last executing test programs:

3m24.338351222s ago: executing program 3 (id=87):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000100)=0x3)

3m23.487081659s ago: executing program 3 (id=96):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x2efd1e7360344004, 0xc}, {0x5, 0x9}, {0xd, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x400, 0x10001}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004841}, 0x20000010)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

3m23.156840259s ago: executing program 3 (id=99):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x14040, &(0x7f0000000040)=ANY=[], 0xff, 0x5ec9, &(0x7f00000097c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1094c3, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)

3m21.836206551s ago: executing program 3 (id=110):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b)
syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6100272400303afffc000000000000000000000000000003ff0200000000000000000001ffaaaaaa"], 0x0)

3m21.55955156s ago: executing program 3 (id=113):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$eJzs3c9vI1cdAPDvOHHi/OgmLT0AgnZpCwtarZN426jqAcoRoUqIHkHahsQbRbHjKHZKE/awPXNFohIneuQP4NwTB25cENy4LAckfkSgDRIHoxlPst6svTGbTRziz0cazXvzZv19L868t/NizwtgZF2PiPsRMRERH0TEXH48ybd4t7Ol5z08uLd6eHBvNYl2+/2/J1l5eiy6/k1qJn/NUkR8/9OIHyVPxm3u7W+u1GrVnTy/0KpvLzT39m9t1FfWq+vVrUpleWl58e3bb1WeW1tfrU/kqS8/+N39b/wkrdZsfqS7Hf+zpNPePkURUTyOkxqPiO8+c7DLZSxvz8SwK8IzKUTESxHxWnb9z8VY9m4CAFdZuz0X7bnuPABw1RWyObCkUM7nAmajUCiXO3N4L8d0odZotm7ebexurXXmyuajWLi7Uasu5nOF81FM0vxSln6Ur5zI346IFyPiZ5NTWb682qitDfM/PgAwwmZOjP//muyM/wDAFVcadgUAgAvXZ/zv95lWAOAKcP8PAKPH+A8Ao6eUPcNhatjVAAAukPt/ABg9xn8AGCnfe++9dGsf5s+/Xvtwb3ez8eGttWpzs1zfXS2vNna2y+uNxnr2zJ76aa9XazS2l96M3Y/mv7ndbC009/bv1Bu7W6072XO971SL2Vm+WQAAw/Tiq5/9MUlH5Hemsi261nIoDrVmwHkrDLsCwNCM9UkDV5/VvmB0neEe3/QAXBE9luh9TCl6fEGo3W63z69KwDm78QXz/zCquub/fQoYRow5fxhd5v9hdLXbyaBr/segJwIAl5s5fqDP3/9fyve/yv848MO1k2d8cp61AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvtaP3fcr4W+GwUCuVyxAsRMR/F5O5GrboYEdci4g+Txck0vzTkOgMAZ1X4S5Kv/3Vj7o3Zx4pemTlOTkTEj3/x/s8/Wmm1dn4fMZH8Y/LoeOuT/Hjl4msPAJzuaJzO9l038g8P7q0ebRdZn79+OyJKnfiHBxNxeBx/PMazfSmKETH9zyTPdyRdcxdncf/jiPh8r/YnMZvNgXRWPj0ZP439woXGLzwWv5CVdfbpz+Jzz6EuMGo+S/ufd3tdf4W4nu17X/+lrIc6u7z/S19q9TDrAx/FP+r/xvr0f9cHjfHmb77TSU09WfZxxBfHI45iH3b1P0fxkz7x3xgw/p++9Mpr/crav4y4Eb3jd8daaNW3F5p7+7c26ivr1fXqVqWyvLS8+PbttyoL2Rz1Qv/R4G/v3LzWryxt/3Sf+KVT2v/VAdv/6X8++MFXnhL/66/3il+Il58SPx0TvzZg/JXpX5f6laXx1/q0/7T3/+aA8R/8ef+JZcMBgOFp7u1vrtRq1Z2nJa4dRpx2zv9lIgY7+bf5D+tS1HmkE+m7cAmq0TPxra4jM3GOsSb6XIw/fb3zazoZ0f2L3W4/U6x+PcbzmHUDLoPjiz4i/j3sygAAAAAAAAAAAAAAAD1dxLejht1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArq7/BgAA//8BoMnq")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c0)
lsetxattr(&(0x7f0000000200)='./bus\x00', &(0x7f00000005c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000800)='\x00', 0x1, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})

