last executing test programs:

2m5.615266497s ago: executing program 4 (id=452):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3e, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2m4.841729413s ago: executing program 2 (id=455):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)

2m4.653948902s ago: executing program 2 (id=457):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
userfaultfd(0x1)
r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2m4.582211846s ago: executing program 2 (id=459):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x200001, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xb, 0x0, 0x7}}]}}]}, 0x44}}, 0x24008004)

2m4.468032391s ago: executing program 4 (id=462):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

2m4.463103371s ago: executing program 2 (id=463):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

2m4.28589105s ago: executing program 4 (id=465):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100000500)

2m4.27860674s ago: executing program 2 (id=466):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)

2m4.205547483s ago: executing program 4 (id=468):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1404c, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@lazytime}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noacl}, {@test_dummy_encryption_v1}, {@usrquota}]}, 0x5, 0x491, &(0x7f0000000300)="$eJzs3M1vG0UbAPBnN7HbvO3bhFK+Wj4CBVEhSPoF9MABEEgcioQEBzhaSahK3YKaINEqEimHckIIiTviyL/ACS4IcQGJK9yrShXqhZaT0dq7iZ1s7Ka1Y8C/n+T2md21Zx7PjjO7EyeAkTWd/ZNE7I6I3yJislXsPGC69d+N68tzN68vzyXRaLz5R9I87s/ry3PFocXzdrUXIokDJfUuXrh4plavL5zPy7NLZz+YXbxw8ZnTZ6v5phPHjx15/rmjz/Ylz12R5tFr73zx+snPOvJfl0efTHfb+USj0efqhuv/bfH4ENvB1ozl/VVpjv/JGGvrvcl49ZPVwsdDaiAwMI1Go7Fr890rDeA/LInOsiEPo6L4QV9c/5ZdB784sNnH8F17qXUBlOV9I3+09oyv3jGorLu+7afpiHh75a+vskcM5j4EAECH77L5z9PZbGd5Lpt7rM0/0ri37bg9+drQVETcFRF7I+LuOBf7IuKeiOax90XE/Vuou9q5SNKcZm6c/6RX7yjBHrL53wv52lbn/K+Y/cXUWLN0oVWISvLu6frC4fw9ORSVHVn5SJc6vn/l188329c+/8seWf3FXDBvx9XxHZ3Pma8t1W4/407XLkXsHy/LP1ldCUgi4oGI2F/2AmnvOk4/9c2Dm+2bnumVfxd9WGhqfB3xZKv/V2Jd/oWkc32ydmrh1MK5oyeK9cnZnVFfODxbnBUb/fTL5TfKtqe31P+DlfX//0rP/9X8p5L29drFrddx+fdPN72mma7kwRbO/5XaUq2avNWMi8Xij2pLS+ePRFSTk61Gt28/uvbcolwcn+V/6GD5+N8ba+/EgYjITuKHIuLhiHgk77tHI+KxiDjYJf8fX378vfXbJor8u/d/tcvL9kWW//yW+n8tqEbnlrTkmCwYO/PDtx2VTq2Fef43u3/+HW9Gh/Itt/L5t7EV5cGdvn8AAADwb5BGxO5I0pnVOE1nZlq/w7+vtfSd+fDcfOs7AlNRSYs7XZNt90OL3xFolS9FRKOtXF84FmnzvvGXYxPN8szc+/X5oWUNRP5dnbLxn7kyNuzWAQPnC1swuox/GF1dx39l+9oBbL8N47/rmN8x0LYA26vk5//EMNoBbL+y+b+/9wOjYd34t+wHI8T9fxhdxj+MLuMfRtLiRPT+knzXoHil23x6r2Ay4k5beGZn2a6fS/+mQf+CqAzqlf8ZQaQDr6I62FNrYEGStXlP9D74ytCbunkwvM8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfvo7AAD//1yDywo=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x100000a, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0)

2m4.072539609s ago: executing program 2 (id=470):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1a2, &(0x7f0000001900)="$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")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/208, 0xd0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

2m3.400763361s ago: executing program 4 (id=475):
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)=@newqdisc={0x24, 0x28, 0x20, 0x4203, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xffff, 0xa}, {0xc, 0x4}}}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x24040884}, 0x4000080)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a04000000a10124f1"], 0x0, 0x0, 0x0, 0x0})

2m2.763782871s ago: executing program 4 (id=481):
socket$rxrpc(0x21, 0x2, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0)
lseek(r0, 0x4, 0x1)

2m2.58367117s ago: executing program 32 (id=481):
socket$rxrpc(0x21, 0x2, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0)
lseek(r0, 0x4, 0x1)

1m54.74853799s ago: executing program 5 (id=482):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1600000000000000b40000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000ba"], 0x50)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)

1m54.644763885s ago: executing program 5 (id=520):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', <r2=>r1, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0x0, 0xff, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}})

1m54.515994701s ago: executing program 5 (id=521):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bf6e3d7de774fc79872f0b8fa15bf788c9914c00"}}]}]}, 0x54}}, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0xc0184d03, &(0x7f0000000240))

1m54.392962397s ago: executing program 5 (id=523):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1404c, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@lazytime}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noacl}, {@test_dummy_encryption_v1}, {@usrquota}]}, 0x5, 0x491, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x100000a, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0)

1m53.729477928s ago: executing program 5 (id=526):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074")
ioctl(r0, 0xc138fd0c, &(0x7f0000000000))

1m52.82506304s ago: executing program 5 (id=535):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32, @ANYBLOB="08000b0000000000080002"], 0x54}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014"], 0x1f0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

1m52.673837178s ago: executing program 33 (id=535):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32, @ANYBLOB="08000b0000000000080002"], 0x54}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014"], 0x1f0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

1m48.900639246s ago: executing program 34 (id=470):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1a2, &(0x7f0000001900)="$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")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/208, 0xd0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

1m48.328094663s ago: executing program 0 (id=560):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={r0, 0x40, 0x7fff, 0x3})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0, 0x0})

1m45.958872705s ago: executing program 0 (id=574):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc11008008000340"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1m45.824976811s ago: executing program 0 (id=575):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000001c00)={{0x2, 0xffffffff, 0xca, 0xc, 0x4, 0x5}, 0x64, [0x2ae, 0x9, 0x6, 0x2, 0x6, 0x9, 0x8, 0xbd5, 0x6, 0x100, 0x3, 0x3, 0x40, 0x4, 0x10000, 0x5, 0x7, 0x6, 0xffff, 0x4c, 0x2, 0x2, 0x2, 0x0, 0x5b, 0x80000001, 0x1, 0x5, 0x7, 0x6, 0x0, 0x2, 0x5, 0x4, 0x1b, 0x100, 0xb0, 0x5, 0x6, 0x7, 0x3, 0x400, 0x80000000, 0x0, 0x3, 0x6, 0x7a, 0x3, 0x8, 0xbfbc, 0x5, 0x252ca33a, 0x5, 0x3, 0xffff, 0xb3, 0x6, 0x6, 0x4, 0xfffffffe, 0x8, 0x74, 0x2, 0xc, 0x6, 0x7, 0x3, 0x92, 0x4, 0x6, 0xc13e, 0xff, 0x1, 0x5, 0x8, 0xd, 0x2, 0x4, 0x7f, 0x2, 0x5, 0x8, 0x9, 0x3ff, 0x8, 0xffffff80, 0xfffffffc, 0x2, 0x5, 0x9, 0x3, 0x8, 0x7, 0x5, 0x9, 0x1ff, 0x9, 0x3, 0x40000000, 0x7, 0x7d6, 0xe1, 0x401, 0xffffffff, 0x2, 0x8, 0x9, 0xa3f, 0x8001, 0xca, 0x430, 0x0, 0x5, 0x3, 0x1ff, 0xb8e3, 0x7fff, 0x101, 0xf7, 0x5, 0x0, 0x58, 0x8, 0x3ff, 0x6, 0x0, 0x9, 0x2, 0x5, 0x10, 0x1, 0x5f, 0x87, 0x4, 0x7fff, 0x8, 0x8, 0x10, 0xd27, 0x8, 0x4, 0x1, 0xfffffffa, 0x1, 0xd, 0xfffff000, 0x84f, 0x614, 0xffffffff, 0x10, 0x200, 0x7ff, 0x0, 0x9, 0xb3, 0x2, 0xfffffffc, 0x6, 0x3, 0x2, 0x7, 0x0, 0x3, 0x2, 0x8, 0x3, 0x8, 0x3, 0x5, 0x2, 0x89f, 0xc, 0x4c4, 0x4, 0xffff, 0x7, 0x2, 0x9, 0xf74, 0x3, 0x5, 0x7, 0x9, 0x5e39d542, 0x4, 0x10001, 0x8, 0x5, 0x0, 0x1, 0x3, 0x5, 0x10000, 0xe0f0, 0xd44f, 0x9, 0xf, 0x8, 0x6, 0x1, 0x4, 0x1bc4, 0x1, 0x4, 0xb9, 0xe8d4, 0x3, 0x41a3, 0x1, 0x101, 0x1, 0x0, 0x7fff, 0xfffffffe, 0xc3c, 0x0, 0x800, 0x4, 0x4dff7bc4, 0x8, 0x6, 0x4, 0x4, 0x1, 0x66, 0xfffffff7, 0x8000, 0x9, 0x2, 0x3, 0x6, 0xbf, 0x66a, 0x3, 0x8, 0x100, 0x8, 0x5, 0x5, 0x8, 0x58, 0xffffff01, 0x3, 0x38, 0x8000, 0x520, 0xffff, 0x8, 0x1, 0x3, 0x4, 0x9, 0x6, 0xa79, 0x6, 0x6, 0xa0e2, 0x7fffffff, 0x2, 0x200, 0xff, 0x3, 0x7, 0x8001, 0x0, 0x6fc, 0x1, 0xc58, 0x29c27eaa, 0x401, 0x1, 0x5, 0x7fff, 0xade, 0xd435, 0x5a6e, 0x5, 0x2, 0x8, 0x3, 0x3, 0x1, 0x5, 0x7, 0xfffffffb, 0x0, 0x1, 0x200, 0x4, 0x249, 0x2, 0xaf0, 0xe, 0x6, 0xd0ba, 0x0, 0x6d, 0x3ff, 0xe8d, 0x6, 0xfffffff8, 0x3, 0x0, 0x9, 0x1, 0x3, 0xb8d, 0x7, 0xcc, 0x3, 0x81, 0x2, 0xf, 0x8, 0x1000, 0x7, 0x7fff, 0xffffffff, 0xffffff7f, 0x1, 0xffff5437, 0x9, 0x400, 0x4, 0xfc38, 0x10001, 0x6, 0x4f, 0x2, 0x3, 0x2, 0x4, 0x0, 0x0, 0x8, 0x642, 0x5, 0x0, 0x81, 0x4, 0x1, 0x0, 0x10000, 0xc, 0x100, 0xaa4, 0xc5, 0x1000, 0x37e, 0x0, 0x8, 0x2, 0x2, 0xf32, 0x1, 0x5, 0x9, 0x3, 0xffffffff, 0x6, 0x9, 0x100, 0x3, 0x4, 0x7fffffff, 0x80, 0x80, 0x6, 0x7, 0xfffffffc, 0x4, 0x6, 0x2, 0x8, 0x9, 0x7fff0000, 0x80000000, 0x1, 0x5, 0x8, 0x401, 0x80, 0x400, 0xb, 0x7e, 0x3, 0x0, 0x9, 0x8, 0x10, 0x7, 0x9, 0x8000, 0x79cff0a8, 0x80, 0x6, 0xc, 0x0, 0x3, 0x4, 0x7f, 0x800, 0x0, 0x8, 0x4, 0xe12, 0xfffffffe, 0x6, 0x5, 0x4, 0x0, 0x342, 0x3, 0xffff, 0x3c367d6f, 0x1, 0x2, 0x0, 0x7fffffff, 0xb71586e, 0x5, 0x2, 0x5, 0x4, 0x8, 0x2, 0x0, 0xc, 0x10001, 0xffffffff, 0xeb, 0x40, 0x9, 0x0, 0x0, 0x3, 0x4, 0x9, 0x8, 0x0, 0x5, 0x9, 0x0, 0x2, 0x8, 0x0, 0x80000000, 0x0, 0x3ff, 0x820c, 0x401, 0x1, 0x80000001, 0x4, 0x7, 0x1, 0x8001, 0x1, 0x6, 0x80000000, 0x0, 0x5, 0x3, 0x6, 0x4, 0x5, 0x2, 0x4, 0x400, 0xde7, 0x7ff, 0x6, 0x8, 0x0, 0x0, 0x7fff, 0x7fff, 0x4, 0x8, 0x100, 0x6, 0x1, 0xe6, 0x10000, 0x3, 0x3, 0x5, 0xf, 0x1999, 0x9ed, 0x7, 0x850, 0x4, 0x2, 0x28, 0x6, 0x4, 0x1, 0x7c4, 0x6, 0x24d, 0x1e, 0x6, 0x101, 0x8, 0x4, 0x4, 0x1, 0x7, 0x80000001, 0x7fffffff, 0x5, 0x10001, 0x7, 0xc, 0x5, 0x6, 0x7, 0x91d, 0x7, 0x5, 0x7fff, 0x4, 0x172, 0x1, 0x5, 0x1, 0xff, 0xf, 0x4, 0x7fffffff, 0x55, 0x7, 0x5, 0xfffffff8, 0x8, 0x3, 0x33fc, 0x7, 0x8, 0x5, 0x3, 0x7, 0x5, 0x7, 0x81, 0x7f, 0x101, 0x2, 0xfffffffa, 0x5, 0x9, 0x3, 0x6000000, 0x5, 0x4, 0x4, 0x9, 0x6, 0x3, 0x2, 0x0, 0x5, 0xd7, 0x2, 0x2, 0x0, 0xc, 0x401, 0x2, 0x6, 0x9, 0xe, 0x4, 0x7f, 0xb68, 0x3, 0x1, 0x4, 0xd7d, 0x4, 0x9, 0x80000000, 0xa, 0x80000000, 0x4, 0x0, 0x1, 0x6, 0x2, 0x4, 0xe5, 0x8, 0x7fffffff, 0x9, 0x4, 0xffff, 0x0, 0x3, 0x4, 0x7, 0xa0000000, 0x4, 0x5, 0x0, 0x6, 0x5, 0x8, 0x69, 0x5, 0x1, 0x9, 0x49c, 0xfffffffe, 0x2, 0x4, 0xfffffff9, 0x4, 0x7, 0x1, 0x6, 0x7, 0x7f, 0x5, 0x6, 0x0, 0xf0, 0x2, 0x1, 0x7, 0xffffffff, 0x6, 0x6, 0x1f28, 0x6, 0x101, 0x7, 0xd, 0x3ff, 0x6, 0x1, 0x7, 0x3, 0x3, 0x7f, 0xfff, 0x4, 0xfff, 0x4b40ef74, 0x225, 0xc, 0x7, 0x81, 0x8, 0xd4, 0x255, 0x2, 0x1000, 0x4, 0xc43, 0x4, 0x9665, 0x8e8, 0x8, 0xffffffff, 0x4, 0x2, 0x398, 0x1ff, 0xe, 0x80000000, 0x4, 0x8, 0x200, 0x7, 0x8da8, 0x1000, 0x2, 0x2, 0x7, 0x3, 0x3, 0x101, 0x1, 0x1ff, 0x65a5cf8d, 0xffffffc0, 0x7, 0x0, 0x7ff, 0x0, 0xf500, 0x8, 0x8001, 0xc, 0x80000001, 0xfe45, 0x81, 0x6, 0x5, 0x3, 0x3, 0x9, 0x3, 0x49d9975, 0x2, 0x5, 0x3, 0x0, 0x7, 0x7fffffff, 0xc2a2, 0x10f8, 0x0, 0x0, 0x8, 0x7fffffff, 0x7ff, 0x0, 0xd51, 0x3ff, 0x8, 0x5, 0xffffff81, 0x4, 0xe5, 0x7, 0x7ff, 0x8000, 0x1, 0x1, 0x5, 0x7, 0x0, 0x8, 0x0, 0x20ca8481, 0x3, 0x4, 0x9c, 0x8, 0x6, 0x2, 0x8, 0xfffffffa, 0x8, 0xffffffff, 0x31bda979, 0x1, 0x0, 0x7ff, 0x851f, 0xfff, 0xfffffffe, 0x18, 0x3, 0x2, 0x0, 0xffff, 0x7, 0x3fffc00, 0x6, 0xfffffffd, 0x7ff, 0x1, 0x10, 0xb, 0x7e, 0x5, 0x4, 0x2, 0x8, 0x0, 0x0, 0x54d3, 0x3, 0x5, 0x8, 0x8, 0x4, 0x9, 0x3ff, 0x333c, 0x2, 0x6, 0x1, 0xc7fd, 0x80, 0xd35, 0xc, 0x10, 0x2b44, 0xfe, 0x94a, 0x8, 0x7, 0x2, 0xd92, 0x3, 0x7f, 0x5, 0x8403, 0x9, 0x3ff, 0x0, 0xbd, 0x40, 0xfffff03e, 0x8, 0x3a8, 0x2, 0x0, 0x9d, 0x5, 0x8, 0x7fffffff, 0xfffffffe, 0x1, 0x6cc, 0x0, 0x3, 0x5, 0x1, 0x4, 0xf, 0xfffff801, 0x1dac, 0xa, 0x4, 0xfffffffe, 0x34, 0x8, 0x4, 0xc, 0x10001, 0x80, 0x2c996b6f, 0x87a1, 0x6, 0x1, 0x6, 0x2, 0x3, 0x5, 0x6, 0x516, 0x7, 0xe, 0x8, 0x0, 0x4, 0x200, 0x1d, 0x0, 0x1, 0x8000, 0x1, 0x51, 0x7fff, 0x5, 0xfffffff7, 0x91, 0x7, 0x7, 0x1, 0x6, 0x10000, 0x1, 0x0, 0x8, 0xffffffff, 0x8, 0xb, 0x2, 0x7, 0x1, 0xffffffff, 0x9988, 0x2, 0xe, 0x7, 0x9, 0x1, 0x8, 0x81, 0x6, 0x9, 0x0, 0x4, 0x0, 0xfffffffc, 0x10, 0xff, 0x7fff, 0x1, 0x8, 0x5, 0xffffffff, 0x64cb, 0x1, 0xfffffff8, 0xffff, 0x5, 0x1, 0x6, 0x10, 0x3, 0x3, 0x1000, 0xe480, 0x0, 0x4, 0x7a6, 0x2, 0x0, 0x7, 0x3, 0x200, 0x80, 0xfc1, 0x6, 0x9, 0x7, 0x6, 0x6, 0xef, 0xfffffff8, 0x8, 0x7fffffff, 0x3, 0x4b0, 0x64, 0x400, 0x8, 0x3, 0x50000, 0x9, 0x2, 0x0, 0x400, 0xad00, 0x2, 0x4, 0x3, 0x5, 0x5, 0x6, 0x3, 0xff, 0x3, 0xb50, 0x7fff, 0x200, 0x8, 0x0, 0x908f, 0xfffffffb, 0xf9, 0x9, 0x89, 0x41, 0xffffffff, 0x4, 0xbafd, 0x3ff, 0x3, 0x6, 0x8, 0x1, 0xd, 0xe, 0x0, 0x425, 0x8, 0xc99, 0x3, 0x9, 0x9, 0x5, 0xb4, 0x2, 0x6, 0x400, 0x100, 0x1ff, 0xff58, 0x0, 0x9, 0x2, 0x8, 0x7, 0x2bb, 0xfffff760, 0xd, 0x7a4505b6, 0x9, 0xe, 0x8, 0x6, 0xfffffff7, 0x800, 0x8, 0x9, 0x0, 0x5, 0x7fa, 0x7f, 0x6, 0x3, 0x3, 0x7, 0x3, 0x2d0, 0x8, 0x26f, 0x5, 0x2b2, 0x800, 0x2, 0x3, 0x77, 0x6a, 0x1]})

