.053205][T13356] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  370.077960][ T6499] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  370.100839][T13356] EXT4-fs (loop3): This should not happen!! Data will be lost
[  370.100839][T13356] 
[  370.368829][ T6499] usb 6-1: Using ep0 maxpacket: 16
[  370.383582][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3185'.
[  370.518149][ T6499] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  370.539839][ T6499] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  370.560639][T13393] set_capacity_and_notify: 6 callbacks suppressed
[  370.560657][T13393] loop3: detected capacity change from 0 to 256
[  370.582036][T13391] loop8: detected capacity change from 0 to 1024
[  370.640303][T13391] hfsplus: xattr exists yet
[  370.728367][T13393] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[  370.778147][ T6499] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  370.797393][ T6499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.844632][ T6499] usb 6-1: Product: syz
[  370.850033][ T6499] usb 6-1: Manufacturer: syz
[  370.857926][ T6499] usb 6-1: SerialNumber: syz
[  370.917053][T13401] loop8: detected capacity change from 0 to 2048
[  370.936947][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  370.980145][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  370.992793][T13401] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  370.996207][ T4655] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  371.026205][T13401] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  371.056190][T13401] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  371.073949][T13401] EXT4-fs (loop8): This should not happen!! Data will be lost
[  371.073949][T13401] 
[  371.084375][T13403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.086781][T13401] EXT4-fs (loop8): Total free blocks count 0
[  371.115657][T13406] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  371.117417][T13401] EXT4-fs (loop8): Free/Dirty block details
[  371.137868][T13401] EXT4-fs (loop8): free_blocks=2415919504
[  371.150240][T13406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  371.153904][T13401] EXT4-fs (loop8): dirty_blocks=32
[  371.163028][T13401] EXT4-fs (loop8): Block reservation details
[  371.170065][T13401] EXT4-fs (loop8): i_reserved_data_blocks=2
[  371.185228][T13406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.185420][T13407] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  371.215445][T13407] EXT4-fs (loop8): This should not happen!! Data will be lost
[  371.215445][T13407] 
[  371.228190][ T6499] usb 6-1: 0:2 : does not exist
[  371.296305][ T6499] usb 6-1: USB disconnect, device number 6
[  371.334482][ T4655] usb 8-1: Using ep0 maxpacket: 8
[  371.348940][ T4665] udevd[4665]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  371.478028][ T4655] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.504726][ T4655] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  371.523672][ T4655] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.553929][ T4655] usb 8-1: config 0 descriptor??
[  371.610174][ T4655] gspca_main: vc032x-2.14.0 probing 046d:0892
[  371.947288][T13415] loop8: detected capacity change from 0 to 32768
[  372.020186][T13415] JBD2: Ignoring recovery information on journal
[  372.034683][T13428] overlayfs: upper fs does not support tmpfile.
[  372.189758][T13415] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  372.278093][ T4655] gspca_vc032x: reg_r err -71
[  372.284248][ T4655] vc032x: probe of 8-1:0.0 failed with error -71
[  372.328604][ T4655] usb 8-1: USB disconnect, device number 8
[  372.344295][T13442] loop3: detected capacity change from 0 to 256
[  372.400725][T12286] ocfs2: Unmounting device (7,8) on (node local)
[  372.679459][T13452] loop3: detected capacity change from 0 to 512
[  372.919866][    C1] vkms_vblank_simulate: vblank timer overrun
[  373.285276][T13479] loop7: detected capacity change from 0 to 256
[  373.680840][T13493] loop7: detected capacity change from 0 to 512
[  373.690475][ T5242] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  373.737674][T13493] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  373.772442][T13493] EXT4-fs (loop7): inline encryption not supported
[  373.790997][T13493] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  373.807890][T13493] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  373.868123][T13493] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  373.903347][T13493] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  373.925553][T13493] EXT4-fs (loop7): orphan cleanup on readonly fs
[  373.981381][T13493] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3232: bg 0: block 34: padding at end of block bitmap is not set
[  374.005982][T13503] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3236'.
[  374.026026][T13493] Quota error (device loop7): write_blk: dquota write failed
[  374.051980][T13493] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  374.082758][T13493] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.3232: Failed to acquire dquot type 1
[  374.121617][ T5242] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  374.136361][T13493] EXT4-fs (loop7): 1 truncate cleaned up
[  374.137872][ T5242] usb 4-1: config 0 has no interface number 0
[  374.158050][ T5242] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.182487][T13493] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback.
[  374.198629][ T5242] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.238192][ T5242] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  374.277910][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.319152][ T5242] usb 4-1: config 0 descriptor??
[  374.436957][T13514] loop5: detected capacity change from 0 to 256
[  374.454008][T13514] exfat: Deprecated parameter 'utf8'
[  374.459693][T13514] exfat: Deprecated parameter 'utf8'
[  374.465249][T13514] exfat: Deprecated parameter 'utf8'
[  374.587706][T13514] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d)
[  374.779303][T13524] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3247'.
[  374.816051][ T5242] asus 0003:0B05:17E0.0012: unknown main item tag 0x0
[  374.840676][ T5242] asus 0003:0B05:17E0.0012: unknown main item tag 0x0
[  374.873129][ T5242] asus 0003:0B05:17E0.0012: unknown main item tag 0x0
[  374.897951][ T5242] asus 0003:0B05:17E0.0012: unknown main item tag 0x0
[  374.931123][T13528] loop8: detected capacity change from 0 to 1024
[  374.945604][ T5242] asus 0003:0B05:17E0.0012: unknown main item tag 0x0
[  374.962734][T13526] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  374.977441][ T5242] asus 0003:0B05:17E0.0012: unknown main item tag 0x0
[  374.997281][ T5242] asus 0003:0B05:17E0.0012: unknown main item tag 0x0
[  375.026660][ T5242] asus 0003:0B05:17E0.0012: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.3-1/input2
[  375.120373][ T6499] usb 4-1: USB disconnect, device number 23
[  375.341105][T13533] fido_id[13533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  375.768252][ T6499] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  375.768272][ T4647] Bluetooth: hci0: command 0x0406 tx timeout
[  376.065814][T13561] set_capacity_and_notify: 1 callbacks suppressed
[  376.065831][T13561] loop3: detected capacity change from 0 to 128
[  376.172036][ T6499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.198158][ T6499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.217534][ T6499] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  376.227226][ T6499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.247694][ T6499] usb 6-1: config 0 descriptor??