3m20.92599577s ago: executing program 3 (id=118):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
shmget$private(0x0, 0x2000, 0x442, &(0x7f000071f000/0x2000)=nil)

3m5.790912958s ago: executing program 32 (id=118):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
shmget$private(0x0, 0x2000, 0x442, &(0x7f000071f000/0x2000)=nil)

2m40.124359599s ago: executing program 1 (id=363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

2m39.808502329s ago: executing program 1 (id=356):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @broadcast}, 0x10)

2m39.47648527s ago: executing program 1 (id=360):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

2m39.14776602s ago: executing program 1 (id=362):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x26b)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x2010009, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})

2m38.400316064s ago: executing program 1 (id=368):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
close_range(r0, 0xffffffffffffffff, 0x0)

2m37.956165658s ago: executing program 1 (id=373):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x80802, 0x0)
shutdown(r0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x6, 0x4, 0xf037, 0x5, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0)

2m37.519968591s ago: executing program 33 (id=373):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x80802, 0x0)
shutdown(r0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x6, 0x4, 0xf037, 0x5, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0)

53.276741946s ago: executing program 0 (id=1375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

53.105719741s ago: executing program 0 (id=1377):
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

52.83260844s ago: executing program 0 (id=1380):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

52.495814561s ago: executing program 0 (id=1383):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x26b)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x2010009, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})

51.923225259s ago: executing program 0 (id=1388):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00')
creat(&(0x7f0000000140)='./bus\x00', 0x0)

51.337663077s ago: executing program 0 (id=1392):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x800000000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)

50.93989701s ago: executing program 34 (id=1392):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x800000000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)

5.177815756s ago: executing program 5 (id=1765):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'})
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
r0 = syz_usb_connect(0x3, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00035b0000005b03f17325b771a90a2cbfbe83e4eeec9dda2d352c3b6b944dcfbcdfe60bb9285a400365da93d266a44e65"], 0x0, 0x0}, 0x0)

3.707890253s ago: executing program 4 (id=1784):
r0 = gettid()
r1 = socket$key(0xf, 0x3, 0x2)
read(r1, &(0x7f0000000000)=""/147, 0x93)
tkill(r0, 0x7)

3.356334693s ago: executing program 7 (id=1787):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000b0000003c00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

3.355906354s ago: executing program 4 (id=1788):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000005500e50128bd70000000000007000000", @ANYRES32=r2], 0x38}}, 0x0)

3.258012757s ago: executing program 5 (id=1790):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mremap(&(0x7f00007ca000/0x800000)=nil, 0x800000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)

3.15649794s ago: executing program 7 (id=1791):
unshare(0x40600)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000080))

3.045624734s ago: executing program 7 (id=1793):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf361}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.995948015s ago: executing program 4 (id=1794):
r0 = syz_io_uring_setup(0x4e0b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x1000001}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280), 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000140)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xcd3, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x110}}}, &(0x7f00000001c0))

2.796133652s ago: executing program 5 (id=1796):
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xb}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)

2.795749262s ago: executing program 7 (id=1797):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.776482202s ago: executing program 6 (id=1798):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
unshare(0x28000600)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x10)

2.657945866s ago: executing program 4 (id=1799):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
close(r0)

2.564136519s ago: executing program 5 (id=1801):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f00000020c0)=ANY=[], 0x1, 0x9cf, &(0x7f0000000e00)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
utimensat(r0, 0x0, 0x0, 0x0)

2.307611827s ago: executing program 6 (id=1802):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x38}, 0x1, 0xffffffff00000003}, 0x0)

2.271896568s ago: executing program 5 (id=1803):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="603149000000ad54bbb6df3068ddbb234d3a9b5a6ba2ce0d37f4e60a8610c5a0733682b84cff6b2699f15e2d01a9fb3d5ee9325b491b839453a573e8f4fc8c9905d9f57014401f"], 0x0, 0x0})

2.056547715s ago: executing program 2 (id=1804):
r0 = fanotify_init(0x1a, 0x800)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0)
fanotify_mark(r0, 0x201, 0x40000001, r1, 0x0)