1m43.594928957s ago: executing program 0 (id=580):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000300)={[{@nolazytime}, {@auto_da_alloc}]}, 0x3, 0x42f, &(0x7f0000000480)="$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")
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m43.256718912s ago: executing program 0 (id=583):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m41.577788942s ago: executing program 0 (id=592):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m41.416832059s ago: executing program 35 (id=592):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m37.102788613s ago: executing program 1 (id=616):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
preadv(r2, &(0x7f0000002540)=[{&(0x7f0000002480)=""/167, 0xa7}], 0x1, 0x5, 0xfffffffc)

1m37.025371017s ago: executing program 1 (id=617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0xa0)

1m36.725910731s ago: executing program 1 (id=618):
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x10000, 0x0, 0xfd, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2'])
chdir(&(0x7f00000001c0)='./file0\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x16)
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000200)='./file1\x00')

1m36.684808103s ago: executing program 1 (id=620):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000300)={[{@nolazytime}, {@auto_da_alloc}]}, 0x3, 0x42f, &(0x7f0000000480)="$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")
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m36.206611566s ago: executing program 1 (id=625):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
fcntl$setstatus(r2, 0x4, 0x2200)
splice(r0, 0x0, r3, 0x0, 0xc, 0x0)

1m32.364787697s ago: executing program 1 (id=644):
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x800812a0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)

1m32.162798797s ago: executing program 36 (id=644):
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x800812a0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)

26.473624779s ago: executing program 6 (id=1242):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x8, 0x0, 0x100, 0x9, 0xffffffff, 0x3, 0x0, 0x7fff, 0x8000, 0x3a, 0x7, 0x3, 0x8, 0x1, 0x6, 0x2, 0x5, 0xfffffff9, 0x9, 0x3c96, 0x5, 0x8, 0x404, 0x7fff, 0x3, 0x3, 0x6, 0x1ff, 0x6, 0x0, 0x2, 0x74ba, 0x40, 0x35e, 0x6, 0x8000c, 0x6, 0x6, 0x5, 0x3, 0x3, 0x0, 0xc66, 0x7fff, 0xc9, 0xb, 0x1, 0x0, 0x80000000, 0x1, 0x4d, 0x29da, 0x2, 0xfc, 0x3, 0x3, 0x800, 0xc, 0x8, 0x2, 0xd, 0x5, 0x400, 0xc, 0x0, 0xfff, 0x1, 0x7, 0x7, 0x2, 0xbce6, 0x1, 0x4, 0x9, 0x79, 0xfffff801, 0x6, 0x4, 0x10001, 0x9, 0xffff, 0x94, 0x80, 0xc8, 0x5f72, 0x80000000, 0x5, 0x3, 0x4b1, 0xc, 0x1, 0xeac, 0xf85, 0x373, 0x0, 0x3, 0x7fff, 0x9, 0x5, 0x20009, 0x3, 0x6, 0x1ff, 0x1ff, 0xc, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x39, 0xa, 0x0, 0x401, 0x14e, 0x9, 0x40, 0x80, 0x3, 0xd4, 0x800, 0x23, 0x6, 0x9, 0x3a9, 0xfc7, 0xd, 0x0, 0x80000001, 0x9, 0x6, 0x2, 0xffffb6d4, 0x8, 0x100, 0x7, 0x3e0000, 0x0, 0x401, 0x7, 0x100, 0x80000000, 0x4, 0x7, 0x3, 0xcf800, 0x2b9c, 0x21000, 0xfffffff8, 0x3, 0xffffd848, 0x4, 0x10, 0x0, 0x0, 0x4, 0x402, 0xaf2, 0x3, 0x6ea, 0x4004, 0x1, 0xc81, 0x9, 0x7, 0x5653, 0xffffffff, 0x6, 0x5, 0x7, 0x10000, 0x7, 0x95, 0x10001, 0x7, 0x5248, 0x6, 0xe08b, 0x5, 0x7ff, 0xce, 0x5, 0x0, 0x9, 0x1000, 0x4, 0x0, 0x3, 0x4, 0xc, 0x3fed, 0x5, 0x50ce, 0x3, 0x9, 0x6, 0x8, 0x5, 0xfffffff7, 0x2, 0x1ff, 0x200, 0x3, 0x8, 0x10, 0x6, 0xa4, 0x5, 0xffffffff, 0xd65e, 0x7, 0x84, 0x2, 0x200, 0x8, 0xb56, 0x10000005, 0x7, 0xe, 0x800d523, 0x80, 0x1, 0x7, 0x9, 0xfffffff5, 0x0, 0x2, 0x7fff, 0x9a, 0x2, 0x800, 0x0, 0x1, 0x5, 0xfffffffe, 0x5, 0xffffffc0, 0x5ea, 0x800, 0x6d6ae3f8, 0x80000000, 0xc, 0x1, 0x1000, 0x8, 0x3, 0x8020000, 0x5, 0x6, 0xfffffffe, 0x71, 0x8001, 0x0, 0x1, 0xd2f3]}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x80000001, 0x0, 0x5, 0x4, 0xe458, 0x1, 0x7fff, 0x3, 0x2, 0x1, 0x8, 0xe6, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x69, 0x3, 0x94, 0x3, 0x2, 0x200, 0x4, 0x3, 0x3d78, 0xd, 0xffffffff, 0x3, 0x3, 0x3, 0x6, 0x5, 0x6, 0x2, 0x8, 0x9c, 0xfffff84f, 0x7, 0xfffffffe, 0xfffffff8, 0x0, 0x6, 0x9, 0x9527, 0x58d6, 0x8, 0x101, 0x302, 0x9, 0xd, 0x1007, 0x5, 0x296, 0x4, 0x7, 0x0, 0x592b3cb6, 0x2531, 0x4, 0xc, 0x201c, 0x2, 0x3, 0x5, 0x4, 0x7, 0xffffffff, 0x0, 0x8, 0xd4, 0x9, 0x3, 0x7, 0xfffffffe, 0x2, 0x8242, 0x75ebf8d8, 0x1ff8e0, 0xd, 0x0, 0xc, 0x47efe37, 0x7, 0x4, 0x2, 0x5, 0xac25, 0x7, 0x9, 0x7, 0x5, 0x800000, 0xe73, 0xc4, 0x3, 0x6, 0x6, 0x9, 0x9, 0xffffffff, 0x3, 0x2, 0xa, 0xf1b5, 0x418, 0x2, 0x7ff, 0x9, 0x7fff, 0x5, 0x1, 0x7f, 0x1, 0x8, 0x0, 0x401, 0x8, 0x6, 0x401, 0x3, 0x8, 0xfffffff9, 0x1000000, 0xc323aa4f, 0x81, 0x4, 0x8, 0x4, 0x7f0, 0x400, 0x1, 0x80, 0xffffffff, 0x0, 0x5, 0x200, 0x800, 0x2, 0xc, 0x2, 0xfffffff5, 0xffffff01, 0x5, 0xfffffffd, 0x5d99, 0xffffff81, 0x2, 0x3, 0x4, 0x6, 0x2, 0xf, 0x9b7, 0x100, 0x80000001, 0x5, 0x5, 0x7, 0x4, 0x7, 0x7fffffff, 0x2, 0x2, 0x8, 0x2, 0x5dbe, 0x9, 0x1, 0x42, 0xfffffeff, 0x7, 0xfff, 0x8, 0x0, 0x6, 0xdaf, 0x80000001, 0x8000, 0x9, 0x101, 0x2, 0xe0f, 0x1, 0x40, 0x2, 0xbaef, 0x4, 0x2, 0x7, 0xc, 0x800, 0xffff, 0x3, 0x13c, 0x5, 0x8, 0x4, 0x1, 0x461, 0x7fffffff, 0x3, 0x7ff, 0xda5fbaf3, 0xd, 0x10, 0x6, 0x1, 0x81, 0xffffff49, 0x5c, 0x1, 0x9000000, 0x797, 0x40, 0x1ff, 0x2, 0x290, 0x2, 0xfff, 0x7, 0x0, 0x100, 0x4, 0x2, 0x200, 0x4, 0x5, 0x5, 0xfff, 0x1, 0x7, 0x401, 0x8, 0x6edf, 0x0, 0x1, 0x7fffffff, 0x2, 0x763, 0xfffffffd, 0xff, 0x949, 0x0, 0x4, 0xe7, 0x80, 0x5, 0x180000, 0x8, 0x9, 0x7f, 0xfffffffc, 0x0, 0xfffffff7]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000)

26.323021506s ago: executing program 6 (id=1244):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

25.445156538s ago: executing program 6 (id=1257):
r0 = syz_clone(0x11c0400, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r1 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0)
landlock_restrict_self(r1, 0x0)
process_vm_readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/134, 0x86}], 0x1, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/4096, 0x2f039347b16b33d3}], 0x1, 0x0)

25.270305836s ago: executing program 6 (id=1259):
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x2000010, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]})
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

25.046379767s ago: executing program 6 (id=1263):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='e:my_eprobe sch-d/sc', 0x14)

24.885721654s ago: executing program 6 (id=1265):
chdir(&(0x7f0000000540)='./cgroup\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
lseek(r0, 0x7fffdfff, 0x2)
getdents64(r0, &(0x7f0000000300)=""/175, 0xaf)

9.73724892s ago: executing program 37 (id=1265):
chdir(&(0x7f0000000540)='./cgroup\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
lseek(r0, 0x7fffdfff, 0x2)
getdents64(r0, &(0x7f0000000300)=""/175, 0xaf)

6.314280731s ago: executing program 7 (id=1428):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0)
geteuid()
write(r0, &(0x7f00000000c0)="fcc1", 0x2)

6.297195012s ago: executing program 7 (id=1431):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', <r1=>0x0})
setns(0xc9, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, &(0x7f0000000180)='`', 0x1, 0x0, &(0x7f0000000240)={0x3a, 0xd, r1, 0x1, 0x7, 0x6, @local}, 0x14)

5.28552679s ago: executing program 7 (id=1435):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd2c, 0x6, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfffe}, {0x0, 0xfff1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041880)

4.285126047s ago: executing program 7 (id=1439):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100)
close(r0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2.925453691s ago: executing program 9 (id=1442):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x63, 0x5, 0x9}}}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x40}}, 0x0)

2.925188941s ago: executing program 7 (id=1443):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x5, 0x14, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c909cda49a11ff76e906b13a0c26ef2f2b18d4dcaffbc3200f99d6f328ccecaf9ec49aa55fba663c523", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56229263b3", [0xa2, 0x3562]})

1.89399696s ago: executing program 9 (id=1446):
socket$inet(0x2, 0x3, 0x8d)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x2)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x80000000, 0x0)

1.89374521s ago: executing program 7 (id=1447):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000440)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@lazytime}, {@data_err_abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nobh}]}, 0x1, 0x440, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x1b4)
ftruncate(r1, 0x6000000)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001})

1.89361414s ago: executing program 38 (id=1447):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000440)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@lazytime}, {@data_err_abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nobh}]}, 0x1, 0x440, &(0x7f0000000780)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x1b4)
ftruncate(r1, 0x6000000)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001})

1.878676951s ago: executing program 3 (id=1448):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x48, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x9, 0x48, 0x5, 0x32ef}}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.781075836s ago: executing program 9 (id=1449):
setns(0xc9, 0x0)
r0 = socket(0x8, 0x5, 0xb)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x6180, 0x0)
r1 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x6180, 0x0)

1.780770645s ago: executing program 3 (id=1450):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f00000048c0)=[{&(0x7f0000000340)=""/169, 0xa9}], 0x1, 0x9b90, 0x1)

1.780542785s ago: executing program 8 (id=1452):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

480.832637ms ago: executing program 8 (id=1453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

476.893067ms ago: executing program 9 (id=1454):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r0, 0x1, 0x0, 0xf7fffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)

413.78953ms ago: executing program 3 (id=1455):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000b7080000000000007b8af8ff00000000b7080000d50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2}, 0xc)

354.256823ms ago: executing program 9 (id=1456):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x8, &(0x7f0000000600)=ANY=[], 0x2, 0x1521, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x48)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000001, 0x100000000, 0x0, 0x1, 0x18, 0x1c, "fee806bb2c7e179fd1f9a0e91ddaacc90064c6a4b4e00d9683ddaeaf1ea800000000000000000300000000000000000000000010000000000000000000000022", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7bc08b3551265406c60306003d8070400", [0x9, 0x43]}})

353.894583ms ago: executing program 3 (id=1457):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x8})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0', 0x1)

318.093864ms ago: executing program 8 (id=1458):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0x8, 0xffffffff, 0x7}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xe8, 0x0, 0x40}]})

236.690938ms ago: executing program 9 (id=1459):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f57586b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000340)={0x3, 0x200, 0x0, 0x4, 0x4, 0x7})

236.400058ms ago: executing program 3 (id=1460):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)

129.818883ms ago: executing program 8 (id=1461):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
readv(r0, &(0x7f0000005080)=[{&(0x7f0000003d80)=""/4096, 0x1000}], 0x1)

129.419963ms ago: executing program 3 (id=1462):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x29f, &(0x7f0000000c00)="$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")
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800)
syz_usb_connect$uac3(0x1, 0x24, 0x0, 0x0)