[  376.557521][T13559] loop8: detected capacity change from 0 to 32768
[  376.598216][T13571] loop9: detected capacity change from 0 to 7
[  376.632094][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.643346][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.659900][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.671534][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.681631][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.693917][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.711610][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.723428][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.740259][ T6499] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0
[  376.747897][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.760080][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.762609][ T6499] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0
[  376.769623][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.787890][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.806459][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.810684][ T6499] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0
[  376.818450][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.828186][T13571] ldm_validate_partition_table(): Disk read failed.
[  376.873318][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.884600][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.893773][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.905734][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.919033][ T6499] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0
[  376.920042][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.931286][ T6499] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0
[  376.938419][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  376.952865][T13571] Dev loop9: unable to read RDB block 0
[  376.977246][ T6499] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0
[  376.989249][T13571]  loop9: unable to read partition table
[  377.006650][T13571] loop9: partition table beyond EOD, truncated
[  377.032792][T13571] loop_reread_partitions: partition scan of loop9 (���������S�j̳��P=��?�}X���	���5�
`���㫅�) failed (rc=-5)
[  377.040122][ T6499] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0
[  377.122454][ T6499] hid-thrustmaster 0003:044F:B65D.0013: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[  377.135236][ T6499] hid-thrustmaster 0003:044F:B65D.0013: Wrong number of endpoints?
[  377.178270][T13583] loop8: detected capacity change from 0 to 512
[  377.237857][    C1] hid-thrustmaster 0003:044F:B65D.0013: Unknown packet type 0x0, unable to proceed further with wheel init
[  377.358055][T13583] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[  377.372390][T13583] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.524106][ T5242] usb 6-1: USB disconnect, device number 7
[  377.589416][T13593] fido_id[13593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:044F:B65D.0013/report_descriptor': No such file or directory
[  377.683417][T13606] bridge0: port 2(bridge_slave_1) entered listening state
[  377.736116][T13606] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.338691][T13619] input: syz1 as /devices/virtual/input/input29
[  378.521595][T13603] loop3: detected capacity change from 0 to 32768
[  378.564791][T13607] loop6: detected capacity change from 0 to 32768
[  378.576378][T13602] loop8: detected capacity change from 0 to 40427
[  378.608420][T13603] (syz.3.3279,13603,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  378.658497][T13603] (syz.3.3279,13603,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  378.684451][T13602] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  378.696462][T13602] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  378.768206][T13602] F2FS-fs (loop8): invalid crc value
[  378.783395][T13603] JBD2: Ignoring recovery information on journal
[  378.816601][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  378.824098][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  378.876698][T13631] program syz.7.3292 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  378.905528][T13634] loop5: detected capacity change from 0 to 128
[  378.919635][T13602] F2FS-fs (loop8): Found nat_bits in checkpoint
[  378.942228][T13603] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  379.028215][T13603] (syz.3.3279,13603,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  379.148606][T13634] VFS: Found a Xenix FS (block size = 512) on device loop5
[  379.166102][T13602] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  379.185999][T13602] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  379.357508][ T4194] ocfs2: Unmounting device (7,3) on (node local)
[  379.379632][T13634] sysv_free_block: trying to free block not in datazone
[  379.456285][T12286] attempt to access beyond end of device
[  379.456285][T12286] loop8: rw=2049, want=40968, limit=40427
[  379.477026][ T9801] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  379.842651][T13652] loop7: detected capacity change from 0 to 256
[  379.905012][T13656] loop5: detected capacity change from 0 to 1024
[  379.934117][T13652] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  379.961087][T13652] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  380.002632][T13656] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  380.049820][T13652] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  380.097542][T13656] EXT4-fs (loop5): orphan cleanup on readonly fs
[  380.169247][T13656] EXT4-fs error (device loop5): ext4_quota_enable:6444: comm syz.5.3304: inode #17152: comm syz.5.3304: iget: illegal inode #
[  380.190797][T13656] EXT4-fs (loop5): Remounting filesystem read-only
[  380.197365][T13656] EXT4-fs error (device loop5): ext4_quota_enable:6447: comm syz.5.3304: Bad quota inode: 17152, type: 2
[  380.273919][T13656] EXT4-fs (loop5): Remounting filesystem read-only
[  380.280841][T13656] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix.
[  380.296735][T13656] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  380.303657][T13656] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,noauto_da_alloc,errors=remount-ro,jqfmt=vfsv0,discard,usrjquota=,grpquota,nojournal_checksum,. Quota mode: writeback.
[  380.350369][T13666] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  380.552976][T13669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  380.561539][T13669] IPv6: NLM_F_CREATE should be set when creating new route
[  380.568958][T13669] IPv6: NLM_F_CREATE should be set when creating new route
[  380.576328][T13669] IPv6: NLM_F_CREATE should be set when creating new route
[  380.888423][ T4647] Bluetooth: hci4: command 0x0406 tx timeout
[  380.909674][T13679] rdma_rxe: ignoring netdev event = 30 for syz_tun
[  380.937318][T13679] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  380.978387][T13679] infiniband syz1: set active
[  381.009883][T13679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  381.060613][T13679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.070434][T13660] set_capacity_and_notify: 2 callbacks suppressed
[  381.070449][T13660] loop3: detected capacity change from 0 to 32768
[  381.254456][T13660] XFS (loop3): Mounting V5 Filesystem
[  381.273324][T13680] rdma_rxe: ignoring netdev event = 30 for syz_tun
[  381.284153][T13670] loop7: detected capacity change from 0 to 32768
[  381.292244][T13680] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  381.300661][T13680] infiniband syz1: set active
[  381.322004][T13680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  381.335829][T13680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.376117][T13670] (syz.7.3308,13670,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  381.396934][T13670] (syz.7.3308,13670,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  381.401552][T13692] loop8: detected capacity change from 0 to 512
[  381.471864][T13660] XFS (loop3): Ending clean mount
[  381.480151][T13660] XFS (loop3): Quotacheck needed: Please wait.