2.056099175s ago: executing program 6 (id=1805):
syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[], 0xfa, 0x155, &(0x7f0000000340)="$eJzskT9LQlEYxp/jvV41Mg0MKiiChsQwb1dsa9BIcrADhUtToCcSNEUh3LLmhj6AS0uTOERjQ9FkeSHsMzS6BUGLce4faW1/f8u953mf87zvOWd324wiDCiw2alV6w3RbIrSygHPZw/vHx5npO5THQOq9YY0l+zVUxo4lV8VGF3a8kvQA6AiNoq1SkkDkAaiADIyo+yFDts7JbWIHyflith0tOgqPp1WwnA1DdDmYPmSjraoApmQrek/wPgWWJN5s5jkfQFodbzO3PHY3ZKSdk/R6qz3uq/7g34uHlsW10Z2wbqBgpDzMln/SPTj74led2gOxhc8z82kYWwldUXXU0P+Nsil2jdQ96bPgSMGBP7kaTKjAFwxoMOArpU3enZ7c3/IFwkAnrMwwGSFBWXP9jevuu+gWJXi8byXudsmPwRBEARBEARBEATxX34DAAD//4EIV14=")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.91376573s ago: executing program 2 (id=1806):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0xa04080, &(0x7f0000000000)={[{@dioread_lock}, {@grpquota}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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")
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x1)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x3d9, 0xffffffffffffff1c, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x4})

1.749413575s ago: executing program 7 (id=1807):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))

1.57643419s ago: executing program 6 (id=1808):
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup/pids.max\x00', 0x2, 0x15)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6)
ioctl$GIO_FONT(r0, 0x4b60, 0x0)
syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.355817097s ago: executing program 2 (id=1809):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x72, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x9, 0x68, 0x1, 0x1ff}}, {0x4}}]}]}, 0x58}}, 0x0)

1.163780803s ago: executing program 6 (id=1810):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jy6lQ8WavNRKy/vVXfqscjw/blS/FKtGItzsZc3IjILxQ6D6Xu4/kLqytna7VaO36Zj3pETPUC6/mVwnLWja/GYszFfC++d7WRUsrOf7a6sljriojddnf+WC9t1afjTG/+H8/E2vDCoz9I9yniwurKuVpvgPp6P74dsTe8UaGT/0LMxfcvDoZJqX8H4+rK5cV+0sP4rXo1Lg72woGfgAAAAAAAAAAAAAAAAAAAAAAAwG1ZqA3MD9bPSZ3nfKWchYUJ7d31cfL43vpAe/n6QKmaIqU/3nio/k4W+9YHGl2fZ8tCggAAAAAAAAAAAAAAAAAAADCwuV2JRqu1trG5vdMsFtobm9tTEdGpefXbT76ajfE+NymU8ymqEYMpar1pd5qNlPU7pyxiPDzrTN6v+ejzQcbFPtXBVkxMo3pwU6t1x30/vz+suTfrj/z3sE8WkzcwK6Tx6MjI63fmKd3KjhoUzhVrquOzX0kpFWreKoZffn58wChFlG/9wO00p+LgPqlT+Obqy3f3937jy5R74MG5p6+89+FvzUarM3N0j2BlY/NGajZK/c5HmL03XOoeguG5UYq8UCqeCeXDBtzbX9PIfvj9mXve/e5oOyEVa17vnM8jfbJ8cz4dDa/khU6aI02zw/Dp3ka01qYnnPw3K9zGMb3rgy8+TumnX488xdDU2MtG6d959QEAAAAAAAAAAAAAAAAAAIoK3xXvfem6nTdMHxb18BMnlB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnIjh//8vFPZ2Y6TmKIW/2hOiqmsbmxGV/3ozAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/snAAD//yxgZos=")
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cc7766d4"], 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
open(&(0x7f0000000100)='./bus\x00', 0x147842, 0x8c)