96.491825ms ago: executing program 8 (id=1463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)

0s ago: executing program 8 (id=1464):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x40, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x761}], 0x1, 0x40000002, 0x0)

kernel console output (not intermixed with test programs):

il, usb_ep_enable returned -22
[  140.083379][ T6705] device gretap0 entered promiscuous mode
[  140.094416][    T7] Bluetooth: hci5: command 0x0419 tx timeout
[  140.095930][ T5838] attempt to access beyond end of device
[  140.095930][ T5838] loop6: rw=2049, want=45104, limit=40427
[  140.123763][ T6710] netlink: 5 bytes leftover after parsing attributes in process `syz.3.694'.
[  140.162318][ T6710] 0ªî{X¹¦: renamed from gretap0
[  140.184152][ T1108] gspca_cpia1: usb_control_msg 05, error -71
[  140.195323][ T1108] cpia1 9-1:0.0: unexpected systemstate: 01
[  140.215540][ T1108] usb 9-1: USB disconnect, device number 2
[  140.238235][ T6710] device 
30ªî{X¹¦ left promiscuous mode
[  140.250922][ T6710] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  140.316066][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.324807][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.388304][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  140.396812][ T6107] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input16
[  140.407702][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  140.438842][ T6484] device veth0_vlan entered promiscuous mode
[  140.467986][ T6109] kernel write not supported for file /dummy_udc (pid: 6109 comm: kworker/0:20)
[  140.478005][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  140.496662][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  140.519605][ T6484] device veth1_vlan entered promiscuous mode
[  140.622376][ T6484] device veth0_macvtap entered promiscuous mode
[  140.636971][ T6488] usb 8-1: USB disconnect, device number 4
[  140.645286][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  140.654322][ T6488] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  140.665956][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  140.705977][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  140.748986][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  140.808615][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  140.823940][ T6723] loop3: detected capacity change from 0 to 1024
[  140.847877][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  140.883335][ T6484] device veth1_macvtap entered promiscuous mode
[  140.928068][ T6723] EXT4-fs (loop3): Ignoring removed bh option
[  140.940593][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.981242][ T6724] loop8: detected capacity change from 0 to 8192
[  140.999244][ T6723] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  141.054350][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.064778][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.075605][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.089102][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.100103][ T6724] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal
[  141.115492][ T6724] REISERFS (device loop8): using ordered data mode
[  141.132190][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.182570][ T6724] reiserfs: using flush barriers
[  141.226279][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.260650][ T6724] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  141.267838][ T6738] loop7: detected capacity change from 0 to 512
[  141.290657][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.301994][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.314304][ T6724] REISERFS (device loop8): checking transaction log (loop8)
[  141.333743][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.358354][ T6724] REISERFS (device loop8): Using r5 hash to sort names
[  141.407277][ T6724] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  141.425907][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.454150][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.490852][ T6738] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  141.505520][ T6738] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.559005][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.569048][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.579695][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.612618][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.689260][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.715034][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.736789][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.749640][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.763239][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.787821][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.804689][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  141.834141][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  141.848649][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  141.860338][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  141.901472][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  141.923560][ T6484] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.932860][ T6484] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.951446][ T6484] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.965058][ T6484] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.176830][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.209361][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.234011][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.255863][ T6763] input: syz1 as /devices/virtual/input/input17
[  142.282672][ T1481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.286969][ T6763] input: failed to attach handler leds to device input17, error: -6
[  142.300933][ T1481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.354338][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  142.540088][ T6773] loop8: detected capacity change from 0 to 128
[  142.593664][ T6773] ufs: ufstype=nextstep is supported read-only
[  142.775297][ T6108] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  142.812326][ T6779] loop7: detected capacity change from 0 to 4096
[  142.863970][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.931206][ T6779] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  142.932873][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.956052][ T6790] netlink: 656 bytes leftover after parsing attributes in process `syz.8.716'.
[  142.980737][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ca01c00: rx timeout, send abort
[  142.992194][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ca01c00: 0x30100: (3) A timeout occurred and this is the connection abort to close the session.
[  143.055245][ T6108] usb 4-1: Using ep0 maxpacket: 8
[  143.129698][ T6800] loop6: detected capacity change from 0 to 512
[  143.142610][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.241959][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.261095][ T6803] loop8: detected capacity change from 0 to 2048
[  143.332495][ T6800] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.720: missing EA_INODE flag
[  143.345390][ T6108] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  143.365001][ T6108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.383626][ T6800] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.720: error while reading EA inode 2 err=-117
[  143.430432][ T6108] usb 4-1: Product: syz
[  143.434635][ T6108] usb 4-1: Manufacturer: syz
[  143.467178][ T6812] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.512264][ T6108] usb 4-1: SerialNumber: syz
[  143.513561][ T6800] EXT4-fs (loop6): 1 orphan inode deleted
[  143.533699][ T6800] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  143.549795][ T6108] usb 4-1: config 0 descriptor??
[  143.825467][ T6108] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  144.009842][ T6831] input: syz0 as /devices/virtual/input/input18
[  144.187868][ T6838] gadgetfs: bound to dummy_udc driver
[  144.341603][ T6818] loop7: detected capacity change from 0 to 40427
[  144.408166][ T6818] F2FS-fs (loop7): invalid crc value
[  144.451781][ T6818] F2FS-fs (loop7): Found nat_bits in checkpoint
[  144.545529][ T6108] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  144.592435][ T6108] usb 4-1: USB disconnect, device number 12
[  144.592739][ T6818] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  144.833432][ T5942] attempt to access beyond end of device
[  144.833432][ T5942] loop7: rw=2049, want=45104, limit=40427
[  144.922341][    T9] device hsr_slave_0 left promiscuous mode
[  144.929126][    T9] device hsr_slave_1 left promiscuous mode
[  144.941899][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.952022][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.961873][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.979397][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.997638][    T9] device bridge_slave_1 left promiscuous mode
[  145.003861][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.015598][    T9] device bridge_slave_0 left promiscuous mode
[  145.021836][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.042983][    T9] device veth1_macvtap left promiscuous mode
[  145.065331][ T6107] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  145.096334][    T9] device veth0_macvtap left promiscuous mode
[  145.102457][    T9] device veth1_vlan left promiscuous mode
[  145.158999][    T9] device veth0_vlan left promiscuous mode
[  145.305242][ T6107] usb 7-1: Using ep0 maxpacket: 16
[  145.341128][ T6890] ip_tables: iptables: counters copy to user failed while replacing table
[  145.430404][ T6107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.469665][ T6107] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  145.505883][ T6107] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  145.532221][ T6107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.551030][ T6107] usb 7-1: config 0 descriptor??
[  145.670554][ T6902] loop7: detected capacity change from 0 to 2048
[  145.712476][ T6902]  loop7: p1 < > p3
[  145.724764][ T6902] loop7: p3 size 134217728 extends beyond EOD, truncated
[  145.808413][    T9] team0 (unregistering): Port device team_slave_0 removed
[  145.848795][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.905395][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.983546][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  146.016792][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  146.037519][ T6107] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max
[  146.057124][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.082883][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.111398][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.120195][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.127783][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.131202][    T9] bond0 (unregistering): Released all slaves
[  146.135750][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.154854][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.163061][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.177310][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.184764][ T6107] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  146.200123][ T6107] HID 045e:07da: Invalid code 65791 type 1
[  146.206935][ T6107] HID 045e:07da: Invalid code 768 type 1
[  146.212728][ T6107] HID 045e:07da: Invalid code 769 type 1
[  146.220026][ T6107] HID 045e:07da: Invalid code 770 type 1
[  146.226109][ T6107] HID 045e:07da: Invalid code 771 type 1
[  146.232062][ T6107] HID 045e:07da: Invalid code 772 type 1
[  146.238655][ T6107] HID 045e:07da: Invalid code 773 type 1
[  146.244598][ T6107] HID 045e:07da: Invalid code 774 type 1
[  146.250657][ T6107] HID 045e:07da: Invalid code 775 type 1
[  146.257322][ T6107] HID 045e:07da: Invalid code 776 type 1
[  146.286412][ T6107] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000B/input/input20
[  146.376253][ T6107] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  146.712002][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.744'.
[  146.825236][ T6910] usb 7-1: USB disconnect, device number 4
[  146.939421][ T6921] loop3: detected capacity change from 0 to 256
[  147.157169][ T6929] loop9: detected capacity change from 0 to 512
[  147.242142][ T6929] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.756: Invalid inode bitmap blk 4 in block_group 0
[  147.252730][ T6936] 9pnet: p9_errstr2errno: server reported unknown error �
[  147.262359][ T6929] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback.
[  147.312657][ T6939] loop5: detected capacity change from 0 to 7
[  147.351949][ T6939] Dev loop5: unable to read RDB block 7
[  147.363819][ T6939]  loop5: unable to read partition table
[  147.387786][ T6939] loop5: partition table beyond EOD, truncated
[  147.411628][ T6939] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  147.498822][ T4284] Dev loop5: unable to read RDB block 7
[  147.509689][ T4284]  loop5: unable to read partition table
[  147.525010][ T6947] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  147.525010][ T6947] The task syz.6.762 (6947) triggered the difference, watch for misbehavior.
[  147.561680][ T4284] loop5: partition table beyond EOD, truncated
[  147.606537][ T6941] Dev loop5: unable to read RDB block 7
[  147.623522][ T6941]  loop5: unable to read partition table
[  147.659681][ T6941] loop5: partition table beyond EOD, truncated
[  147.695428][ T6941] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  147.998388][   T25] audit: type=1800 audit(1789401432.408:15): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.767" name="c_ssize" dev="configfs" ino=43533 res=0 errno=0
[  148.486906][ T6973] loop6: detected capacity change from 0 to 512
[  148.545889][ T6973] EXT4-fs (loop6): Ignoring removed oldalloc option
[  148.617429][ T6973] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  148.643873][ T6979] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  148.927133][ T6989] netlink: 104 bytes leftover after parsing attributes in process `syz.3.782'.
[  149.172919][ T7000] loop8: detected capacity change from 0 to 256
[  149.293796][ T7000] FAT-fs (loop8): Directory bread(block 64) failed
[  149.349807][ T7000] FAT-fs (loop8): Directory bread(block 65) failed
[  149.376571][ T7000] FAT-fs (loop8): Directory bread(block 66) failed
[  149.413625][ T7000] FAT-fs (loop8): Directory bread(block 67) failed
[  149.431100][ T7006] comedi comedi1: Minor 47 could not be opened
[  149.431543][ T7000] FAT-fs (loop8): Directory bread(block 68) failed
[  149.482025][ T7000] FAT-fs (loop8): Directory bread(block 69) failed
[  149.520223][ T7000] FAT-fs (loop8): Directory bread(block 70) failed
[  149.561543][ T7000] FAT-fs (loop8): Directory bread(block 71) failed
[  149.596535][ T6995] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21
[  149.610591][ T7000] FAT-fs (loop8): Directory bread(block 72) failed
[  149.640326][ T7000] FAT-fs (loop8): Directory bread(block 73) failed
[  150.163761][ T7032] device team_slave_0 entered promiscuous mode
[  150.170587][ T7032] device team_slave_1 entered promiscuous mode
[  150.241571][ T7032] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  150.303595][ T7034] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  150.355382][ T6937] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  150.535447][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.7.799'.
[  150.581938][ T7012] loop3: detected capacity change from 0 to 32768
[  150.845251][ T7059] loop6: detected capacity change from 0 to 8192
[  150.874118][ T7012] XFS (loop3): Mounting V5 Filesystem
[  150.975805][ T7012] XFS (loop3): Ending clean mount
[  150.990627][ T7059] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  151.025046][ T7059] REISERFS (device loop6): using ordered data mode
[  151.026942][ T7012] XFS (loop3): Quotacheck needed: Please wait.
[  151.081557][ T7059] reiserfs: using flush barriers
[  151.087923][ T7059] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  151.105478][ T7059] REISERFS (device loop6): checking transaction log (loop6)
[  151.123461][ T7059] REISERFS (device loop6): Using r5 hash to sort names
[  151.150731][ T7059] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  151.171578][ T7012] XFS (loop3): Quotacheck: Done.
[  151.468947][ T4191] XFS (loop3): Unmounting Filesystem
[  151.874222][ T7105] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  152.313465][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.825'.
[  152.394379][ T7132] loop8: detected capacity change from 0 to 64
[  152.543489][ T7132] hfs: unable to load iocharset "koi8-rucodepage=maciceland"
[  152.563993][ T7132] hfs: unable to parse mount options
[  152.677814][ T7138] loop7: detected capacity change from 0 to 4096
[  152.702738][ T7135] loop6: detected capacity change from 0 to 8192
[  152.810018][ T7135] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  152.861443][ T7147] FAULT_INJECTION: forcing a failure.
[  152.861443][ T7147] name failslab, interval 1, probability 1, space 0, times 0
[  152.896263][ T7135] REISERFS (device loop6): using ordered data mode
[  152.902801][ T7135] reiserfs: using flush barriers
[  152.985421][ T7147] CPU: 0 PID: 7147 Comm: syz.8.840 Not tainted syzkaller #0
[  152.992750][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  153.002811][ T7147] Call Trace:
[  153.006100][ T7147]  <TASK>
[  153.009036][ T7147]  dump_stack_lvl+0x188/0x250
[  153.013750][ T7147]  ? show_regs_print_info+0x20/0x20
[  153.017103][ T7135] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  153.018953][ T7147]  ? load_image+0x410/0x410
[  153.018981][ T7147]  ? __lock_acquire+0x7b50/0x7b50
[  153.044349][ T7147]  ? memset+0x1e/0x40
[  153.048347][ T7147]  should_fail+0x383/0x4b0
[  153.052777][ T7147]  should_failslab+0x5/0x20
[  153.057282][ T7147]  slab_pre_alloc_hook+0x51/0xc0
[  153.062238][ T7147]  kmem_cache_alloc_trace+0x47/0x290
[  153.067532][ T7147]  ? hugetlbfs_init_fs_context+0x4f/0x360
[  153.073301][ T7147]  hugetlbfs_init_fs_context+0x4f/0x360
[  153.078868][ T7147]  alloc_fs_context+0x628/0x7d0
[  153.083732][ T7147]  __se_sys_fsopen+0x111/0x320
[  153.088513][ T7147]  do_syscall_64+0x4c/0xa0
[  153.092933][ T7147]  ? clear_bhb_loop+0x30/0x80
[  153.097613][ T7147]  ? clear_bhb_loop+0x30/0x80
[  153.102296][ T7147]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  153.108206][ T7147] RIP: 0033:0x7fc57922c159
[  153.112626][ T7147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.124317][ T7135] REISERFS (device loop6): checking transaction log (loop6)
[  153.132233][ T7147] RSP: 002b:00007fc577484028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  153.132259][ T7147] RAX: ffffffffffffffda RBX: 00007fc5794b3fa0 RCX: 00007fc57922c159
[  153.132272][ T7147] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040
[  153.132283][ T7147] RBP: 00007fc5792c303b R08: 0000000000000000 R09: 0000000000000000
[  153.132293][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.132310][ T7147] R13: 00007fc5794b4038 R14: 00007fc5794b3fa0 R15: 00007ffe7c1a34a8
[  153.187785][ T7147]  </TASK>
[  153.224825][ T7140] loop3: detected capacity change from 0 to 32768