[  381.504231][T13692] EXT4-fs (loop8): Test dummy encryption mode enabled
[  381.532776][T13692] EXT4-fs (loop8): Ignoring removed bh option
[  381.539027][T13692] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  381.554398][T13670] JBD2: Ignoring recovery information on journal
[  381.620177][T13692] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #15: comm syz.8.3314: inode has both inline data and extents flags
[  381.691763][T13692] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.3314: couldn't read orphan inode 15 (err -117)
[  381.705517][T13660] XFS (loop3): Quotacheck: Done.
[  381.712379][T13692] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,init_itable=0x0000000000000001,test_dummy_encryption,nouid32,max_dir_size_kb=0x0000000000000003,bh,data=journal,,errors=continue. Quota mode: none.
[  381.785868][   T26] audit: type=1800 audit(1785205837.999:85): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3314" name="file3" dev="loop8" ino=16 res=0 errno=0
[  381.817552][T13670] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  381.850333][T13670] (syz.7.3308,13670,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  381.868871][    C1] vkms_vblank_simulate: vblank timer overrun
[  381.870865][   T26] audit: type=1804 audit(1785205837.999:86): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3314" name="/newroot/67/bus/file2" dev="loop8" ino=16 res=1 errno=0
[  381.937914][   T26] audit: type=1800 audit(1785205837.999:87): pid=13660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3305" name="bus" dev="loop3" ino=9291 res=0 errno=0
[  381.981037][ T4188] block nbd0: Receive control failed (result -32)
[  382.068256][ T4194] XFS (loop3): Unmounting Filesystem
[  382.220409][T10555] ocfs2: Unmounting device (7,7) on (node local)
[  382.469897][    C1] vkms_vblank_simulate: vblank timer overrun
[  382.636338][    C1] vkms_vblank_simulate: vblank timer overrun
[  382.835334][T13714] loop7: detected capacity change from 0 to 4096
[  382.971396][T13705] loop8: detected capacity change from 0 to 32768
[  382.984639][T13714] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  383.084299][T13705] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.3316 (13705)
[  383.200768][T13705] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  383.225574][T13705] BTRFS info (device loop8): using free space tree
[  383.249698][T13705] BTRFS info (device loop8): has skinny extents
[  383.277007][T13708] loop5: detected capacity change from 0 to 32768
[  383.417808][T13708] XFS (loop5): Mounting V5 Filesystem
[  383.519116][T13708] XFS (loop5): Ending clean mount
[  383.627084][T13705] BTRFS info (device loop8): enabling ssd optimizations
[  383.658600][ T9801] XFS (loop5): Unmounting Filesystem
[  383.824582][T13766] loop3: detected capacity change from 0 to 256
[  384.037685][T13766] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  384.271227][T13748] loop7: detected capacity change from 0 to 32768
[  384.276783][ T8474] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop8 scanned by udevd (8474)
[  384.428188][T13748] XFS (loop7): Mounting V5 Filesystem
[  384.465948][T13776] loop5: detected capacity change from 0 to 136
[  384.615188][T13748] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  384.732955][T13748] XFS (loop7): Starting recovery (logdev: internal)
[  384.803628][    C1] vkms_vblank_simulate: vblank timer overrun
[  384.891234][T13748] XFS (loop7): Ending recovery (logdev: internal)
[  385.108385][T13748] XFS (loop7): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8
[  385.157553][T13748] XFS (loop7): Unmount and run xfs_repair
[  385.211746][   T26] audit: type=1326 audit(1785205841.429:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13789 comm="syz.8.3340" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d78fe99 code=0x7ffc0000
[  385.235898][    C1] vkms_vblank_simulate: vblank timer overrun
[  385.248022][ T4647] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  385.263682][T10555] XFS (loop7): Unmounting Filesystem
[  385.345866][   T26] audit: type=1326 audit(1785205841.429:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13789 comm="syz.8.3340" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d78fe99 code=0x7ffc0000
[  385.435398][   T26] audit: type=1326 audit(1785205841.469:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13789 comm="syz.8.3340" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d78fe99 code=0x7ffc0000
[  385.506551][   T26] audit: type=1326 audit(1785205841.469:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13789 comm="syz.8.3340" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d78fe99 code=0x7ffc0000
[  385.534407][ T4647] usb 4-1: Using ep0 maxpacket: 8
[  385.540077][   T26] audit: type=1326 audit(1785205841.469:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13789 comm="syz.8.3340" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2d1d78fe99 code=0x7ffc0000
[  385.565192][   T26] audit: type=1326 audit(1785205841.469:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13789 comm="syz.8.3340" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d78fe99 code=0x7ffc0000
[  385.589683][    C1] vkms_vblank_simulate: vblank timer overrun
[  385.605542][   T26] audit: type=1326 audit(1785205841.479:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13789 comm="syz.8.3340" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d78fe99 code=0x7ffc0000
[  385.668223][ T4647] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  385.686325][ T4647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.770547][ T4647] pvrusb2: Hardware description: Terratec Grabster AV400
[  385.788051][ T4647] pvrusb2: **********
[  385.792090][ T4647] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  385.813929][ T4647] pvrusb2: Important functionality might not be entirely working.
[  385.834188][ T4647] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  385.856464][ T4647] pvrusb2: **********
[  385.879295][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3342'.
[  386.004619][ T2426] pvrusb2: Invalid write control endpoint
[  386.118728][ T2426] pvrusb2: Invalid write control endpoint
[  386.128018][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  386.147967][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  386.155739][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  386.186636][ T2426] pvrusb2: Device being rendered inoperable
[  386.196968][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  386.218053][T13782] pvrusb2: Killing an I2C write to 8 that is too large (desired=62 limit=61)
[  386.248051][ T5237] usb 4-1: USB disconnect, device number 24
[  386.254698][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  386.295769][ T2426] pvrusb2: Attached sub-driver cx25840
[  386.314072][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  386.346100][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  386.402061][T13816] netlink: 'syz.8.3352': attribute type 11 has an invalid length.