1.000209119s ago: executing program 2 (id=1811):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$uinput_user_dev(r1, &(0x7f0000000180)={'syz0\x00', {0x10, 0x0, 0xffff}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100003, 0x5, 0x4, 0xd, 0x3, 0x9, 0x1f, 0xc795, 0x8, 0x7, 0x10001, 0x4, 0x8, 0x1, 0x18, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x3, 0x0, 0x0, 0x1, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x2, 0x6, 0x0, 0x8, 0x7, 0x75, 0x1, 0x80000e8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x7, 0x3, 0xfffffffc, 0x0, 0xdf, 0x287f], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x3, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x77, 0x8, 0xfffffffb, 0x1, 0x7ff, 0x204, 0x4d, 0x1, 0x0, 0xd, 0x0, 0x2, 0x5, 0xf, 0xd, 0x2, 0x2a, 0x8, 0x45, 0x4, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x8, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x3, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6, 0x313], [0x3, 0xfffffff8, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xfffffff8, 0x9, 0x1, 0x700, 0xffffffff, 0xfffffffa, 0x2a603077, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x9, 0x6, 0x1, 0x3, 0xffffffff, 0x709, 0x9, 0x9, 0x0, 0x7, 0xff, 0x7fffffff, 0x5, 0x4, 0x80000001, 0x5, 0xd, 0x7f, 0x4, 0x40, 0x3, 0x7, 0x4, 0x10001, 0x4, 0x0, 0x1000, 0x19, 0x15f, 0xa59, 0x3ff, 0x1, 0xa, 0xfffffff5, 0xd, 0x2, 0x10000, 0x1d, 0x3, 0x4, 0x3fffc, 0x1], [0x7, 0x8, 0x214, 0x6, 0x2, 0x6, 0x4, 0x8000, 0x2, 0x9, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0x9, 0x7fffffff, 0x0, 0xffff, 0x4, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b38, 0x2, 0xb, 0x3ff, 0x2, 0x1, 0x1, 0x1000, 0x101, 0xff, 0xb6, 0x3, 0xffff, 0x10, 0xa114, 0x10001, 0x6, 0x800, 0x4, 0x40, 0xfffffffb, 0x40, 0x0, 0xfffffff7, 0x7, 0x800, 0x0, 0x5, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0))

888.196432ms ago: executing program 4 (id=1812):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x6, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x5, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x401, 0x7, 0x6, 0x10, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0x3, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x6, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x4, 0x6, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0x4, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x19, 0x120000, 0x3, 0x6, 0xaaee, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x9, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0x8000000, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0xa, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000140)=[{r0, 0x68c}], 0x1, 0x0, 0x0, 0x0)

802.570765ms ago: executing program 2 (id=1813):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b92cd7093189d38ff69f532186dd", 0x0, 0x80, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

552.350282ms ago: executing program 2 (id=1814):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x80, 0xf6, 0x4, "82b3a529", "25f3bc0f"}}, 0x0}, 0x0)

478.067995ms ago: executing program 6 (id=1815):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0})
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1)

467.955475ms ago: executing program 4 (id=1816):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0xc, 0x5, 0x2, 0x8bc})

497.29Âľs ago: executing program 7 (id=1817):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
shmctl$IPC_SET(0x0, 0x1, 0x0)

0s ago: executing program 5 (id=1818):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x14040, &(0x7f0000000040)=ANY=[], 0xff, 0x5ec9, &(0x7f00000097c0)="$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")
mknod(&(0x7f000001f480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

kernel console output (not intermixed with test programs):