[  153.252759][ T7135] REISERFS (device loop6): Using r5 hash to sort names
[  153.298458][ T7140] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.811 (7140)
[  153.351814][ T7135] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  153.436514][ T7140] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  153.499735][ T7158] loop7: detected capacity change from 0 to 2048
[  153.505239][ T7140] BTRFS info (device loop3): enabling auto defrag
[  153.516602][ T7135] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  153.530787][ T7140] BTRFS info (device loop3): force clearing of disk cache
[  153.563326][ T7140] BTRFS info (device loop3): ignoring data csums
[  153.573410][ T7140] BTRFS info (device loop3): turning on async discard
[  153.607306][ T7140] BTRFS info (device loop3): setting nodatacow, compression disabled
[  153.654882][ T7158] device-mapper: ioctl: invalid device name
[  153.685416][ T7140] BTRFS info (device loop3): turning off async discard
[  153.731859][ T7140] BTRFS info (device loop3): disabling free space tree
[  153.757093][ T7140] BTRFS info (device loop3): has skinny extents
[  154.461796][ T7212] netlink: 'syz.6.837': attribute type 49 has an invalid length.
[  155.305519][ T6111] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  155.640328][ T6111] usb 4-1: not running at top speed; connect to a high speed hub
[  155.735338][ T6111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.777328][ T6111] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  155.799107][ T6111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.841899][ T7254] FAULT_INJECTION: forcing a failure.
[  155.841899][ T7254] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  155.857496][ T6111] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  155.936718][ T7254] CPU: 1 PID: 7254 Comm: syz.8.858 Not tainted syzkaller #0
[  155.944058][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.954133][ T7254] Call Trace:
[  155.957423][ T7254]  <TASK>
[  155.960363][ T7254]  dump_stack_lvl+0x188/0x250
[  155.965055][ T7254]  ? show_regs_print_info+0x20/0x20
[  155.970268][ T7254]  ? load_image+0x410/0x410
[  155.974786][ T7254]  ? __lock_acquire+0x7b50/0x7b50
[  155.979823][ T7254]  ? __lock_acquire+0x7b50/0x7b50
[  155.984862][ T7254]  should_fail+0x383/0x4b0
[  155.989298][ T7254]  set_fd_set+0x3a/0x90
[  155.993465][ T7254]  core_sys_select+0x7c1/0x8f0
[  155.998247][ T7254]  ? poll_select_set_timeout+0x150/0x150
[  156.003913][ T7254]  ? sigprocmask+0x190/0x190
[  156.008519][ T7254]  ? __context_tracking_exit+0x4c/0x80
[  156.014007][ T7254]  __se_sys_pselect6+0x2f4/0x3c0
[  156.019057][ T7254]  ? __x64_sys_pselect6+0xf0/0xf0
[  156.024106][ T7254]  ? __x64_sys_pselect6+0x1d/0xf0
[  156.029144][ T7254]  do_syscall_64+0x4c/0xa0
[  156.033570][ T7254]  ? clear_bhb_loop+0x30/0x80
[  156.038262][ T7254]  ? clear_bhb_loop+0x30/0x80
[  156.042948][ T7254]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  156.048848][ T7254] RIP: 0033:0x7fc57922c159
[  156.053267][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.072879][ T7254] RSP: 002b:00007fc577484028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  156.081306][ T7254] RAX: ffffffffffffffda RBX: 00007fc5794b3fa0 RCX: 00007fc57922c159
[  156.089288][ T7254] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 000000000000002a
[  156.097359][ T7254] RBP: 00007fc5792c303b R08: 0000200000000400 R09: 0000000000000000
[  156.105340][ T7254] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000
[  156.113324][ T7254] R13: 00007fc5794b4038 R14: 00007fc5794b3fa0 R15: 00007ffe7c1a34a8
[  156.121319][ T7254]  </TASK>
[  156.127470][ T7207] loop7: detected capacity change from 0 to 65536
[  156.295322][ T6111] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  156.332010][ T7207] XFS (loop7): Mounting V5 Filesystem
[  156.505338][ T7207] XFS (loop7): Ending clean mount
[  156.539328][ T7207] XFS (loop7): Quotacheck needed: Please wait.
[  156.560916][ T7275] loop8: detected capacity change from 0 to 2048
[  156.635050][ T4506] usb 4-1: USB disconnect, device number 13
[  156.695332][ T7275] UDF-fs: error (device loop8): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  156.723215][ T7207] XFS (loop7): Quotacheck: Done.
[  156.778660][ T7275] UDF-fs: error (device loop8): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  156.882811][ T7287] UDF-fs: error (device loop8): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  156.908024][ T7207] XFS (loop7): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[  156.939436][ T7287] UDF-fs: error (device loop8): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  157.002177][ T7291] binder: 7289:7291 ioctl c018620c 200000000080 returned -1
[  157.172444][ T5942] XFS (loop7): Unmounting Filesystem
[  157.441295][ T7303] loop8: detected capacity change from 0 to 512
[  157.635459][ T7303] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  157.675404][ T7303] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  157.690496][ T7310] loop6: detected capacity change from 0 to 8
[  157.700470][ T7303] System zones: 1-12
[  157.726710][ T7303] EXT4-fs (loop8): orphan cleanup on readonly fs
[  157.842532][ T7303] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.866: bg 0: block 361: padding at end of block bitmap is not set
[  157.925985][ T7303] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  157.986760][ T7303] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.866: invalid indirect mapped block 12 (level 1)
[  158.061221][ T7303] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.866: invalid indirect mapped block 2 (level 2)
[  158.102574][ T7327] netlink: 'syz.6.876': attribute type 29 has an invalid length.
[  158.112202][ T7303] EXT4-fs (loop8): 1 truncate cleaned up
[  158.126299][ T7303] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none.
[  158.152206][ T7327] netlink: 'syz.6.876': attribute type 29 has an invalid length.
[  158.228995][ T7328] netlink: 'syz.6.876': attribute type 29 has an invalid length.
[  158.277291][ T7330] netlink: 'syz.6.876': attribute type 29 has an invalid length.
[  158.300445][ T7332] loop7: detected capacity change from 0 to 512
[  158.307221][ T7327] netlink: 'syz.6.876': attribute type 29 has an invalid length.
[  158.404442][ T7332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  158.525258][ T7332] System zones: 1-12
[  158.591590][ T7346] loop6: detected capacity change from 0 to 2048
[  158.598902][ T7332] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.865: missing EA_INODE flag
[  158.672550][ T7332] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.865: error while reading EA inode 12 err=-117
[  158.752377][ T7346] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.781478][ T7332] EXT4-fs (loop7): 1 orphan inode deleted
[  158.790386][ T7357] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  158.801175][ T7332] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  159.095516][ T7365] loop6: detected capacity change from 0 to 128
[  159.148635][ T7368] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  159.242248][ T7365] FAT-fs (loop6): Directory bread(block 162) failed
[  159.265323][ T7365] FAT-fs (loop6): Directory bread(block 163) failed
[  159.271980][ T7365] FAT-fs (loop6): Directory bread(block 164) failed
[  159.281329][ T7371] loop7: detected capacity change from 0 to 256
[  159.315383][ T7365] FAT-fs (loop6): Directory bread(block 165) failed
[  159.345371][ T6908] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  159.354073][ T7365] FAT-fs (loop6): Directory bread(block 166) failed
[  159.410841][ T7365] FAT-fs (loop6): Directory bread(block 167) failed
[  159.424328][ T7374] loop8: detected capacity change from 0 to 1024
[  159.475580][ T7374] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  159.494064][ T7365] FAT-fs (loop6): Directory bread(block 168) failed
[  159.521953][ T7365] FAT-fs (loop6): Directory bread(block 169) failed
[  159.554812][ T7374] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  159.570886][ T7365] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.589418][ T7374] jbd2_journal_init_inode: Cannot locate journal superblock
[  159.635332][ T6908] usb 10-1: Using ep0 maxpacket: 32
[  159.652716][ T7374] EXT4-fs (loop8): Could not load journal inode
[  159.755398][ T6908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.782780][ T6908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.808359][ T6908] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  159.829999][ T6908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.833191][ T7380] loop3: detected capacity change from 0 to 512
[  159.876058][ T6908] usb 10-1: config 0 descriptor??
[  159.963031][ T7380] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[  159.993129][ T7380] System zones: 0-2, 18-18, 34-34
[  160.021823][ T7380] EXT4-fs (loop3): 1 orphan inode deleted
[  160.035453][ T7380] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue. Quota mode: none.
[  160.051021][ T7380] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.375617][ T6908] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0
[  160.488218][ T6111] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  160.673332][ T4506] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  160.682824][ T6487] usb 10-1: USB disconnect, device number 2
[  160.868362][ T6111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.888914][ T6111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  160.924111][ T6111] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  160.934302][ T4506] usb 7-1: Using ep0 maxpacket: 8
[  160.966313][ T6111] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  160.994998][ T6111] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  161.011589][ T6111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.037966][ T7423] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  161.055336][ T4506] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  161.074280][ T4506] usb 7-1: config 179 has no interface number 0
[  161.087592][ T4506] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  161.115709][ T4506] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  161.135239][ T4506] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  161.148262][ T4506] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  161.166986][ T4506] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  161.191501][ T4506] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  161.231931][ T4506] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.295437][ T7404] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  161.353751][ T7431] loop7: detected capacity change from 0 to 2048
[  161.373318][ T4506] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  161.389448][ T4506] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  161.454515][ T7431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.612213][ T4506] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input22
[  161.955327][ T6111] gud 4-1:1.0: Failed to get connectors (error=-5)
[  161.964252][ T6111] gud: probe of 4-1:1.0 failed with error -5
[  162.018853][ T6111] usb 7-1: USB disconnect, device number 5
[  162.035157][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  162.043488][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  162.212886][ T6107] usb 4-1: USB disconnect, device number 14
[  162.389365][ T7458] ima: policy update failed
[  162.404402][   T25] audit: type=1802 audit(1789401446.808:16): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.908" res=0 errno=0
[  162.765391][ T6107] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  162.820537][ T7487] loop3: detected capacity change from 0 to 512
[  162.961123][ T7487] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  162.976758][ T7487] EXT4-fs (loop3): orphan cleanup on readonly fs
[  163.004879][ T7487] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  163.025206][ T6107] usb 8-1: Using ep0 maxpacket: 16
[  163.030959][ T7487] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  163.050691][ T7487] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.918: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  163.073703][   T25] audit: type=1326 audit(1789401447.478:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7502 comm="syz.6.925" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ae77c8159 code=0x0
[  163.108147][ T7487] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.918: couldn't read orphan inode 13 (err -117)
[  163.128025][ T7487] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,noblock_validity,min_batch_time=0x00000000000052ad,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback.
[  163.154940][ T6107] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.185167][ T6107] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  163.250726][ T6107] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  163.298355][ T6107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.340123][ T7517] netlink: 27 bytes leftover after parsing attributes in process `syz.9.928'.
[  163.360243][ T6107] usb 8-1: config 0 descriptor??
[  163.366140][ T7487] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[  163.395400][ T7519] Illegal XDP return value 4294967274, expect packet loss!
[  163.416454][ T7487] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  163.454528][ T7487] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  163.463234][ T7487] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  163.714083][ T7537] loop3: detected capacity change from 0 to 1024
[  163.876933][ T6107] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max
[  163.935647][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  163.967210][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  163.984648][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'.
[  164.006910][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  164.039072][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  164.087037][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  164.094304][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  164.153169][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  164.189164][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  164.235196][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  164.274029][ T6107] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  164.287145][ T7563] loop6: detected capacity change from 0 to 1024
[  164.315747][ T6107] hid_map_usage: 11766 callbacks suppressed
[  164.315761][ T6107] HID 045e:07da: Invalid code 65791 type 1
[  164.332650][ T7566] device syzkaller1 entered promiscuous mode
[  164.342207][ T6107] HID 045e:07da: Invalid code 768 type 1
[  164.368713][ T6107] HID 045e:07da: Invalid code 769 type 1
[  164.379531][ T6107] HID 045e:07da: Invalid code 770 type 1
[  164.398407][ T7563] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  164.418369][ T6107] HID 045e:07da: Invalid code 771 type 1
[  164.428909][ T6107] HID 045e:07da: Invalid code 772 type 1
[  164.429211][ T7563] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  164.434571][ T6107] HID 045e:07da: Invalid code 773 type 1
[  164.434589][ T6107] HID 045e:07da: Invalid code 774 type 1
[  164.434602][ T6107] HID 045e:07da: Invalid code 775 type 1
[  164.529710][ T6107] HID 045e:07da: Invalid code 776 type 1
[  164.551832][ T7563] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,minixdf,grpjquota=,journal_ioprio=0x0000000000000000,dioread_nolock,nomblk_io_submit,noinit_itable,nogrpid,,errors=continue. Quota mode: none.
[  164.558104][ T7573] loop8: detected capacity change from 0 to 1764
[  164.581750][ T7563] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.593329][ T6107] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.000E/input/input23
[  164.643088][ T7563] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.943: bg 0: block 112: padding at end of block bitmap is not set
[  164.677194][ T6107] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  164.747447][ T7573] process 'syz.8.946' launched './file0' with NULL argv: empty string added
[  164.855336][   T21] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  165.096508][ T6908] usb 8-1: USB disconnect, device number 5
[  165.265505][   T21] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  165.285148][   T21] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  165.295348][ T6487] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  165.381556][ T7592] loop6: detected capacity change from 0 to 40427
[  165.418692][ T7592] F2FS-fs (loop6): invalid crc value
[  165.438771][ T7592] F2FS-fs (loop6): Found nat_bits in checkpoint
[  165.469417][   T21] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  165.495275][   T21] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.535783][   T21] usb 10-1: Product: syz
[  165.545442][ T6487] usb 9-1: Using ep0 maxpacket: 16
[  165.550767][   T21] usb 10-1: Manufacturer: syz
[  165.564369][   T21] usb 10-1: SerialNumber: syz
[  165.600502][ T7592] F2FS-fs (loop6): Start checkpoint disabled!
[  165.670669][ T7592] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  165.678612][ T6487] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30
[  165.715804][ T6487] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 103, changing to 10
[  165.740571][ T6487] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25970, setting to 1024
[  165.762066][ T6487] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254
[  165.811704][ T7592] attempt to access beyond end of device
[  165.811704][ T7592] loop6: rw=10241, want=45104, limit=40427
[  165.857148][   T21] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  165.905398][ T6487] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  165.923785][ T6487] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  165.949036][ T6487] usb 9-1: SerialNumber: syz
[  165.956173][  T154] attempt to access beyond end of device
[  165.956173][  T154] loop6: rw=2049, want=40976, limit=40427
[  165.996097][ T7594] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  166.112323][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.956'.
[  166.121545][ T7639] netlink: 'syz.7.956': attribute type 26 has an invalid length.
[  166.292255][ T6487] usb 9-1: USB disconnect, device number 3
[  166.342051][ T6908] usb 10-1: USB disconnect, device number 3
[  166.355948][ T6908] usblp0: removed
[  166.607929][ T7662] binder: 7659:7662 ioctl c0306201 2000000003c0 returned -14
[  166.615516][   T21] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  166.875155][   T21] usb 8-1: Using ep0 maxpacket: 8
[  167.175560][   T21] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  167.216646][   T21] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  167.224707][   T21] usb 8-1: Product: syz
[  167.268199][   T21] usb 8-1: Manufacturer: syz
[  167.278314][   T21] usb 8-1: SerialNumber: syz
[  167.327073][   T21] usb 8-1: config 0 descriptor??
[  167.391961][   T21] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  167.488077][ T7673] loop3: detected capacity change from 0 to 32768
[  167.509675][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz.6.971'.
[  167.514218][ T7673] XFS: noikeep mount option is deprecated.
[  167.608515][ T7673] XFS (loop3): Mounting V5 Filesystem
[  167.741146][ T7673] XFS (loop3): Ending clean mount