[  386.421507][T13816] netlink: 'syz.8.3352': attribute type 11 has an invalid length.
[  386.452011][T13816] netlink: 2704 bytes leftover after parsing attributes in process `syz.8.3352'.
[  387.215590][T13814] loop5: detected capacity change from 0 to 32768
[  387.231799][T13819] loop6: detected capacity change from 0 to 32768
[  387.352162][T13814] XFS (loop5): Mounting V5 Filesystem
[  387.392412][T13819] XFS (loop6): Mounting V5 Filesystem
[  387.534218][T13814] XFS (loop5): Ending clean mount
[  387.640771][T13819] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  387.694491][T13833] loop3: detected capacity change from 0 to 40427
[  387.731913][T13819] XFS (loop6): Starting recovery (logdev: internal)
[  387.743564][ T9801] XFS (loop5): Unmounting Filesystem
[  387.835526][T13833] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  387.848761][T13833] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  387.859111][T13819] XFS (loop6): Ending recovery (logdev: internal)
[  387.900805][T13833] F2FS-fs (loop3): invalid crc value
[  387.957414][T13833] F2FS-fs (loop3): Found nat_bits in checkpoint
[  388.028190][T13858] XFS (loop6): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8
[  388.092942][T13858] XFS (loop6): Unmount and run xfs_repair
[  388.165053][T13823] loop8: detected capacity change from 0 to 40427
[  388.213111][T13833] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  388.233357][ T9900] XFS (loop6): Unmounting Filesystem
[  388.240891][T13833] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  388.256284][T13823] F2FS-fs (loop8): Invalid SB checksum offset: 0
[  388.367917][T13823] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  388.458338][T13823] F2FS-fs (loop8): invalid crc value
[  388.493370][T13823] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  388.654681][ T4194] attempt to access beyond end of device
[  388.654681][ T4194] loop3: rw=2049, want=40968, limit=40427
[  388.726005][T13823] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  388.734190][T13823] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  388.816500][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  388.816515][   T26] audit: type=1800 audit(1785205845.029:106): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3355" name="file1" dev="loop8" ino=10 res=0 errno=0
[  388.899987][T13854] loop7: detected capacity change from 0 to 40427
[  388.925679][T12286] attempt to access beyond end of device
[  388.925679][T12286] loop8: rw=2049, want=45104, limit=40427
[  388.999658][T13854] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1ffff
[  389.012065][T13865] loop5: detected capacity change from 0 to 8192
[  389.093707][T13854] F2FS-fs (loop7): invalid crc value
[  389.112388][T13865] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  389.167995][T13865] REISERFS (device loop5): using ordered data mode
[  389.174922][T13865] reiserfs: using flush barriers
[  389.211727][T13854] F2FS-fs (loop7): Found nat_bits in checkpoint
[  389.337824][T13865] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  389.464699][T13865] REISERFS (device loop5): checking transaction log (loop5)
[  389.496288][T13854] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  389.499288][T13865] REISERFS (device loop5): Using r5 hash to sort names
[  389.541255][T13865] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  389.874614][T10555] attempt to access beyond end of device
[  389.874614][T10555] loop7: rw=2049, want=45104, limit=40427
[  389.898488][T13882] netlink: 'syz.3.3365': attribute type 5 has an invalid length.
[  390.082087][T13886] loop6: detected capacity change from 0 to 1024
[  390.384204][   T26] audit: type=1800 audit(1785205846.599:107): pid=13894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3372" name="file1" dev="loop6" ino=25 res=0 errno=0
[  390.404966][    C1] vkms_vblank_simulate: vblank timer overrun
[  390.486706][    C1] vkms_vblank_simulate: vblank timer overrun
[  390.608067][T13902] loop8: detected capacity change from 0 to 64
[  390.703888][T13902] hfs: request for non-existent node 131072 in B*Tree
[  390.754085][T13902] hfs: request for non-existent node 131072 in B*Tree
[  391.264627][T13919] loop3: detected capacity change from 0 to 16
[  391.379331][T13919] erofs: (device loop3): mounted with root inode @ nid 36.
[  391.434012][T13919] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  391.734066][T13911] loop7: detected capacity change from 0 to 32768
[  391.780053][T13928] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.918550][T13911] ERROR: (device loop7): dbAdjCtl: the maximum free buddy is not the old root
[  391.918550][T13911] 
[  391.960267][T13911] ERROR: (device loop7): remounting filesystem as read-only
[  392.067134][T13940] vhci_hcd: not connected 4
[  392.360435][T13945] gfs2: path_lookup on c::: returned error -2
[  392.794206][  T154] tipc: Subscription rejected, illegal request
[  392.826971][T13976] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3399'.
[  393.034225][T13981] set_capacity_and_notify: 1 callbacks suppressed
[  393.034243][T13981] loop7: detected capacity change from 0 to 4096
[  393.162451][T13993] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  393.382918][T14000] loop8: detected capacity change from 0 to 512
[  393.549951][T14000] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  393.581296][T14006] loop7: detected capacity change from 0 to 512
[  393.601926][T14000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  393.653958][T14000] System zones: 1-12
[  393.678779][T14000] EXT4-fs (loop8): 1 truncate cleaned up
[  393.685353][T14000] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,nodiscard,,errors=continue. Quota mode: none.
[  393.767095][T14006] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3408: invalid indirect mapped block 256 (level 2)
[  393.798761][T14006] EXT4-fs (loop7): Remounting filesystem read-only
[  393.808431][T14006] EXT4-fs (loop7): 2 truncates cleaned up
[  393.814215][T14006] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback.