nk: 4768 bytes leftover after parsing attributes in process `syz.4.870'.
[  180.682457][ T7237] loop2: detected capacity change from 0 to 32768
[  180.852081][ T7237] XFS (loop2): Mounting V5 Filesystem
[  180.908339][ T7237] XFS (loop2): Ending clean mount
[  181.096032][ T4272] XFS (loop2): Unmounting Filesystem
[  181.820924][ T7309] loop0: detected capacity change from 0 to 256
[  181.875917][ T7309] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  182.524928][ T7333] netlink: 120 bytes leftover after parsing attributes in process `syz.6.886'.
[  182.959131][ T7348] loop2: detected capacity change from 0 to 512
[  183.013842][ T4284] Bluetooth: hci2: link tx timeout
[  183.019011][ T4284] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  183.028490][ T4284] Bluetooth: hci2: link tx timeout
[  183.033644][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.285674][ T7363] __ntfs_error: 8 callbacks suppressed
[  183.285690][ T7363] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  183.340131][ T7363] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[  183.388278][ T7363] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume.
[  183.753871][ T4864] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  183.952262][ T4864] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  183.985225][ T4864] usb 3-1: config 0 interface 0 has no altsetting 0
[  184.038267][ T4864] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  184.045893][ T7393] loop4: detected capacity change from 0 to 65
[  184.067857][ T4864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  184.089907][ T4864] usb 3-1: Product: syz
[  184.111790][ T7393] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  184.125830][ T4864] usb 3-1: Manufacturer: syz
[  184.158730][ T4864] usb 3-1: SerialNumber: syz
[  184.192652][ T4864] usb 3-1: config 0 descriptor??
[  184.218234][ T4864] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  184.253999][ T4864] pctv452e: pctv452e_power_ctrl: 1
[  184.253999][ T4864] 
[  184.423703][ T4864] dvb-usb: bulk message failed: -22 (5/0)
[  184.453026][ T4864] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  184.463700][ T4860] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  184.494385][ T4864] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  184.520146][ T7384] loop5: detected capacity change from 0 to 40427
[  184.559725][ T7384] F2FS-fs (loop5): invalid crc value
[  184.611744][ T7384] F2FS-fs (loop5): Found nat_bits in checkpoint
[  184.649165][ T4864] usb 3-1: USB disconnect, device number 10
[  184.659315][ T4860] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  184.687200][ T4860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.729734][ T4860] usb 7-1: config 0 descriptor??
[  184.746354][ T4860] cp210x 7-1:0.0: cp210x converter detected
[  184.769781][ T7384] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  184.828498][   T26] audit: type=1800 audit(2000000006.289:76): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.904" name="file1" dev="loop5" ino=10 res=0 errno=0
[  184.911236][ T7390] loop0: detected capacity change from 0 to 40427
[  184.943578][ T5031] syz-executor: attempt to access beyond end of device
[  184.943578][ T5031] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  184.967883][ T7390] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  185.002751][ T7390] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  185.101930][ T7390] F2FS-fs (loop0): Found nat_bits in checkpoint
[  185.166267][ T4860] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[  185.216275][ T4860] usb 7-1: cp210x converter now attached to ttyUSB0
[  185.286213][ T7390] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  185.335556][ T7390] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  185.407643][ T4860] usb 7-1: USB disconnect, device number 3
[  185.435048][ T4860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  185.497854][ T4860] cp210x 7-1:0.0: device disconnected
[  185.906023][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'.
[  186.014179][ T4277] Bluetooth: hci4: command 0x0406 tx timeout
[  186.020289][ T4277] Bluetooth: hci1: command 0x0406 tx timeout
[  186.501184][ T7464] loop2: detected capacity change from 0 to 256
[  186.571909][ T7464] FAT-fs (loop2): Directory bread(block 64) failed
[  186.616126][ T7464] FAT-fs (loop2): Directory bread(block 65) failed
[  186.622826][ T7464] FAT-fs (loop2): Directory bread(block 66) failed
[  186.687569][ T7464] FAT-fs (loop2): Directory bread(block 67) failed
[  186.714021][ T7464] FAT-fs (loop2): Directory bread(block 68) failed
[  186.745955][ T7464] FAT-fs (loop2): Directory bread(block 69) failed
[  186.769639][   T26] audit: type=1326 audit(2000000008.229:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.5.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3df659ce59 code=0x0
[  186.803992][ T7464] FAT-fs (loop2): Directory bread(block 70) failed
[  186.810746][ T7464] FAT-fs (loop2): Directory bread(block 71) failed
[  186.876000][ T7464] FAT-fs (loop2): Directory bread(block 72) failed
[  186.882589][ T7464] FAT-fs (loop2): Directory bread(block 73) failed
[  186.929555][ T7477] loop0: detected capacity change from 0 to 2048
[  187.002814][ T7477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.863263][ T7507] netlink: 'syz.2.939': attribute type 21 has an invalid length.
[  187.928949][ T7507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.939'.
[  188.834232][ T6634] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  189.043864][ T6634] usb 5-1: Using ep0 maxpacket: 32
[  189.051140][ T6634] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  189.122985][ T6634] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  189.139144][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'.