[  167.747686][ T7683] loop8: detected capacity change from 0 to 32768
[  167.786839][ T7673] XFS (loop3): Quotacheck needed: Please wait.
[  167.873876][ T7683] XFS (loop8): Mounting V5 Filesystem
[  167.930417][ T7673] XFS (loop3): Quotacheck: Done.
[  167.989080][ T7683] XFS (loop8): Ending clean mount
[  168.004998][ T4191] XFS (loop3): Unmounting Filesystem
[  168.015350][   T21] gspca_zc3xx: reg_w_i err -71
[  168.020281][   T21] gspca_zc3xx: probe of 8-1:0.0 failed with error -71
[  168.084492][   T21] usb 8-1: USB disconnect, device number 6
[  168.446542][ T6204] XFS (loop8): Unmounting Filesystem
[  168.636271][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.979'.
[  169.565527][ T6910] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  169.569895][ T7790] loop8: detected capacity change from 0 to 128
[  169.639586][ T6487] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  169.973681][ T6910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.994389][ T6910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.010325][ T6910] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  170.030038][ T6910] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  170.039866][ T6487] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.070612][ T6910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.135039][ T6910] usb 7-1: config 0 descriptor??
[  170.214270][ T7820] netlink: 'syz.3.998': attribute type 6 has an invalid length.
[  170.245411][ T6487] usb 8-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  170.254494][ T6487] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  170.295279][ T6487] usb 8-1: Product: syz
[  170.299484][ T6487] usb 8-1: Manufacturer: syz
[  170.317546][ T7827] loop3: detected capacity change from 0 to 64
[  170.406114][ T7827] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  170.407329][ T6487] navman 8-1:1.0: navman converter detected
[  170.463083][ T6487] usb 8-1: navman converter now attached to ttyUSB0
[  170.662651][ T6910] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  170.705387][ T6910] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  170.782265][ T6910] usb 8-1: USB disconnect, device number 7
[  170.841297][ T6910] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  170.870583][ T6910] navman 8-1:1.0: device disconnected
[  170.958317][    T7] usb 7-1: USB disconnect, device number 6
[  171.035365][ T1108] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  171.300169][ T7848] loop8: detected capacity change from 0 to 40427
[  171.354819][ T7848] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1ffff
[  171.377632][ T7848] F2FS-fs (loop8): invalid crc value
[  171.390889][ T7848] F2FS-fs (loop8): Found nat_bits in checkpoint
[  171.405843][ T1108] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  171.456476][ T1108] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  171.493960][ T7848] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  171.522530][ T1108] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  171.563196][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.573317][ T7860] loop7: detected capacity change from 0 to 4096
[  171.577180][ T7848] F2FS-fs (loop8): switch extent_cache option is not allowed
[  171.605744][ T7850] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  171.745788][ T7870] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.015226][ T1108] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  172.176600][ T7884] tap0: tun_chr_ioctl cmd 2148553947
[  172.190170][ T7884] tap0: tun_chr_ioctl cmd 1074025681
[  172.265333][ T1108] usb 7-1: Using ep0 maxpacket: 8
[  172.300148][ T7889] loop8: detected capacity change from 0 to 256
[  172.385507][ T1108] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.422051][ T1108] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  172.465694][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.492051][ T1108] usb 7-1: config 0 descriptor??
[  172.548262][ T1108] gspca_main: vc032x-2.14.0 probing 046d:0892
[  172.635338][ T6487] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  173.025343][ T6487] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.031937][ T7918] loop8: detected capacity change from 0 to 32768
[  173.044094][ T6487] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  173.165396][ T6487] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  173.182735][ T6487] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  173.200347][ T6487] usb 8-1: SerialNumber: syz
[  173.253518][ T4506] usb 4-1: USB disconnect, device number 15
[  173.507584][ T6487] usb 8-1: 0:2 : does not exist
[  173.587765][ T6487] usb 8-1: USB disconnect, device number 8
[  173.635344][ T1108] gspca_vc032x: reg_r err -71
[  173.640545][ T1108] vc032x: probe of 7-1:0.0 failed with error -71
[  173.677010][ T1108] usb 7-1: USB disconnect, device number 7
[  173.704965][ T7962] loop8: detected capacity change from 0 to 64
[  173.735537][ T7962] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing
[  173.857158][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.873505][ T7969] tmpfs: Bad value for 'mpol'
[  174.195240][ T6908] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  174.401869][ T7998] vxcan0: tx drop: invalid da for name 0x00000000000000c8
[  174.504075][ T6908] usb 9-1: Using ep0 maxpacket: 32
[  174.525175][ T1108] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  174.627008][ T6908] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  174.646064][ T6908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.656305][ T6908] usb 9-1: config 0 descriptor??
[  174.674462][ T7988] loop7: detected capacity change from 0 to 40427
[  174.705846][ T7988] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  174.712218][ T7988] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  174.727453][ T7988] F2FS-fs (loop7): invalid crc value
[  174.745753][ T6487] Bluetooth: hci0: command 0x1003 tx timeout
[  174.751873][ T4193] Bluetooth: hci0: sending frame failed (-49)
[  174.794127][ T7988] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  174.890942][ T7988] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  174.895431][ T1108] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  174.898098][ T7988] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  174.920293][ T1108] usb 4-1: config 0 has no interface number 0
[  174.935603][ T1108] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  174.945308][ T6908] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  174.950852][ T1108] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  174.980621][ T6908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  175.045695][ T6908] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  175.053180][ T6908] usb 9-1: media controller created
[  175.088039][ T8025] loop6: detected capacity change from 0 to 256
[  175.094424][ T6908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  175.135415][ T1108] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  175.146689][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.166887][ T1108] usb 4-1: Product: syz
[  175.171244][ T1108] usb 4-1: Manufacturer: syz
[  175.188708][ T1108] usb 4-1: SerialNumber: syz
[  175.209264][ T1108] usb 4-1: config 0 descriptor??
[  175.211354][ T6908] az6027: usb out operation failed. (-71)
[  175.227025][ T7993] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  175.253876][ T1108] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  175.256904][ T6908] az6027: usb out operation failed. (-71)
[  175.266788][ T1108] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  175.278095][ T6908] stb0899_attach: Driver disabled by Kconfig
[  175.284289][ T6908] az6027: no front-end attached
[  175.284289][ T6908] 
[  175.335417][ T6908] az6027: usb out operation failed. (-71)
[  175.341323][ T6908] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  175.377194][ T6908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input24
[  175.410523][ T8029] loop6: detected capacity change from 0 to 1024
[  175.422798][ T6908] dvb-usb: schedule remote query interval to 400 msecs.
[  175.431248][ T6908] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  175.450289][ T6908] usb 9-1: USB disconnect, device number 4
[  175.488761][ T8029] EXT4-fs (loop6): Ignoring removed orlov option
[  175.541088][ T8029] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  175.568682][ T8034] binder: 8032:8034 ioctl c0306201 2000000003c0 returned -14
[  175.601389][ T6908] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  175.715444][ T6487] Bluetooth: hci3: command 0x0406 tx timeout
[  175.747299][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.793880][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.878348][ T1108] usb 4-1: USB disconnect, device number 16
[  175.902349][ T1108] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  175.952858][ T1108] cyberjack 4-1:0.69: device disconnected
[  175.972922][ T8050] loop8: detected capacity change from 0 to 1024
[  176.050393][   T25] audit: type=1800 audit(1789401460.458:18): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1046" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  176.151921][ T8050] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  176.243631][ T8050] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  176.259826][ T6111] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  176.286449][ T8050] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  176.299194][ T8050] EXT4-fs (loop8): This should not happen!! Data will be lost
[  176.299194][ T8050] 
[  176.309486][ T8050] EXT4-fs (loop8): Total free blocks count 0
[  176.315775][ T8050] EXT4-fs (loop8): Free/Dirty block details
[  176.321849][ T8050] EXT4-fs (loop8): free_blocks=20480
[  176.327557][ T8050] EXT4-fs (loop8): dirty_blocks=96
[  176.332780][ T8050] EXT4-fs (loop8): Block reservation details
[  176.341351][ T8050] EXT4-fs (loop8): i_reserved_data_blocks=6
[  176.375994][    T9] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  176.395514][    T9] EXT4-fs (loop8): This should not happen!! Data will be lost
[  176.395514][    T9] 
[  176.560515][ T8070] loop8: detected capacity change from 0 to 4096
[  176.624859][ T8070] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512)
[  176.676802][ T6111] usb 8-1: unable to get BOS descriptor or descriptor too short
[  176.709949][ T1108] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  176.756212][ T6111] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  176.832877][ T6487] Bluetooth: hci0: command 0x1001 tx timeout
[  176.839525][ T4193] Bluetooth: hci0: sending frame failed (-49)
[  176.930332][ T6111] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  176.940463][ T6111] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.951626][ T6111] usb 8-1: Product: syz
[  176.955968][ T6111] usb 8-1: Manufacturer: syz
[  176.960589][ T6111] usb 8-1: SerialNumber: syz
[  176.968358][ T1108] usb 4-1: Using ep0 maxpacket: 32
[  177.085552][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.096982][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.107211][ T1108] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  177.117278][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.151045][ T1108] usb 4-1: config 0 descriptor??
[  177.198136][ T1108] hub 4-1:0.0: USB hub found
[  177.215372][ T6487] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  177.237694][ T6111] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  177.415555][ T1108] hub 4-1:0.0: 1 port detected
[  177.495254][ T6487] usb 9-1: Using ep0 maxpacket: 8
[  177.625757][ T6487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.637057][ T6487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.646953][ T6487] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  177.660389][ T6487] usb 9-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  177.670445][ T6487] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.697205][ T6487] usb 9-1: config 0 descriptor??
[  177.715292][ T1108] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  177.723519][ T1108] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  177.805230][ T6107] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  177.835347][ T1108] usbhid 4-1:0.0: can't add hid device: -71
[  177.841361][ T1108] usbhid: probe of 4-1:0.0 failed with error -71
[  177.885471][ T6111] usb 8-1: invalid uac2 rates
[  177.890564][ T6111] usb 8-1: invalid uac2 rates
[  177.896550][ T1108] usb 4-1: USB disconnect, device number 17
[  178.045307][ T6107] usb 7-1: Using ep0 maxpacket: 32
[  178.125494][ T6111] usb 8-1: failed to enable PITCH for EP 0x82
[  178.146457][ T6111] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  178.159978][ T6111] usb 8-1: clock source 0 is not valid, cannot use
[  178.168806][ T6107] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  178.182494][ T6107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.200336][ T6111] usb 8-1: 2:1: cannot get freq (v2/v3): err -71
[  178.212595][ T6107] usb 7-1: config 0 descriptor??
[  178.238026][ T6111] usb 8-1: 2:1: cannot set freq 433770090 (v2/v3): err -71
[  178.321562][ T6111] usb 8-1: USB disconnect, device number 9
[  178.333255][ T8139] loop3: detected capacity change from 0 to 2048
[  178.383608][ T8139] NILFS (loop3): invalid segment: Magic number mismatch
[  178.395412][ T6487] sony 0003:054C:042F.0010: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[  178.442278][ T8139] NILFS (loop3): trying rollback from an earlier position
[  178.443350][ T6487] sony 0003:054C:042F.0010: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.8-1/input0
[  178.475862][ T6107] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  178.487969][ T6107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  178.515712][ T8139] NILFS (loop3): recovery complete
[  178.532959][ T6487] sony 0003:054C:042F.0010: failed to claim input
[  178.539748][ T8148] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.545545][ T6107] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  178.578737][ T6107] usb 7-1: media controller created
[  178.616314][ T8145] udevd[8145]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  178.649263][ T6107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  178.735326][ T6107] az6027: usb out operation failed. (-71)
[  178.775340][ T6107] az6027: usb out operation failed. (-71)
[  178.784787][ T6107] stb0899_attach: Driver disabled by Kconfig
[  178.792376][ T6107] az6027: no front-end attached
[  178.792376][ T6107] 
[  178.815288][ T6107] az6027: usb out operation failed. (-71)
[  178.821044][ T6107] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  178.867101][ T6107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26
[  178.906733][ T6107] dvb-usb: schedule remote query interval to 400 msecs.
[  178.915429][ T6908] Bluetooth: hci0: command 0x1009 tx timeout
[  178.946051][ T6107] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  178.976605][ T6107] usb 7-1: USB disconnect, device number 8
[  179.091016][ T6107] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  179.726313][ T8199] loop3: detected capacity change from 0 to 128
[  179.942030][ T8207] loop3: detected capacity change from 0 to 256
[  179.961227][ T6109] usb 9-1: USB disconnect, device number 5
[  180.003285][ T8207] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  180.152682][ T8186] loop6: detected capacity change from 0 to 40427
[  180.241248][ T8186] F2FS-fs (loop6): invalid crc value
[  180.257463][ T8219] loop7: detected capacity change from 0 to 2048
[  180.264893][ T8186] F2FS-fs (loop6): Found nat_bits in checkpoint
[  180.380292][ T8223] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.437959][ T8186] F2FS-fs (loop6): Start checkpoint disabled!
[  180.512637][ T8186] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  180.527399][ T8219] NILFS error (device loop7): nilfs_lookup: deleted inode referenced: 12
[  180.573020][ T8219] Remounting filesystem read-only
[  180.593211][ T8231] NILFS error (device loop7): nilfs_lookup: deleted inode referenced: 12
[  180.808676][ T8240] netlink: 35 bytes leftover after parsing attributes in process `syz.7.1088'.
[  180.815201][ T6107] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  180.859429][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1088'.
[  180.871307][ T4295] attempt to access beyond end of device
[  180.871307][ T4295] loop6: rw=2049, want=40976, limit=40427
[  181.006622][ T8250] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6204] was attempted by ""[8250]
[  181.127176][ T8256] loop7: detected capacity change from 0 to 256
[  181.197280][ T6107] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  181.222165][ T6107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.266117][ T6107] usb 4-1: config 0 has no interface number 0
[  181.272251][ T6107] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  181.324054][ T6107] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64
[  181.355251][ T6107] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  181.374242][ T6107] usb 4-1: config 0 interface 52 has no altsetting 0
[  181.549325][ T6107] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  181.568300][ T6107] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  181.578033][ T6107] usb 4-1: Product: syz
[  181.582211][ T6107] usb 4-1: Manufacturer: syz
[  181.600240][ T6908] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  181.606249][ T6107] usb 4-1: SerialNumber: syz
[  181.630754][ T6107] usb 4-1: config 0 descriptor??
[  181.905740][ T6107] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input27
[  181.923409][ T8301] loop8: detected capacity change from 0 to 2048
[  182.010476][ T8309] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.035456][ T6908] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.055146][ T6908] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.078047][ T8308] loop7: detected capacity change from 0 to 2048
[  182.084205][ T6908] usb 7-1: config 0 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  182.118729][ T6908] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.138703][    T7] usb 4-1: USB disconnect, device number 18
[  182.138987][ T6908] usb 7-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00
[  182.159372][ T6908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.185082][ T6908] usb 7-1: config 0 descriptor??
[  182.187824][ T8308] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.674590][ T6908] wacom 0003:056A:0022.0011: Unknown device_type for 'HID 056a:0022'. Assuming pen.
[  182.716583][ T6908] wacom 0003:056A:0022.0011: hidraw0: USB HID v0.00 Joystick [HID 056a:0022] on usb-dummy_hcd.6-1/input0
[  182.758686][ T6908] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0022.0011/input/input28
[  182.905431][ T6908] usb 7-1: USB disconnect, device number 9
[  183.030526][ T8340] fido_id[8340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  183.070479][ T8326] loop8: detected capacity change from 0 to 32768
[  183.094459][ T8326] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.1110 (8326)
[  183.143191][ T8328] loop7: detected capacity change from 0 to 32768
[  183.173124][ T8326] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  183.197613][ T8328] XFS: noikeep mount option is deprecated.