[  393.907360][T13973] loop3: detected capacity change from 0 to 32768
[  393.972209][T14021] loop6: detected capacity change from 0 to 64
[  394.219767][T13973] XFS (loop3): Mounting V5 Filesystem
[  394.352317][T13973] XFS (loop3): Ending clean mount
[  394.632221][ T4194] XFS (loop3): Unmounting Filesystem
[  394.835966][    C1] vkms_vblank_simulate: vblank timer overrun
[  395.272750][T14089] loop5: detected capacity change from 0 to 512
[  395.403699][T14089] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled
[  395.421479][T14092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  395.473556][T14089] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  395.488583][T14092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.551236][T14089] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=./file0,nouid32,user_xattr,nodiscard,dioread_nolock,,errors=continue. Quota mode: writeback.
[  395.596072][T14089] ext4 filesystem being mounted at /332/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  395.780685][T14093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  395.831192][T14093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.067845][T14111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3423'.
[  396.132802][   T26] audit: type=1326 audit(1785205852.349:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  396.212279][T14117] loop5: detected capacity change from 0 to 1024
[  396.234978][   T26] audit: type=1326 audit(1785205852.419:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  396.311824][T14117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[  396.361920][T14117] System zones: 0-1, 3-12
[  396.385473][   T26] audit: type=1326 audit(1785205852.419:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  396.418023][T14117] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback.
[  396.444577][   T26] audit: type=1326 audit(1785205852.419:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  396.470235][   T26] audit: type=1326 audit(1785205852.419:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  396.495634][   T26] audit: type=1326 audit(1785205852.419:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  396.521489][   T26] audit: type=1326 audit(1785205852.419:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  396.573365][   T26] audit: type=1326 audit(1785205852.439:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  396.640543][   T26] audit: type=1326 audit(1785205852.439:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  396.691971][   T26] audit: type=1326 audit(1785205852.439:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.6.3434" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc09f980e99 code=0x7ffc0000
[  397.013049][T14133] loop8: detected capacity change from 0 to 1024
[  397.122591][T14133] hfsplus: invalid length 32517 has been corrected to 255
[  397.165881][T14139] loop7: detected capacity change from 0 to 2048
[  397.194566][T14133] hfsplus: invalid length 32517 has been corrected to 255
[  397.232712][T14133] hfsplus: invalid length 32517 has been corrected to 255
[  397.331161][T14139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  397.358502][T14120] loop3: detected capacity change from 0 to 32768
[  397.370166][  T144] hfsplus: b-tree write err: -5, ino 2
[  397.376049][  T144] hfsplus: b-tree write err: -5, ino 4
[  397.411581][T14139] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 276 with incorrect tag 100
[  397.881641][T14148] ntfs: volume version 3.1.
[  398.060197][T14170] set_capacity_and_notify: 1 callbacks suppressed
[  398.060219][T14170] nbd1: detected capacity change from 0 to 549764202496
[  398.136655][ T4188] block nbd1: Receive control failed (result -32)
[  398.285835][  T150] block nbd1: Dead connection, failed to find a fallback
[  398.296172][  T150] block nbd1: shutting down sockets
[  398.306411][  T150] print_req_error: 24 callbacks suppressed
[  398.306432][  T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.326933][  T150] buffer_io_error: 24 callbacks suppressed
[  398.326955][  T150] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.354761][  T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.366745][  T150] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.374914][ T1091] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.386438][ T1091] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.394910][ T1091] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.406434][ T1091] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.415448][ T1091] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.426964][ T1091] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.447996][  T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.459218][  T150] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.467355][  T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.483132][  T150] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.502781][  T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.514113][  T150] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.523492][ T4179] ldm_validate_partition_table(): Disk read failed.
[  398.542897][T14190] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3471'.
[  398.558840][ T1091] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.573786][ T1091] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.587941][ T1091] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  398.599590][ T1091] Buffer I/O error on dev nbd1, logical block 0, async page read
[  398.616560][ T4179] Dev nbd1: unable to read RDB block 0
[  398.686096][ T4179]  nbd1: unable to read partition table
[  398.695066][ T4179] ldm_validate_partition_table(): Disk read failed.
[  398.706885][ T4179] Dev nbd1: unable to read RDB block 0
[  398.713473][ T4179]  nbd1: unable to read partition table
[  398.783063][ T4665] ldm_validate_partition_table(): Disk read failed.
[  398.810014][ T4665] Dev nbd1: unable to read RDB block 0
[  398.816929][ T4665]  nbd1: unable to read partition table
[  398.877110][ T4665] ldm_validate_partition_table(): Disk read failed.
[  398.915146][ T4665] Dev nbd1: unable to read RDB block 0
[  398.935459][ T4665]  nbd1: unable to read partition table
[  399.073500][T14212] device bond0 entered promiscuous mode
[  399.091563][T14212] device bond_slave_0 entered promiscuous mode
[  399.124247][T14212] device bond_slave_1 entered promiscuous mode
[  399.216335][T14216] loop5: detected capacity change from 0 to 4096
[  399.233713][T14212] device bond0 left promiscuous mode
[  399.239429][T14212] device bond_slave_0 left promiscuous mode
[  399.277085][T14212] device bond_slave_1 left promiscuous mode
[  399.452412][T14216] ntfs3: loop5: failed to convert "0000" to iso8859-1
[  399.480669][T14216] ntfs3: loop5: failed to convert name for inode 1e.
[  399.880520][T14241] ucma_write: process 586 (syz.6.3494) changed security contexts after opening file descriptor, this is not allowed.
[  400.158692][T14240] loop7: detected capacity change from 0 to 8192
[  400.274919][T14240] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal
[  400.338020][T14240] REISERFS (device loop7): using ordered data mode
[  400.345861][T14240] reiserfs: using flush barriers
[  400.373639][T14240] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  400.443705][T14240] REISERFS (device loop7): checking transaction log (loop7)
[  400.521489][T14221] loop3: detected capacity change from 0 to 40427
[  400.586650][T14221] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  400.665657][T14221] F2FS-fs (loop3): invalid crc value
[  400.707583][T14240] REISERFS (device loop7): Using tea hash to sort names
[  400.710057][T14221] F2FS-fs (loop3): Found nat_bits in checkpoint
[  400.718597][T14240] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  400.898905][T14221] F2FS-fs (loop3): recover fsync data on readonly fs
[  400.905990][T14221] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  400.963894][T14221] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  401.001271][T14221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  401.322136][T14254] loop5: detected capacity change from 0 to 32768
[  401.368134][ T4647] Bluetooth: hci5: command 0x0406 tx timeout
[  401.448319][ T4652] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  401.613523][T14286] program syz.5.3517 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  401.661814][T14288] overlayfs: upper fs does not support file handles, falling back to index=off.