[  183.296332][ T8338] loop3: detected capacity change from 0 to 32768
[  183.303139][ T8326] BTRFS info (device loop8): using free space tree
[  183.311712][ T8326] BTRFS info (device loop8): has skinny extents
[  183.400685][ T8328] XFS (loop7): Mounting V5 Filesystem
[  183.503995][ T8338] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  183.521103][ T8328] XFS (loop7): Ending clean mount
[  183.662298][ T8326] BTRFS info (device loop8): enabling ssd optimizations
[  183.720905][ T8338] (syz.3.1112,8338,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[  183.882149][ T8393] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256
[  183.918127][ T5942] XFS (loop7): Unmounting Filesystem
[  184.093938][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1119'.
[  184.163599][ T8393] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  184.186721][ T8393] OCFS2: File system is now read-only.
[  184.215496][ T8393] (syz.3.1112,8393,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30
[  184.224842][ T8393] (syz.3.1112,8393,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -30
[  184.305192][ T8393] (syz.3.1112,8393,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30
[  184.376082][ T8393] (syz.3.1112,8393,0):ocfs2_test_inode_bit:2896 ERROR: status = -30
[  184.410766][ T8393] (syz.3.1112,8393,0):ocfs2_get_parent:166 ERROR: test inode bit failed -30
[  184.663955][ T4191] ocfs2: Unmounting device (7,3) on (node local)
[  185.625108][    C1] sched: RT throttling activated
[  185.874821][ T8446] set_capacity_and_notify: 1 callbacks suppressed
[  185.874837][ T8446] loop6: detected capacity change from 0 to 512
[  186.019925][ T8446] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1132: invalid indirect mapped block 256 (level 0)
[  186.083555][ T8446] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1132: attempt to clear invalid blocks 1024 len 1
[  186.114196][ T8446] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  186.172085][ T8446] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1132: invalid indirect mapped block 1819239214 (level 0)
[  186.228353][ T8446] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1132: invalid indirect mapped block 33554432 (level 2)
[  186.263931][ T8446] EXT4-fs (loop6): 1 truncate cleaned up
[  186.278252][ T8446] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,commit=0x0000000000000005,nodelalloc,block_validity,block_validity,nodiscard,,errors=continue. Quota mode: none.
[  186.957881][ T8477] loop7: detected capacity change from 0 to 256
[  187.279170][ T8490] loop3: detected capacity change from 0 to 4096
[  187.295331][ T8470] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  187.372693][ T8490] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  187.443800][ T8490] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  187.649349][ T8490] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22.
[  187.723539][ T8513] ntfs3: loop3: ino=5, "/" directory corrupted
[  187.735403][ T8470] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.754698][ T8516] loop6: detected capacity change from 0 to 128
[  187.769884][ T8470] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.811958][ T8470] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  187.862115][ T8470] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.878040][ T8474] loop8: detected capacity change from 0 to 40427
[  187.912692][ T8470] usb 8-1: config 0 descriptor??
[  187.960976][ T8474] F2FS-fs (loop8): Invalid SB checksum offset: 0
[  187.980786][ T8474] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  188.028684][ T8474] F2FS-fs (loop8): invalid crc value
[  188.102775][ T8474] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  188.179273][ T8527] loop6: detected capacity change from 0 to 16
[  188.241476][ T8527] erofs: (device loop6): mounted with root inode @ nid 36.
[  188.329939][ T8474] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  188.378431][ T8474] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  188.427207][ T8470] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0
[  188.434471][ T8470] cm6533_jd 0003:0D8C:0022.0012: item fetching failed at offset 1/5
[  188.469922][ T8470] cm6533_jd 0003:0D8C:0022.0012: parse failed
[  188.491254][ T8537] loop3: detected capacity change from 0 to 64
[  188.497328][ T8470] cm6533_jd: probe of 0003:0D8C:0022.0012 failed with error -22
[  188.620402][ T8537] hfs: get root inode failed
[  188.707462][ T4228] usb 8-1: USB disconnect, device number 10
[  189.468613][    T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  189.531930][ T8576] netlink: 'syz.7.1162': attribute type 49 has an invalid length.
[  189.694893][ T8576] device ip6gretap0 entered promiscuous mode
[  189.715186][    T7] usb 7-1: Using ep0 maxpacket: 16
[  189.835410][    T7] usb 7-1: config 0 has an invalid interface number: 32 but max is 0
[  189.856290][    T7] usb 7-1: config 0 has no interface number 0
[  189.904834][    T7] usb 7-1: config 0 interface 32 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.977155][    T7] usb 7-1: config 0 interface 32 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.012273][    T7] usb 7-1: config 0 interface 32 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  190.039471][ T8595] loop7: detected capacity change from 0 to 512
[  190.064944][    T7] usb 7-1: config 0 interface 32 has no altsetting 0
[  190.115291][    T7] usb 7-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  190.147908][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.243363][    T7] usb 7-1: config 0 descriptor??
[  190.493691][ T8611] loop7: detected capacity change from 0 to 1024
[  190.554919][ T8611] hfsplus: invalid btree flag
[  190.601965][ T8611] hfsplus: failed to load extents file
[  190.748279][    T7] uclogic 0003:5543:0047.0013: unknown main item tag 0x0
[  190.769273][    T7] uclogic 0003:5543:0047.0013: unknown main item tag 0x0
[  190.793732][    T7] uclogic 0003:5543:0047.0013: unknown main item tag 0x0
[  190.845252][    T7] uclogic 0003:5543:0047.0013: unknown main item tag 0x0
[  190.874904][    T7] uclogic 0003:5543:0047.0013: unknown main item tag 0x0
[  190.906448][ T8631] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  190.913208][    T7] uclogic 0003:5543:0047.0013: unknown main item tag 0x0
[  190.962806][    T7] uclogic 0003:5543:0047.0013: unknown main item tag 0x0
[  190.970683][    T7] uclogic 0003:5543:0047.0013: item fetching failed at offset 10/40
[  190.989435][    T7] uclogic 0003:5543:0047.0013: parse failed
[  191.001682][    T7] uclogic: probe of 0003:5543:0047.0013 failed with error -22
[  191.090797][    T7] usb 7-1: USB disconnect, device number 10
[  191.251225][ T8643] netlink: 'syz.7.1181': attribute type 1 has an invalid length.
[  191.318406][ T8652] loop3: detected capacity change from 0 to 256
[  191.411449][ T8652] FAT-fs (loop3): Directory bread(block 64) failed
[  191.423524][ T8652] FAT-fs (loop3): Directory bread(block 65) failed
[  191.430720][ T8652] FAT-fs (loop3): Directory bread(block 66) failed
[  191.482106][ T8652] FAT-fs (loop3): Directory bread(block 67) failed
[  191.505315][ T8652] FAT-fs (loop3): Directory bread(block 68) failed
[  191.540470][ T8652] FAT-fs (loop3): Directory bread(block 69) failed
[  191.564681][ T8652] FAT-fs (loop3): Directory bread(block 70) failed
[  191.602306][ T8652] FAT-fs (loop3): Directory bread(block 71) failed
[  191.632358][ T8652] FAT-fs (loop3): Directory bread(block 72) failed
[  191.641009][ T6487] kernel read not supported for file /dsp1 (pid: 6487 comm: kworker/1:8)
[  191.681267][ T8652] FAT-fs (loop3): Directory bread(block 73) failed
[  192.006181][ T6107] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  192.339166][ T8647] loop7: detected capacity change from 0 to 32768
[  192.349101][ T8695] team0 (unregistering): Port device team_slave_0 removed
[  192.365431][ T6107] usb 9-1: config 1 interface 0 has no altsetting 0
[  192.392637][ T8695] team0 (unregistering): Port device team_slave_1 removed
[  192.525439][ T6107] usb 9-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40
[  192.537441][ T6107] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.569445][ T6107] usb 9-1: Product: syz
[  192.585217][ T6107] usb 9-1: Manufacturer: syz
[  192.600683][ T6107] usb 9-1: SerialNumber: syz
[  192.877398][ T8725] loop6: detected capacity change from 0 to 128
[  192.999254][ T8727] loop7: detected capacity change from 0 to 2048
[  193.024514][ T8725] FAT-fs (loop6): bogus number of reserved sectors
[  193.063704][ T8725] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  193.144627][ T8725] FAT-fs (loop6): Can't find a valid FAT filesystem
[  193.221100][ T8727] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  193.327723][ T8727] UDF-fs: Scanning with blocksize 512 failed
[  193.487973][ T8727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.518827][ T8723] loop3: detected capacity change from 0 to 131072
[  193.596702][ T8733] mmap: syz.8.1204 (8733): VmData 35377152 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  193.598134][ T6107] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input31
[  193.655355][ T3542] bcm5974 9-1:1.0: could not read from device
[  193.661904][ T8723] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  193.668692][ T8723] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  193.722372][ T8723] F2FS-fs (loop3): invalid crc value
[  193.752875][ T6107] usb 9-1: USB disconnect, device number 6
[  193.770596][ T8723] F2FS-fs (loop3): Found nat_bits in checkpoint
[  193.832418][ T8723] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  193.839541][ T8723] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  194.109418][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  194.115843][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  194.553941][ T8773] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.1214'.
[  195.235057][ T8798] device syzkaller1 entered promiscuous mode
[  195.427936][ T8804] device veth0_virt_wifi entered promiscuous mode
[  195.694783][ T8791] loop8: detected capacity change from 0 to 131072
[  195.698814][ T8813] loop7: detected capacity change from 0 to 256
[  195.765891][ T8791] XFS: ikeep mount option is deprecated.
[  195.831538][ T8813] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  195.883112][ T8825] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  195.934612][ T8791] XFS (loop8): Mounting V5 Filesystem
[  196.141213][ T8791] XFS (loop8): Starting recovery (logdev: internal)
[  196.233054][ T8791] XFS (loop8): Ending recovery (logdev: internal)
[  196.283531][ T8843] loop7: detected capacity change from 0 to 512
[  196.440304][ T8843] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  196.488559][ T8848] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  196.553290][ T6204] XFS (loop8): Unmounting Filesystem
[  196.666632][ T8843] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  196.785898][ T8843] Quota error (device loop7): write_blk: dquota write failed
[  196.833892][ T8843] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  196.835190][ T6111] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  196.880416][ T8843] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.1234: Failed to acquire dquot type 0
[  196.913821][ T8843] EXT4-fs (loop7): 1 truncate cleaned up
[  196.926227][ T8843] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,grpquota,data_err=ignore,noblock_validity,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback.
[  196.968860][ T8867] device syzkaller1 entered promiscuous mode
[  197.146054][ T8871] Quota error (device loop7): write_blk: dquota write failed
[  197.154482][ T8871] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  197.164386][ T6111] usb 4-1: Using ep0 maxpacket: 32
[  197.280256][ T6111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.292388][ T8871] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.1234: Failed to acquire dquot type 0
[  197.306810][ T6111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.324970][ T6111] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  197.334656][ T6111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.364173][ T6111] usb 4-1: config 0 descriptor??
[  197.480378][ T8883] FAULT_INJECTION: forcing a failure.
[  197.480378][ T8883] name failslab, interval 1, probability 1, space 0, times 0
[  197.493330][ T8883] CPU: 0 PID: 8883 Comm: syz.9.1249 Not tainted syzkaller #0
[  197.500714][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  197.510792][ T8883] Call Trace:
[  197.514075][ T8883]  <TASK>
[  197.517003][ T8883]  dump_stack_lvl+0x188/0x250
[  197.521693][ T8883]  ? show_regs_print_info+0x20/0x20
[  197.526893][ T8883]  ? load_image+0x410/0x410
[  197.531396][ T8883]  ? __lock_acquire+0x7b50/0x7b50
[  197.536423][ T8883]  ? aa_get_newest_label+0xf5/0x5a0
[  197.541629][ T8883]  should_fail+0x383/0x4b0
[  197.546055][ T8883]  should_failslab+0x5/0x20
[  197.550557][ T8883]  slab_pre_alloc_hook+0x51/0xc0
[  197.555498][ T8883]  ? prepare_creds+0x3c/0x610
[  197.560184][ T8883]  kmem_cache_alloc+0x3d/0x280
[  197.564954][ T8883]  prepare_creds+0x3c/0x610
[  197.569465][ T8883]  cap_task_prctl+0x26d/0xc00
[  197.574156][ T8883]  security_task_prctl+0x75/0x100
[  197.579200][ T8883]  __se_sys_prctl+0xba/0x1050
[  197.583892][ T8883]  ? __x64_sys_prctl+0xc0/0xc0
[  197.588666][ T8883]  ? lockdep_hardirqs_on+0x94/0x140
[  197.593874][ T8883]  ? __x64_sys_prctl+0x1c/0xc0
[  197.598652][ T8883]  do_syscall_64+0x4c/0xa0
[  197.603079][ T8883]  ? clear_bhb_loop+0x30/0x80
[  197.607766][ T8883]  ? clear_bhb_loop+0x30/0x80
[  197.612453][ T8883]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  197.618353][ T8883] RIP: 0033:0x7f15e80a5159
[  197.622768][ T8883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.642395][ T8883] RSP: 002b:00007f15e62fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  197.650820][ T8883] RAX: ffffffffffffffda RBX: 00007f15e832cfa0 RCX: 00007f15e80a5159
[  197.658841][ T8883] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000018
[  197.666825][ T8883] RBP: 00007f15e813c03b R08: 0000000000000000 R09: 0000000000000000
[  197.674799][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.682774][ T8883] R13: 00007f15e832d038 R14: 00007f15e832cfa0 R15: 00007fffb8558068
[  197.690767][ T8883]  </TASK>
[  197.930603][ T8889] loop8: detected capacity change from 0 to 1024
[  197.970659][ T6111] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  197.977048][ T8902] input: syz1 as /devices/virtual/input/input32
[  198.051484][ T8889] hfsplus: wrong filesystem version
[  198.314605][ T8915] loop7: detected capacity change from 0 to 64
[  198.381901][ T6111] usb 4-1: USB disconnect, device number 19
[  199.234433][ T8962] netlink: 'syz.9.1278': attribute type 39 has an invalid length.
[  200.504038][ T8977] loop7: detected capacity change from 0 to 32768
[  200.607846][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'.
[  200.608792][ T9013] input: syz1 as /devices/virtual/input/input33
[  200.711825][ T8977] XFS (loop7): Mounting V5 Filesystem
[  200.829050][ T8977] XFS (loop7): Ending clean mount
[  201.029437][ T5942] XFS (loop7): Unmounting Filesystem
[  201.434197][ T9043] loop8: detected capacity change from 0 to 512
[  201.724524][ T9056] FAULT_INJECTION: forcing a failure.
[  201.724524][ T9056] name failslab, interval 1, probability 1, space 0, times 0
[  201.807850][ T9056] CPU: 1 PID: 9056 Comm: syz.9.1303 Not tainted syzkaller #0
[  201.815367][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  201.825431][ T9056] Call Trace:
[  201.828713][ T9056]  <TASK>
[  201.831652][ T9056]  dump_stack_lvl+0x188/0x250
[  201.836341][ T9056]  ? show_regs_print_info+0x20/0x20
[  201.841547][ T9056]  ? load_image+0x410/0x410
[  201.846062][ T9056]  ? __might_sleep+0xf0/0xf0
[  201.850660][ T9056]  ? __lock_acquire+0x7b50/0x7b50
[  201.855701][ T9056]  should_fail+0x383/0x4b0
[  201.860133][ T9056]  should_failslab+0x5/0x20
[  201.864642][ T9056]  slab_pre_alloc_hook+0x51/0xc0
[  201.869589][ T9056]  kmem_cache_alloc_trace+0x47/0x290
[  201.874883][ T9056]  ? sctp_endpoint_new+0x11a/0xa00
[  201.880016][ T9056]  sctp_endpoint_new+0x11a/0xa00
[  201.884971][ T9056]  sctp_init_sock+0x95b/0x11c0
[  201.889747][ T9056]  inet_create+0xbde/0xee0
[  201.894176][ T9056]  __sock_create+0x473/0x910
[  201.898785][ T9056]  __sys_socket+0xe2/0x170
[  201.903212][ T9056]  __x64_sys_socket+0x76/0x80
[  201.904644][ T9064] loop6: detected capacity change from 0 to 1
[  201.907895][ T9056]  do_syscall_64+0x4c/0xa0
[  201.907919][ T9056]  ? clear_bhb_loop+0x30/0x80
[  201.907937][ T9056]  ? clear_bhb_loop+0x30/0x80
[  201.907956][ T9056]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  201.907973][ T9056] RIP: 0033:0x7f15e80a5159
[  201.929396][ T9064] Dev loop6: unable to read RDB block 1
[  201.933615][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.933636][ T9056] RSP: 002b:00007f15e62fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  201.960963][ T9064]  loop6: unable to read partition table
[  201.963161][ T9056] RAX: ffffffffffffffda RBX: 00007f15e832cfa0 RCX: 00007f15e80a5159
[  201.985141][ T9056] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002
[  201.992533][ T9064] loop6: partition table beyond EOD, truncated
[  201.993139][ T9056] RBP: 00007f15e813c03b R08: 0000000000000000 R09: 0000000000000000
[  201.993155][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.012760][ T9064] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  202.015199][ T9056] R13: 00007f15e832d038 R14: 00007f15e832cfa0 R15: 00007fffb8558068
[  202.015230][ T9056]  </TASK>
[  202.360667][ T9078] loop3: detected capacity change from 0 to 256
[  202.425667][ T9078] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.442042][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  202.452243][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:5 Not tainted syzkaller #0
[  202.459799][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  202.469861][ T4198] Workqueue: hci5 hci_rx_work
[  202.474559][ T4198] Call Trace:
[  202.477849][ T4198]  <TASK>
[  202.480783][ T4198]  dump_stack_lvl+0x188/0x250
[  202.485475][ T4198]  ? show_regs_print_info+0x20/0x20
[  202.490681][ T4198]  ? load_image+0x410/0x410
[  202.495209][ T4198]  sysfs_create_dir_ns+0x26a/0x290
[  202.500332][ T4198]  ? sysfs_warn_dup+0xa0/0xa0
[  202.505024][ T4198]  ? kthread+0x42e/0x520
[  202.509275][ T4198]  ? do_raw_spin_unlock+0x11d/0x230
[  202.514492][ T4198]  kobject_add_internal+0x5ba/0xcd0
[  202.519700][ T4198]  kobject_add+0x160/0x230
[  202.524135][ T4198]  ? kobject_init+0x1c0/0x1c0
[  202.528812][ T4198]  ? __raw_spin_lock_init+0x41/0x100
[  202.534089][ T4198]  ? klist_children_get+0x50/0x50
[  202.539099][ T4198]  ? get_device_parent+0x121/0x3e0
[  202.544195][ T4198]  device_add+0x470/0x1050
[  202.548595][ T4198]  ? device_initialize+0x2a5/0x4d0
[  202.553691][ T4198]  hci_conn_add_sysfs+0xd1/0x1e0
[  202.558616][ T4198]  le_conn_complete_evt+0xc55/0x14d0
[  202.563893][ T4198]  ? cs_le_create_conn+0x5e0/0x5e0
[  202.568994][ T4198]  ? __mutex_trylock_common+0x15c/0x260
[  202.574529][ T4198]  hci_le_meta_evt+0x285/0x3ca0
[  202.579366][ T4198]  ? hci_event_packet+0x363/0x1310
[  202.584464][ T4198]  ? __lock_acquire+0x7b50/0x7b50
[  202.589483][ T4198]  ? hci_remote_host_features_evt+0x240/0x240
[  202.595534][ T4198]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  202.601149][ T4198]  ? mark_lock+0x94/0x320
[  202.605460][ T4198]  ? mutex_unlock+0x10/0x10
[  202.609945][ T4198]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  202.615911][ T4198]  ? lock_chain_count+0x20/0x20
[  202.620745][ T4198]  ? __rwlock_init+0x140/0x140
[  202.625492][ T4198]  hci_event_packet+0xe0b/0x1310
[  202.630417][ T4198]  ? _raw_spin_unlock+0x40/0x40
[  202.635251][ T4198]  ? rcu_lock_release+0x20/0x20
[  202.640090][ T4198]  ? hci_send_to_monitor+0x9c/0x4a0
[  202.645275][ T4198]  hci_rx_work+0x255/0xa10
[  202.649686][ T4198]  process_one_work+0x867/0xff0
[  202.654531][ T4198]  ? worker_detach_from_pool+0x240/0x240
[  202.660145][ T4198]  ? lockdep_hardirqs_off+0x70/0x100
[  202.665420][ T4198]  ? _raw_spin_lock_irq+0xb7/0xf0
[  202.670427][ T4198]  ? _raw_spin_lock_irqsave+0x100/0x100
[  202.675958][ T4198]  ? wq_worker_running+0x97/0x170
[  202.680967][ T4198]  worker_thread+0xad7/0x12a0
[  202.685725][ T4198]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  202.691606][ T4198]  kthread+0x42e/0x520
[  202.695656][ T4198]  ? rcu_lock_release+0x20/0x20
[  202.700489][ T4198]  ? kthread_blkcg+0xd0/0xd0
[  202.705064][ T4198]  ret_from_fork+0x1f/0x30
[  202.709476][ T4198]  </TASK>
[  202.716913][ T4198] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  202.730199][ T4198] Bluetooth: hci5: failed to register connection device
[  202.744888][ T9078] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  202.758735][ T9078] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  202.760291][ T9083] loop8: detected capacity change from 0 to 2048
[  202.915835][ T9083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.285029][    T9] blk_update_request: I/O error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  203.297820][    T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 94247)
[  203.309853][    T9] Buffer I/O error on device sda1, logical block 94208
[  203.317482][    T9] blk_update_request: I/O error, dev sda, sector 765902 op 0x1:(WRITE) flags 0x0 phys_seg 19 prio class 0
[  203.328836][    T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 95739)
[  203.342085][    T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 95782)
[  203.353649][    T9] Buffer I/O error on device sda1, logical block 95701
[  203.360570][    T9] Buffer I/O error on device sda1, logical block 95702
[  203.365881][ T1481] Buffer I/O error on device sda1, logical block 95699
[  203.367485][    T9] Buffer I/O error on device sda1, logical block 95703
[  203.381564][    T9] Buffer I/O error on device sda1, logical block 95704
[  203.388467][    T9] Buffer I/O error on device sda1, logical block 95705
[  203.395371][    T9] Buffer I/O error on device sda1, logical block 95706
[  203.401425][ T1481] Buffer I/O error on device sda1, logical block 95700
[  203.402223][    T9] Buffer I/O error on device sda1, logical block 95707
[  203.442240][  T150] blk_update_request: I/O error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  203.454491][  T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2038 starting block 102439)
[  203.466884][  T150] blk_update_request: I/O error, dev sda, sector 831710 op 0x1:(WRITE) flags 0x0 phys_seg 5 prio class 0
[  203.478177][  T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2038 starting block 103974)
[  203.491465][  T150] blk_update_request: I/O error, dev sda, sector 790838 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  203.502952][  T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2037 starting block 98855)
[  203.515618][  T150] blk_update_request: I/O error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  203.527017][  T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 90151)
[  203.540911][  T150] blk_update_request: I/O error, dev sda, sector 729390 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  203.552329][  T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 91174)
[  203.565579][  T150] blk_update_request: I/O error, dev sda, sector 733382 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 0
[  203.576866][  T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 91686)
[  203.590448][  T150] blk_update_request: I/O error, dev sda, sector 704854 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  203.601747][  T150] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88109)
[  203.614176][  T150] blk_update_request: I/O error, dev sda, sector 704886 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[  203.770096][ T3519] Buffer I/O error on dev sda1, logical block 131420, lost sync page write
[  203.785933][ T3519] Aborting journal on device sda1-8.
[  203.802176][ T9092] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.1314: Detected aborted journal
[  203.807292][  T150] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  203.817000][ T9114] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.1318: Detected aborted journal
[  203.824154][ T3519] JBD2: Error -5 detected when updating journal superblock for sda1-8.
[  203.848112][ T9111] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1317: Detected aborted journal
[  203.862813][ T9113] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1317'.
[  203.880128][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  203.900371][ T9111] EXT4-fs (sda1): I/O error while writing superblock
[  203.907170][ T9111] EXT4-fs (sda1): Remounting filesystem read-only
[  203.913782][ T9111] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1317: Detected aborted journal
[  203.922201][ T9085] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1312: Detected aborted journal
[  203.925044][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  203.944019][ T9111] EXT4-fs (sda1): I/O error while writing superblock
[  203.950804][ T9111] EXT4-fs (sda1): Remounting filesystem read-only
[  203.957556][ T9111] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1317: Detected aborted journal
[  203.969167][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  203.979519][ T9114] EXT4-fs (sda1): previous I/O error to superblock detected
[  203.981646][ T9111] EXT4-fs (sda1): I/O error while writing superblock
[  203.993628][ T9111] EXT4-fs (sda1): Remounting filesystem read-only
[  204.000531][ T9111] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1317: Detected aborted journal
[  204.011764][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  204.021996][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  204.030956][ T9111] EXT4-fs (sda1): I/O error while writing superblock
[  204.033635][ T9114] EXT4-fs (sda1): I/O error while writing superblock
[  204.037728][ T9111] EXT4-fs (sda1): Remounting filesystem read-only
[  204.037824][ T9111] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1317: Detected aborted journal
[  204.037967][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  204.070862][ T9111] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1317: Detected aborted journal
[  204.073450][  T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  204.092389][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  204.093573][ T4170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  204.515569][ T1108] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  204.770310][ T1108] usb 4-1: Using ep0 maxpacket: 8
[  204.890236][ T9086] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  204.985201][ T9154] mmap: syz.9.1324 (9154) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  205.059635][ T1108] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  205.080742][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.109284][ T1108] usb 4-1: Product: syz
[  205.126155][ T1108] usb 4-1: Manufacturer: syz
[  205.141003][ T1108] usb 4-1: SerialNumber: syz
[  205.186386][ T1108] usb 4-1: config 0 descriptor??
[  205.237032][ T1108] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  205.257609][ T1108] pctv452e: pctv452e_power_ctrl: 1
[  205.257609][ T1108] 
[  205.272975][ T1108] usb 4-1: selecting invalid altsetting 3
[  205.279098][ T1108] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  205.279098][ T1108] 
[  205.295482][ T1108] dvb-usb: bulk message failed: -22 (5/0)
[  205.330836][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  205.381325][ T1108] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  205.401397][ T1108] usb 4-1: media controller created
[  205.418772][ T1108] dvb-usb: bulk message failed: -22 (8/0)
[  205.442990][ T1108] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  205.465000][ T1108] dvb-usb: MAC address reading failed.
[  205.493122][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  205.595902][ T1108] DVB: Unable to find symbol stb0899_attach()
[  205.602017][ T1108] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  205.695417][ T9163] loop8: detected capacity change from 0 to 1024
[  205.715734][ T1108] rc_core: Couldn't load IR keymap rc-tt-1500
[  205.721860][ T1108] Registered IR keymap rc-empty
[  205.816574][ T1108] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  205.870706][ T1108] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input34
[  205.915715][ T1108] dvb-usb: schedule remote query interval to 100 msecs.
[  205.964580][ T1108] pctv452e: pctv452e_power_ctrl: 0
[  205.964580][ T1108] 
[  206.016603][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  206.047840][ T1108] usb 4-1: USB disconnect, device number 20
[  206.080112][ T6109] dvb-usb: bulk message failed: -22 (4/0)
[  206.096742][ T6109] dvb-usb: error -22 while querying for an remote control event.
[  206.179939][ T9171] loop7: detected capacity change from 0 to 512
[  206.263403][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  206.324154][ T9171] EXT4-fs (loop7): Test dummy encryption mode enabled
[  206.338872][ T9171] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  206.465498][ T9171] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.1332: bad orphan inode 131083
[  206.505421][ T9171] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,init_itable,dioread_lock,,errors=continue. Quota mode: none.
[  206.851939][ T9195] loop3: detected capacity change from 0 to 8192
[  207.087361][ T9205] loop7: detected capacity change from 0 to 256
[  208.209707][ T9252] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[  208.825962][ T4170] EXT4-fs error: 287 callbacks suppressed
[  208.825978][ T4170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  208.831396][ T9282] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1372: Detected aborted journal
[  208.867546][ T6109] Bluetooth: hci5: command 0x0406 tx timeout
[  208.870576][ T9285] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1374: Detected aborted journal
[  208.912138][ T9282] EXT4-fs: 270 callbacks suppressed
[  208.912153][ T9282] EXT4-fs (sda1): Remounting filesystem read-only
[  208.956076][ T4170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  208.964397][ T9285] EXT4-fs (sda1): Remounting filesystem read-only
[  209.005151][ T4170] EXT4-fs (sda1): Remounting filesystem read-only
[  209.031032][ T9287] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.1375: Detected aborted journal
[  209.042203][ T4170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  209.071640][ T9288] loop7: detected capacity change from 0 to 512
[  209.075366][ T9287] EXT4-fs (sda1): Remounting filesystem read-only
[  209.085017][ T4170] EXT4-fs (sda1): Remounting filesystem read-only
[  209.105514][ T4170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  209.127238][ T9287] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.1375: Detected aborted journal
[  209.145150][ T4170] EXT4-fs (sda1): Remounting filesystem read-only
[  209.151675][ T4170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  209.185351][ T4170] EXT4-fs (sda1): Remounting filesystem read-only
[  209.192847][ T9287] EXT4-fs (sda1): Remounting filesystem read-only
[  209.202885][ T4170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  209.225416][ T4170] EXT4-fs (sda1): Remounting filesystem read-only
[  209.245438][ T4170] EXT4-fs (sda1): Remounting filesystem read-only
[  209.276714][ T9288] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  209.287995][ T9288] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  209.319529][    C1] vkms_vblank_simulate: vblank timer overrun
[  209.335843][ T9288] EXT4-fs (loop7): shut down requested (2)
Sep 14 15:58:13 syzkaller kern.alert kernel: [  209.335843][ T9288] EXT4-fs (loop7): shut down requested (2)
[  209.434574][ T9294] loop8: detected capacity change from 0 to 4096
[  209.502237][ T9294] ntfs3: loop8: ino=3, Correct links count -> 2.
[  210.089511][ T9311] tipc: Started in network mode
[  210.104756][ T9311] tipc: Node identity 1000001, cluster identity 4711
[  210.139560][ T9311] tipc: Node number set to 16777217
[  210.185381][ T9316] tipc: New replicast peer: 127.0.0.1
[  210.213154][ T9316] tipc: Enabled bearer <udp:syz0>, priority 10
[  210.289118][ T9318] loop3: detected capacity change from 0 to 1024
[  210.325344][ T6487] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  210.585383][ T6487] usb 10-1: Using ep0 maxpacket: 16
[  210.725398][ T6487] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.745500][ T6487] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  210.768857][ T6487] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  210.789102][ T6487] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.821672][ T6487] usb 10-1: config 0 descriptor??
[  211.160663][ T9329] loop7: detected capacity change from 0 to 32768
[  211.332922][ T6487] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0015/input/input36
[  211.461139][ T6487] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[  211.478046][ T9347] loop8: detected capacity change from 0 to 16
[  211.521067][ T9347] erofs: (device loop8): mounted with root inode @ nid 36.
[  211.560347][ T9348] udevd[9348]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  211.802205][ T6107] usb 10-1: USB disconnect, device number 4
[  212.617679][ T9367] loop7: detected capacity change from 0 to 4096
[  212.681680][ T9367] EXT4-fs (loop7): Test dummy encryption mode enabled
[  212.752315][ T9381] loop8: detected capacity change from 0 to 1024
[  212.770622][ T9367] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback.
[  212.853778][ T9381] EXT4-fs (loop8): Ignoring removed bh option
[  212.976063][ T6107] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  212.999345][ T9381] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,mb_optimize_scan=0x0000000000000000,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  213.158915][ T9388] FAULT_INJECTION: forcing a failure.
[  213.158915][ T9388] name failslab, interval 1, probability 1, space 0, times 0
[  213.192358][ T8471] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  213.194630][ T9388] CPU: 0 PID: 9388 Comm: syz.7.1412 Not tainted syzkaller #0
[  213.207319][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  213.217385][ T9388] Call Trace:
[  213.220672][ T9388]  <TASK>
[  213.223610][ T9388]  dump_stack_lvl+0x188/0x250
[  213.228298][ T9388]  ? show_regs_print_info+0x20/0x20
[  213.233509][ T9388]  ? load_image+0x410/0x410
[  213.238025][ T9388]  ? __might_sleep+0xf0/0xf0
[  213.242625][ T9388]  ? __lock_acquire+0x7b50/0x7b50
[  213.247672][ T9388]  should_fail+0x383/0x4b0
[  213.252119][ T9388]  should_failslab+0x5/0x20
[  213.256633][ T9388]  slab_pre_alloc_hook+0x51/0xc0
[  213.261583][ T9388]  ? create_new_namespaces+0x34/0x700
[  213.266964][ T9388]  kmem_cache_alloc+0x3d/0x280
[  213.271779][ T9388]  ? vfs_write+0xaa6/0xd70
[  213.276207][ T9388]  create_new_namespaces+0x34/0x700
[  213.281423][ T9388]  ? apparmor_capable+0x12c/0x190
[  213.286463][ T9388]  ? bpf_lsm_capable+0x5/0x10
[  213.291150][ T9388]  ? security_capable+0x85/0xb0
[  213.296020][ T9388]  unshare_nsproxy_namespaces+0x116/0x160
[  213.301753][ T9388]  ksys_unshare+0x4f6/0x8e0
[  213.306266][ T9388]  ? __lock_acquire+0x7b50/0x7b50
[  213.311315][ T9388]  ? sighand_ctor+0x40/0x40
[  213.315835][ T9388]  ? lock_chain_count+0x20/0x20
[  213.320702][ T9388]  ? syscall_enter_from_user_mode+0x21/0x70
[  213.326610][ T9388]  __x64_sys_unshare+0x34/0x40
[  213.331387][ T9388]  do_syscall_64+0x4c/0xa0
[  213.335814][ T9388]  ? clear_bhb_loop+0x30/0x80
[  213.340502][ T9388]  ? clear_bhb_loop+0x30/0x80
[  213.345186][ T9388]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  213.351080][ T9388] RIP: 0033:0x7f4fbd3a2159
[  213.355502][ T9388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.375114][ T9388] RSP: 002b:00007f4fbb5fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  213.383538][ T9388] RAX: ffffffffffffffda RBX: 00007f4fbd629fa0 RCX: 00007f4fbd3a2159
[  213.391520][ T9388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000
[  213.399504][ T9388] RBP: 00007f4fbd43903b R08: 0000000000000000 R09: 0000000000000000
[  213.407481][ T9388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.415461][ T9388] R13: 00007f4fbd62a038 R14: 00007f4fbd629fa0 R15: 00007ffe886b5558
[  213.423455][ T9388]  </TASK>
[  213.475202][ T6107] usb 4-1: Using ep0 maxpacket: 8
[  213.523439][ T8471] usb 10-1: Using ep0 maxpacket: 16
[  213.595490][ T6107] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  213.613935][ T6107] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  213.651285][ T6107] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  213.661915][ T6107] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  213.672249][ T6107] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.680097][ T8471] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 165, changing to 11
[  213.685692][ T6107] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  213.701316][ T8471] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.716352][ T6107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.721524][ T8471] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.775230][ T8471] usb 10-1: config 0 interface 0 has no altsetting 0
[  213.781985][ T8471] usb 10-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  213.815166][ T8471] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.854725][ T9397] EXT4-fs error: 158 callbacks suppressed
[  213.854740][ T9397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1415: Detected aborted journal
[  213.865206][ T8471] usb 10-1: config 0 descriptor??
[  213.915212][ T9397] EXT4-fs: 133 callbacks suppressed
[  213.915227][ T9397] EXT4-fs (sda1): Remounting filesystem read-only
[  213.950124][ T9397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1415: Detected aborted journal
[  213.963221][ T9397] EXT4-fs (sda1): Remounting filesystem read-only
[  213.977477][ T9375] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1409: Detected aborted journal
[  213.991509][ T9397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1415: Detected aborted journal
[  214.002660][ T9375] EXT4-fs (sda1): Remounting filesystem read-only
[  214.010430][ T9397] EXT4-fs (sda1): Remounting filesystem read-only
[  214.017712][ T9375] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1409: Detected aborted journal
[  214.036854][ T9397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1415: Detected aborted journal