[  401.688320][T14288] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[  401.808095][ T4652] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.847165][ T4652] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  402.058135][ T4652] usb 9-1: New USB device found, idVendor=07fd, idProduct=182c, bcdDevice=f0.26
[  402.079086][ T4652] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.087339][ T4652] usb 9-1: Product: syz
[  402.100708][ T4652] usb 9-1: Manufacturer: syz
[  402.105613][ T4652] usb 9-1: SerialNumber: syz
[  402.111570][T14303] loop3: detected capacity change from 0 to 256
[  402.237175][T14282] loop6: detected capacity change from 0 to 32768
[  402.435437][ T4652] usb 9-1: USB disconnect, device number 4
[  402.451397][    C1] vkms_vblank_simulate: vblank timer overrun
[  402.645719][T14282] XFS (loop6): Mounting V5 Filesystem
[  402.766507][T14282] XFS (loop6): Ending clean mount
[  402.879938][T14332] i2c i2c-0: Invalid 7-bit I2C address 0x00
[  403.005645][ T9900] XFS (loop6): Unmounting Filesystem
[  403.837487][T14376] netlink: 'syz.8.3557': attribute type 32 has an invalid length.
[  404.192077][T14396] loop6: detected capacity change from 0 to 256
[  404.427695][T14402] loop8: detected capacity change from 0 to 128
[  404.562771][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3571'.
[  404.796328][T14418] i2c i2c-0: new_device: Can't parse I2C address
[  404.990363][T14427] tipc: Started in network mode
[  404.995295][T14427] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711
[  405.077308][T14427] tipc: Enabling of bearer <udp:����> rejected, failed to enable media
[  405.516224][T14452] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  405.526666][T14453] netlink: 'syz.6.3593': attribute type 15 has an invalid length.
[  405.748048][ T5967] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  405.809332][T14464] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3598'.
[  405.997915][ T5967] usb 4-1: Using ep0 maxpacket: 32
[  406.034304][T14457] loop6: detected capacity change from 0 to 32768
[  406.094016][T14457] (syz.6.3595,14457,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  406.138248][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  406.148643][T14457] (syz.6.3595,14457,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  406.268938][T14457] JBD2: Ignoring recovery information on journal
[  406.318080][ T5967] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  406.327348][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.339578][ T5967] usb 4-1: Product: syz
[  406.343879][ T5967] usb 4-1: Manufacturer: syz
[  406.349395][ T5967] usb 4-1: SerialNumber: syz
[  406.365958][ T5967] usb 4-1: config 0 descriptor??
[  406.398353][T14481] mkiss: ax0: crc mode is auto.
[  406.408782][ T5967] hub 4-1:0.0: bad descriptor, ignoring hub
[  406.415699][ T5967] hub: probe of 4-1:0.0 failed with error -5
[  406.456466][T14457] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  406.632402][T14489] loop7: detected capacity change from 0 to 1024
[  406.755993][T14489] UBIFS error (pid: 14489): cannot open "c:::", error -22
[  406.778192][ T5242] usb 4-1: USB disconnect, device number 25
[  406.983604][ T9900] ocfs2: Unmounting device (7,6) on (node local)
[  407.091010][T14505] loop7: detected capacity change from 0 to 256
[  407.327088][T14512] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3620'.
[  407.396143][T14514] IPVS: sh: FWM 4 0x00000004 - no destination available
[  407.438161][T14516] ALSA: mixer_oss: invalid OSS volume ''
[  407.458382][T14516] ALSA: mixer_oss: invalid OSS volume 'Ng�H�ޜ�4%����A�C�D���#�'
[  407.507186][T14516] ALSA: mixer_oss: invalid OSS volume ''
[  408.106491][T14553] loop8: detected capacity change from 0 to 1024
[  408.271430][ T7533] hfsplus: b-tree write err: -5, ino 25
[  408.277639][ T7533] hfsplus: b-tree write err: -5, ino 4
[  408.310201][ T7533] hfsplus: b-tree write err: -5, ino 2
[  408.336311][ T7533] hfsplus: b-tree write err: -5, ino 26
[  408.367603][ T7533] hfsplus: b-tree write err: -5, ino 27
[  408.367624][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3645'.
[  408.411168][T14566] loop3: detected capacity change from 0 to 16
[  408.417676][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3645'.
[  408.434283][T14566] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  408.475075][ T8474] udevd[8474]: incorrect cramfs checksum on /dev/loop3
[  408.492917][T14564] netlink: 'syz.7.3645': attribute type 18 has an invalid length.
[  408.512972][T14566] cramfs: Error -3 while decompressing!
[  408.535212][T14566] cramfs: ffffffff9641d088(27)->ffff88805a340000(4096)
[  408.539187][T14564] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  408.542506][T14566] cramfs: Error -3 while decompressing!
[  408.552323][T14564] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  408.558188][T14566] cramfs: ffffffff9641d088(27)->ffff88805a340000(4096)
[  408.566782][T14564] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  408.566820][T14564] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  408.600445][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3645'.
[  408.618128][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3645'.
[  408.629527][T14567] netlink: 'syz.7.3645': attribute type 18 has an invalid length.
[  408.652453][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  408.652470][   T26] audit: type=1800 audit(1785205864.869:122): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3646" name="file2" dev="loop3" ino=348 res=0 errno=0
[  408.888630][   T27] INFO: task syz.1.2068:10077 blocked for more than 143 seconds.