[  214.048359][ T9375] EXT4-fs (sda1): Remounting filesystem read-only
[  214.054975][ T9375] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1409: Detected aborted journal
[  214.064429][ T9397] EXT4-fs (sda1): Remounting filesystem read-only
[  214.069619][ T9375] EXT4-fs (sda1): Remounting filesystem read-only
[  214.087445][ T6107] usb 4-1: GET_CAPABILITIES returned 0
[  214.092920][ T6107] usbtmc 4-1:16.0: can't read capabilities
[  214.099053][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0
[  214.111756][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0
[  214.124343][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0
[  214.141792][ T9383] EXT4-fs (sda1): Remounting filesystem read-only
[  214.148365][ T9383] EXT4-fs (sda1): Remounting filesystem read-only
[  214.196193][ T9400] EXT4-fs (sda1): Remounting filesystem read-only
[  214.330363][  T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.332632][ T6107] usb 4-1: USB disconnect, device number 21
[  214.376967][ T8471] elecom 0003:056E:00FC.0016: unknown main item tag 0x0
[  214.383986][ T8471] elecom 0003:056E:00FC.0016: unknown main item tag 0x0
[  214.391448][ T8471] elecom 0003:056E:00FC.0016: unknown main item tag 0x7
[  214.401210][ T8471] elecom 0003:056E:00FC.0016: bogus close delimiter
[  214.407893][ T8471] elecom 0003:056E:00FC.0016: item 0 1 2 10 parsing failed
[  214.415711][ T8471] elecom: probe of 0003:056E:00FC.0016 failed with error -22
[  214.434032][  T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.490443][  T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.554471][  T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.623037][ T6111] usb 10-1: USB disconnect, device number 5
[  215.235457][  T154] IPVS: stopping backup sync thread 7105 ...
[  215.386228][  T154] device hsr_slave_0 left promiscuous mode
[  215.392481][  T154] device hsr_slave_1 left promiscuous mode
[  215.398916][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.406852][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.414625][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.452194][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.481732][  T154] device bridge_slave_1 left promiscuous mode
[  215.524086][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.533370][  T154] device bridge_slave_0 left promiscuous mode
[  215.541089][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.562570][  T154] device veth1_macvtap left promiscuous mode
[  215.579710][  T154] device veth0_macvtap left promiscuous mode
[  215.586965][  T154] device veth1_vlan left promiscuous mode
[  215.592979][  T154] device veth0_vlan left promiscuous mode
[  215.759085][  T154] team0 (unregistering): Port device team_slave_1 removed
[  215.773661][  T154] team0 (unregistering): Port device team_slave_0 removed
[  215.786144][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.803427][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.873053][  T154] bond0 (unregistering): Released all slaves
[  216.465275][ T4506] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  216.715269][ T4506] usb 10-1: Using ep0 maxpacket: 16
[  216.838620][ T4506] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.850281][ T4506] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  216.864903][ T4506] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.880936][ T4506] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.891231][ T4506] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  216.910951][ T4506] usb 10-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  216.920463][ T4506] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.942398][ T4506] usb 10-1: config 0 descriptor??
[  217.426468][ T4506] logitech 0003:046D:C24F.0017: unknown main item tag 0x1
[  217.433666][ T4506] logitech 0003:046D:C24F.0017: unexpected long global item
[  217.441386][ T4506] logitech 0003:046D:C24F.0017: parse failed
[  217.447499][ T4506] logitech: probe of 0003:046D:C24F.0017 failed with error -22
[  217.630106][   T26] usb 10-1: USB disconnect, device number 6
[  218.028766][ T9484] loop8: detected capacity change from 0 to 1024
[  218.128463][ T9484] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  218.175902][ T9484] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.204645][   T25] audit: type=1804 audit(1789401502.608:19): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1434" name="/newroot/186/file1/file1" dev="loop8" ino=15 res=1 errno=0
[  218.226878][ T9484] EXT4-fs (loop8): shut down requested (0)
Sep 14 15:58:22 syzkaller kern.alert kernel: [  218.226878][ T9484] EXT4-fs (loop8): shut down requested (0)
[  219.052823][ T9497] EXT4-fs error: 134 callbacks suppressed
[  219.052837][ T9497] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.1438: Detected aborted journal
[  219.054466][ T4170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  219.064016][ T9500] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1440: Detected aborted journal
[  219.073975][ T9499] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.1437: Detected aborted journal
[  219.091570][ T9496] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0
[  219.099592][ T9498] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1439: Detected aborted journal
[  219.103164][ T9497] EXT4-fs: 49 callbacks suppressed
[  219.103174][ T9497] EXT4-fs (sda1): Remounting filesystem read-only
[  219.115587][ T4170] EXT4-fs (sda1): Remounting filesystem read-only
[  219.131036][ T9500] EXT4-fs (sda1): Remounting filesystem read-only
[  219.131527][ T9498] EXT4-fs (sda1): Remounting filesystem read-only
[  219.144008][ T9500] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1440: Detected aborted journal
[  219.144532][ T9499] EXT4-fs (sda1): Remounting filesystem read-only
[  219.160465][ T9497] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.1438: Detected aborted journal
[  219.168480][ T4170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  219.175512][ T9500] EXT4-fs (sda1): Remounting filesystem read-only
[  219.186978][ T4170] EXT4-fs (sda1): Remounting filesystem read-only
[  219.200695][ T9497] EXT4-fs (sda1): Remounting filesystem read-only
[  219.204902][ T9498] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.1439: Detected aborted journal
[  219.213219][ T9502] Trying to write to read-only block-device nullb0
[  219.224385][ T9499] EXT4-fs (sda1): Remounting filesystem read-only
[  219.233427][ T9501] FAULT_INJECTION: forcing a failure.
[  219.233427][ T9501] name failslab, interval 1, probability 1, space 0, times 0
[  219.240125][ T4170] EXT4-fs (sda1): Remounting filesystem read-only
[  219.240473][ T9501] CPU: 0 PID: 9501 Comm: syz.3.1440 Not tainted syzkaller #0
[  219.266661][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.276730][ T9501] Call Trace:
[  219.280009][ T9501]  <TASK>
[  219.282935][ T9501]  dump_stack_lvl+0x188/0x250
[  219.287627][ T9501]  ? show_regs_print_info+0x20/0x20
[  219.292816][ T9501]  ? load_image+0x410/0x410
[  219.297308][ T9501]  ? __might_sleep+0xf0/0xf0
[  219.301893][ T9501]  ? __lock_acquire+0x7b50/0x7b50
[  219.306912][ T9501]  should_fail+0x383/0x4b0
[  219.311325][ T9501]  should_failslab+0x5/0x20
[  219.315822][ T9501]  slab_pre_alloc_hook+0x51/0xc0
[  219.320791][ T9501]  ? __ksm_enter+0x30/0x340
[  219.325287][ T9501]  kmem_cache_alloc+0x3d/0x280
[  219.330044][ T9501]  __ksm_enter+0x30/0x340
[  219.334363][ T9501]  ksm_madvise+0x3fb/0x500
[  219.338768][ T9501]  do_madvise+0x1a2f/0x2aa0
[  219.343282][ T9501]  ? get_nr_vmemmap_pages_cb+0x40/0x40
[  219.348759][ T9501]  ? verify_lock_unused+0x140/0x140
[  219.353995][ T9501]  ? verify_lock_unused+0x140/0x140
[  219.359193][ T9501]  ? do_futex+0xdc2/0x12b0
[  219.363602][ T9501]  ? vfs_write+0xaa6/0xd70
[  219.368022][ T9501]  ? __context_tracking_exit+0x4c/0x80
[  219.373477][ T9501]  ? __lock_acquire+0x7b50/0x7b50
[  219.378499][ T9501]  ? lock_chain_count+0x20/0x20
[  219.383440][ T9501]  __x64_sys_madvise+0xa2/0xb0
[  219.388196][ T9501]  do_syscall_64+0x4c/0xa0
[  219.392599][ T9501]  ? clear_bhb_loop+0x30/0x80
[  219.397262][ T9501]  ? clear_bhb_loop+0x30/0x80
[  219.401966][ T9501]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  219.407855][ T9501] RIP: 0033:0x7f1d1448d159
[  219.412277][ T9501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.431885][ T9501] RSP: 002b:00007f1d126e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  219.440302][ T9501] RAX: ffffffffffffffda RBX: 00007f1d14714fa0 RCX: 00007f1d1448d159
[  219.448270][ T9501] RDX: 000000000000000c RSI: 0000000000003000 RDI: 0000200000000000
[  219.456231][ T9501] RBP: 00007f1d1452403b R08: 0000000000000000 R09: 0000000000000000
[  219.464187][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.472146][ T9501] R13: 00007f1d14715038 R14: 00007f1d14714fa0 R15: 00007ffeaba42238
[  219.480117][ T9501]  </TASK>
[  220.355481][    C1] tipc: RX(1000001): key[1] is activated
[  220.389401][ T9520] loop7: detected capacity change from 0 to 512
[  220.499578][ T9520] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  220.572640][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.588612][ T5942] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /158/file0/lost+found: directory fails checksum at offset 8192
[  220.604454][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.621361][ T5942] EXT4-fs error (device loop7): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum
[  220.641988][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.657980][ T5942] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /158/file0/lost+found: directory fails checksum at offset 8192
[  220.678863][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.699199][ T5942] EXT4-fs error (device loop7): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum
[  220.712930][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.728888][ T5942] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /158/file0/lost+found: directory fails checksum at offset 8192
[  220.744569][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.760593][ T5942] EXT4-fs error (device loop7): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum
[  220.780878][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.796746][ T5942] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /158/file0/lost+found: directory fails checksum at offset 8192
[  220.812631][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.832360][ T5942] EXT4-fs error (device loop7): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum
[  220.846631][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.862737][ T5942] EXT4-fs error (device loop7): ext4_readdir:223: inode #11: comm syz-executor: path /158/file0/lost+found: directory fails checksum at offset 8192
[  220.884870][ T5942] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  220.905035][ T5942] EXT4-fs error (device loop7): ext4_empty_dir:3168: inode #11: block 2: comm syz-executor: Directory block failed checksum
[  221.319867][  T144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.369555][  T144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.440135][  T144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.479495][   T25] audit: type=1800 audit(1789401505.888:20): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1445" name="local" dev="configfs" ino=50985 res=0 errno=0
[  221.566828][  T144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.802597][  T144] tipc: Disabling bearer <udp:syz0>
[  221.811513][  T144] tipc: Left network mode
[  221.955944][ T9547] loop8: detected capacity change from 0 to 32768
[  222.007926][ T9547] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  222.090613][ T6204] ocfs2: Unmounting device (7,8) on (node local)
[  223.227486][ T9615] loop3: detected capacity change from 0 to 128
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: repeatedly failed to execute the program
proc=4 req=1414 state=1 status=67 (errno 9: Bad file descriptor)
[  223.386605][ T6107] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  223.829240][ T6107] usb 10-1: device not accepting address 7, error -71
[  224.070812][ T8615] EXT4-fs error: 164 callbacks suppressed
[  224.070825][ T8615] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.9.1172: Detected aborted journal
[  224.090388][ T8615] EXT4-fs error (device sda1) in ext4_evict_inode:259: Journal has aborted
[  225.495814][ T9631] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0
[  225.795679][  T144] device hsr_slave_0 left promiscuous mode
[  225.801921][  T144] device hsr_slave_1 left promiscuous mode
[  225.808481][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.816081][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.823680][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.832736][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.840415][  T144] device bridge_slave_1 left promiscuous mode
[  225.848818][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.860156][  T144] device bridge_slave_0 left promiscuous mode
[  225.866651][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.881226][  T144] device team_slave_0 left promiscuous mode
[  225.887516][  T144] device team_slave_1 left promiscuous mode
[  225.893849][  T144] device veth1_macvtap left promiscuous mode
[  225.900236][  T144] device veth0_macvtap left promiscuous mode
[  225.906422][  T144] device veth1_vlan left promiscuous mode
[  225.912192][  T144] device veth0_vlan left promiscuous mode
[  226.048532][  T144] team0 (unregistering): Port device team_slave_1 removed
[  226.062794][  T144] team0 (unregistering): Port device team_slave_0 removed
[  226.078383][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.091313][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.151257][  T144] bond0 (unregistering): Released all slaves
[  226.203371][ T9632] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0
[  226.221996][ T9633] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0
[  226.241042][ T9634] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0
[  226.559597][ T9636] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0
[  227.103716][ T9639] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0
[  227.239377][  T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.256462][ T9641] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0
[  227.332276][  T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.400084][  T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.509837][  T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.615174][ T3557] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0
[  227.639552][  T144] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.682268][  T144] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.730253][  T144] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.783064][  T144] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.884798][  T144] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.934649][  T144] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.998107][  T144] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.070637][  T144] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.091670][ T3850] EXT4-fs error: 127 callbacks suppressed
[  229.091683][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.320260][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.527062][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.586997][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.669527][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.685938][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.704645][  T144] device hsr_slave_0 left promiscuous mode
[  229.716588][  T144] device hsr_slave_1 left promiscuous mode
[  229.719707][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.734334][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.741210][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.742085][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.766173][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.773622][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.781923][  T144] device bridge_slave_1 left promiscuous mode
[  229.788223][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.795693][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.811199][  T144] device bridge_slave_0 left promiscuous mode
[  229.821284][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.832341][  T144] device hsr_slave_0 left promiscuous mode
[  229.838822][  T144] device hsr_slave_1 left promiscuous mode
[  229.845420][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.845578][ T3850] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0
[  229.852824][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.880583][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.890818][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.898673][  T144] device bridge_slave_1 left promiscuous mode
[  229.904815][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.913777][  T144] device bridge_slave_0 left promiscuous mode
[  229.920170][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.931967][  T144] device hsr_slave_0 left promiscuous mode
[  229.938248][  T144] device hsr_slave_1 left promiscuous mode
[  229.944446][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.952147][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.959882][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.967567][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.975054][  T144] device bridge_slave_1 left promiscuous mode
[  229.983087][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.991724][  T144] device bridge_slave_0 left promiscuous mode
[  229.998110][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.012058][  T144] device veth1_macvtap left promiscuous mode
[  230.018171][  T144] device veth0_macvtap left promiscuous mode
[  230.024206][  T144] device veth1_vlan left promiscuous mode
[  230.030294][  T144] device veth0_vlan left promiscuous mode
[  230.037861][  T144] device veth1_macvtap left promiscuous mode
[  230.043846][  T144] device veth0_macvtap left promiscuous mode
[  230.049978][  T144] device veth1_vlan left promiscuous mode
[  230.055889][  T144] device veth0_vlan left promiscuous mode
[  230.062207][  T144] device veth1_macvtap left promiscuous mode
[  230.068541][  T144] device veth0_macvtap left promiscuous mode
[  230.074540][  T144] device veth1_vlan left promiscuous mode
[  230.080627][  T144] device veth0_vlan left promiscuous mode
[  230.301177][  T144] team0 (unregistering): Port device team_slave_1 removed
[  230.313600][  T144] team0 (unregistering): Port device team_slave_0 removed
[  230.332116][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.357269][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.416297][  T144] bond0 (unregistering): Released all slaves
[  230.532535][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.544850][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.586092][  T144] bond0 (unregistering): Released all slaves
[  230.724526][  T144] team0 (unregistering): Port device team_slave_1 removed
[  230.738956][  T144] team0 (unregistering): Port device team_slave_0 removed
[  230.750719][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.763338][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.821769][  T144] bond0 (unregistering): Released all slaves