[  408.896427][   T27]       Not tainted syzkaller #0
[  408.921296][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  408.964606][   T27] task:syz.1.2068      state:D stack:27888 pid:10077 ppid:  9696 flags:0x00004004
[  408.989675][   T27] Call Trace:
[  408.993443][   T27]  <TASK>
[  408.996784][   T27]  __schedule+0x11c3/0x4350
[  409.002056][   T27]  ? rcu_lock_acquire+0x30/0x30
[  409.007432][   T27]  ? __mutex_lock_common+0xdf0/0x2400
[  409.013538][   T27]  ? release_firmware_map_entry+0x190/0x190
[  409.026400][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  409.037397][   T27]  ? __mutex_trylock_common+0x86/0x260
[  409.045047][   T27]  ? rcu_lock_release+0x20/0x20
[  409.050312][   T27]  schedule+0x11b/0x1e0
[  409.054578][   T27]  schedule_preempt_disabled+0xf/0x20
[  409.063673][   T27]  __mutex_lock_common+0xdf5/0x2400
[  409.069210][   T27]  ? write_ports+0xb3/0xb80
[  409.074018][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  409.079673][   T27]  mutex_lock_nested+0x17/0x20
[  409.084556][   T27]  write_ports+0xb3/0xb80
[  409.089080][   T27]  ? __might_sleep+0xf0/0xf0
[  409.096347][   T27]  ? write_versions+0xbb0/0xbb0
[  409.102402][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  409.107672][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  409.113001][   T27]  ? __might_fault+0xb3/0x110
[  409.118000][   T27]  ? _copy_from_user+0x111/0x170
[  409.123395][   T27]  ? simple_transaction_get+0x119/0x140
[  409.129523][   T27]  nfsctl_transaction_write+0x105/0x150
[  409.135205][   T27]  ? nfsctl_transaction_read+0x1b0/0x1b0
[  409.141173][   T27]  vfs_write+0x304/0xd70
[  409.146772][   T27]  ? file_end_write+0x250/0x250
[  409.152579][   T27]  ? mutex_lock_nested+0x17/0x20
[  409.157914][   T27]  ? __fdget_pos+0x2bf/0x370
[  409.162832][   T27]  ? ksys_write+0x70/0x260
[  409.167528][   T27]  ksys_write+0x153/0x260
[  409.174661][   T27]  ? __ia32_sys_read+0x80/0x80
[  409.179798][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  409.186119][   T27]  do_syscall_64+0x4c/0xa0
[  409.190857][   T27]  ? clear_bhb_loop+0x30/0x80
[  409.195818][   T27]  ? clear_bhb_loop+0x30/0x80
[  409.200801][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  409.207945][   T27] RIP: 0033:0x7f146a3c8e99
[  409.213978][   T27] RSP: 002b:00007f1468621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  409.225800][   T27] RAX: ffffffffffffffda RBX: 00007f146a650fa0 RCX: 00007f146a3c8e99
[  409.235283][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  409.243379][   T27] RBP: 00007f146a45eeaf R08: 0000000000000000 R09: 0000000000000000
[  409.252596][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  409.260956][   T27] R13: 00007f146a651038 R14: 00007f146a650fa0 R15: 00007ffded3292b8
[  409.269056][   T27]  </TASK>
[  409.272497][   T27] 
[  409.272497][   T27] Showing all locks held in the system:
[  409.286153][   T27] 1 lock held by khungtaskd/27:
[  409.292216][   T27]  #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  409.314044][   T27] 2 locks held by getty/3945:
[  409.318903][   T27]  #0: ffff88814c52c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  409.329177][   T27]  #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50
[  409.340205][   T27] 2 locks held by kworker/1:9/4278:
[  409.345791][   T27]  #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  409.357031][   T27]  #1: ffffc900031bfd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  409.369415][   T27] 3 locks held by syz.4.1856/9387:
[  409.375198][   T27]  #0: ffff88807d7aaaf0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  409.385336][   T27]  #1: ffff88805d2f8460 (sb_writers#43){.+.+}-{0:0}, at: vfs_write+0x296/0xd70
[  409.396597][   T27]  #2: ffffffff8c571728 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80
[  409.405796][   T27] 3 locks held by syz.1.2068/10077:
[  409.411382][   T27]  #0: ffff888022b85c70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  409.421136][   T27]  #1: ffff88805d35c460 (sb_writers#43){.+.+}-{0:0}, at: vfs_write+0x296/0xd70
[  409.431035][   T27]  #2: ffffffff8c571728 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80
[  409.440306][   T27] 3 locks held by syz.6.3628/14532:
[  409.446476][   T27]  #0: ffff8880261145f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  409.460218][   T27]  #1: ffff88804c7e4460 (sb_writers#43){.+.+}-{0:0}, at: vfs_write+0x296/0xd70
[  409.470063][   T27]  #2: ffffffff8c571728 (nfsd_mutex){+.+.}-{3:3}, at: nfsd4_write_time+0xa4/0x330
[  409.480034][   T27] 4 locks held by syz.3.3650/14582:
[  409.485432][   T27]  #0: ffff8880749e0e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[  409.495928][   T27]  #1: ffffffff8d4a8510 ((netlink_chain).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain+0x5e/0x1b0
[  409.510856][   T27]  #2: ffff888063fadcb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nft_rcv_nl_event+0x126/0x5c0
[  409.522174][   T27]  #3: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750
[  409.539290][   T27] 2 locks held by dhcpcd/14589:
[  409.544521][   T27]  #0: ffff888057bb1410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[  409.556143][   T27]  #1: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750
[  409.567822][   T27] 1 lock held by dhcpcd/14590:
[  409.572638][   T27]  #0: ffff8880292a6120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60
[  409.582748][   T27] 
[  409.585530][   T27] =============================================
[  409.585530][   T27] 
[  409.596775][   T27] NMI backtrace for cpu 0
[  409.601518][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  409.608951][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  409.619214][   T27] Call Trace:
[  409.622525][   T27]  <TASK>
[  409.625634][   T27]  dump_stack_lvl+0x188/0x250
[  409.630661][   T27]  ? show_regs_print_info+0x20/0x20
[  409.636096][   T27]  ? load_image+0x410/0x410
[  409.640697][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  409.646171][   T27]  ? nmi_cpu_backtrace+0x1b2/0x3d0
[  409.651632][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  409.656905][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  409.663103][   T27]  ? _printk+0xda/0x130
[  409.667455][   T27]  ? load_image+0x410/0x410
[  409.672079][   T27]  ? load_image+0x410/0x410
[  409.676619][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  409.682953][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  409.689028][   T27]  watchdog+0xe1b/0xe60
[  409.693744][   T27]  kthread+0x42e/0x520
[  409.697835][   T27]  ? hungtask_pm_notify+0x40/0x40
[  409.703088][   T27]  ? kthread_blkcg+0xd0/0xd0
[  409.707954][   T27]  ret_from_fork+0x1f/0x30
[  409.712970][   T27]  </TASK>
[  409.717638][   T27] Sending NMI from CPU 0 to CPUs 1:
[  409.723612][    C1] NMI backtrace for cpu 1
[  409.723627][    C1] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0
[  409.723644][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  409.723653][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[  409.723747][    C1] RIP: 0010:alloc_object+0x12d/0x640
[  409.723788][    C1] Code: e4 74 27 49 83 c4 08 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 77 3c d1 fd 49 89 1c 24 <48> b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 49 89 ec 74 08 4c 89
[  409.723802][    C1] RSP: 0018:ffffc90001f97220 EFLAGS: 00000046
[  409.723814][    C1] RAX: 1ffff1100bfa6616 RBX: ffff8880b9137010 RCX: dffffc0000000000
[  409.723826][    C1] RDX: ffffffff8a2c3120 RSI: ffffffff8a7a41e0 RDI: ffffffff8a7a41a0
[  409.723837][    C1] RBP: ffff888061894070 R08: 0000000000000003 R09: 0000000000000004
[  409.723847][    C1] R10: dffffc0000000000 R11: fffff520003f2e30 R12: ffff88805fd330b0
[  409.723857][    C1] R13: 1ffff1100c31280f R14: 1ffff1100c31280e R15: ffff888061894078
[  409.723868][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  409.723881][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  409.723892][    C1] CR2: 0000001b33e1cff8 CR3: 0000000072838000 CR4: 00000000003506e0
[  409.723907][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  409.723916][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  409.723926][    C1] Call Trace:
[  409.723931][    C1]  <TASK>
[  409.723943][    C1]  debug_object_activate+0x13a/0x4e0
[  409.723962][    C1]  kvfree_call_rcu+0xb0/0x7f0
[  409.723978][    C1]  ? cfg80211_inform_bss_frame_data+0x525/0x1ed0
[  409.723993][    C1]  ? call_rcu+0x900/0x900
[  409.724007][    C1]  ? do_raw_spin_lock+0x128/0x2f0
[  409.724047][    C1]  cfg80211_update_known_bss+0x184/0xb60
[  409.724064][    C1]  cfg80211_bss_update+0x156/0x21a0
[  409.724085][    C1]  ? cfg80211_inform_bss_frame_data+0x6c7/0x1ed0
[  409.724101][    C1]  cfg80211_inform_bss_frame_data+0x88d/0x1ed0
[  409.724122][    C1]  ? sched_core_alloc_cookie+0x74/0xa0
[  409.724142][    C1]  ? cfg80211_parse_mbssid_data+0x3070/0x3070
[  409.724164][    C1]  ? __lock_acquire+0x7b50/0x7b50
[  409.724185][    C1]  ieee80211_bss_info_update+0x6ba/0xa80
[  409.724236][    C1]  ? ieee80211_rx_bss_put+0x60/0x60
[  409.724255][    C1]  ? ieee80211_mandatory_rates+0x1c8/0x230
[  409.724273][    C1]  ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50
[  409.724297][    C1]  ? ieee80211_ibss_rx_no_sta+0x750/0x750
[  409.724311][    C1]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  409.724325][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  409.724342][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  409.724356][    C1]  ? _raw_spin_unlock+0x40/0x40
[  409.724368][    C1]  ? kcov_remote_start+0x6a/0x490
[  409.724385][    C1]  ? kcov_remote_start+0xfa/0x490
[  409.724401][    C1]  ieee80211_iface_work+0x714/0xc50
[  409.724416][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  409.724431][    C1]  cfg80211_wiphy_work+0x224/0x260
[  409.724448][    C1]  process_one_work+0x867/0xff0
[  409.724470][    C1]  ? worker_detach_from_pool+0x240/0x240
[  409.724484][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  409.724500][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  409.724513][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  409.724528][    C1]  ? wq_worker_running+0x97/0x170
[  409.724543][    C1]  worker_thread+0xad7/0x12a0
[  409.724568][    C1]  kthread+0x42e/0x520
[  409.724581][    C1]  ? rcu_lock_release+0x20/0x20
[  409.724594][    C1]  ? kthread_blkcg+0xd0/0xd0
[  409.724608][    C1]  ret_from_fork+0x1f/0x30
[  409.724630][    C1]  </TASK>
[  409.778561][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  410.086126][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  410.093496][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  410.103566][   T27] Call Trace:
[  410.106958][   T27]  <TASK>
[  410.109999][   T27]  dump_stack_lvl+0x188/0x250
[  410.114687][   T27]  ? show_regs_print_info+0x20/0x20
[  410.120002][   T27]  ? load_image+0x410/0x410
[  410.124576][   T27]  panic+0x2f8/0x850
[  410.128499][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  410.134246][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  410.138772][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  410.144503][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  410.151401][   T27]  watchdog+0xe5a/0xe60
[  410.155558][   T27]  kthread+0x42e/0x520
[  410.159632][   T27]  ? hungtask_pm_notify+0x40/0x40
[  410.164759][   T27]  ? kthread_blkcg+0xd0/0xd0
[  410.169576][   T27]  ret_from_fork+0x1f/0x30
[  410.174127][   T27]  </TASK>
[  410.177672][   T27] Kernel Offset: disabled
[  410.182089][   T27] Rebooting in 86400 seconds..