[  189.168888][ T6634] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.206501][ T6634] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  189.239091][ T6634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.267570][ T6634] usb 5-1: Product: syz
[  189.281196][ T6634] usb 5-1: Manufacturer: syz
[  189.297918][ T6634] usb 5-1: SerialNumber: syz
[  189.318461][ T6634] usb 5-1: config 0 descriptor??
[  189.670990][ T7580] loop2: detected capacity change from 0 to 128
[  189.711624][ T7580] EXT4-fs (loop2): Test dummy encryption mode enabled
[  189.737040][ T6634] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  189.773164][ T7580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  189.826912][ T7580] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  190.145590][ T6634] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  190.163452][ T6634] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  190.191330][ T6634] gs_usb: probe of 5-1:0.0 failed with error -71
[  190.226748][ T6634] usb 5-1: USB disconnect, device number 7
[  190.272361][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  190.660145][ T7617] netlink: 16 bytes leftover after parsing attributes in process `syz.6.976'.
[  191.138850][ T7631] loop5: detected capacity change from 0 to 1024
[  191.742617][ T7643] loop4: detected capacity change from 0 to 4096
[  191.801640][ T7643] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  191.842465][ T7655] tun0: tun_chr_ioctl cmd 1074812118
[  192.144123][ T4864] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  192.333911][ T4864] usb 7-1: Using ep0 maxpacket: 32
[  192.341040][ T4864] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  192.381156][ T4864] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  192.404723][ T7672] netlink: 1060 bytes leftover after parsing attributes in process `syz.4.994'.
[  192.411248][ T4864] usb 7-1: config 0 interface 0 has no altsetting 0
[  192.437894][ T7672] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  192.438686][ T4864] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  192.493424][ T4864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.540613][ T4864] usb 7-1: Product: syz
[  192.563972][ T4864] usb 7-1: Manufacturer: syz
[  192.582417][ T4864] usb 7-1: SerialNumber: syz
[  192.623709][ T4864] usb 7-1: config 0 descriptor??
[  193.031127][ T7687] loop0: detected capacity change from 0 to 2048
[  193.060083][ T4864] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  193.215020][ T7699] program syz.4.1002 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  193.220080][ T7687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  193.463399][ T4864] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  193.494742][ T4864] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  193.523316][ T4864] gs_usb: probe of 7-1:0.0 failed with error -71
[  193.571953][ T4864] usb 7-1: USB disconnect, device number 4
[  193.786897][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  193.801638][ T7714] loop2: detected capacity change from 0 to 1024
[  193.929622][   T26] audit: type=1326 audit(2000000015.389:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.1009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60b59ce59 code=0x7ffc0000
[  194.058317][   T26] audit: type=1326 audit(2000000015.389:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.1009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60b59ce59 code=0x7ffc0000
[  194.177621][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  194.184023][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  194.189939][   T26] audit: type=1326 audit(2000000015.419:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.1009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc60b59ce59 code=0x7ffc0000
[  194.266372][ T7719] IPVS: Scheduler module ip_vs_ not found
[  194.313422][   T26] audit: type=1326 audit(2000000015.419:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.1009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60b59ce59 code=0x7ffc0000
[  194.337389][    C0] vkms_vblank_simulate: vblank timer overrun
[  194.402210][   T26] audit: type=1326 audit(2000000015.419:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.1009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60b59ce59 code=0x7ffc0000
[  194.503354][   T26] audit: type=1326 audit(2000000015.419:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.1009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc60b59ce59 code=0x7ffc0000
[  194.584933][   T26] audit: type=1326 audit(2000000015.749:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.1009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60b59ce59 code=0x7ffc0000
[  194.626068][   T26] audit: type=1326 audit(2000000015.749:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.0.1009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60b59ce59 code=0x7ffc0000
[  194.650039][    C0] vkms_vblank_simulate: vblank timer overrun
[  194.774224][ T6634] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  194.865018][ T4780] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  194.984327][ T6634] usb 3-1: Using ep0 maxpacket: 8
[  195.014780][ T6634] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  195.023212][ T6634] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  195.039899][ T6634] usb 3-1: config 135 has no interface number 0
[  195.048556][ T6634] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  195.064075][ T4780] usb 6-1: Using ep0 maxpacket: 16
[  195.071789][ T6634] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  195.094169][ T4780] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  195.102601][ T4780] usb 6-1: config 0 has no interface number 0
[  195.103154][ T7758] loop6: detected capacity change from 0 to 16
[  195.109583][ T6634] usb 3-1: config 135 interface 230 has no altsetting 0
[  195.132460][ T4780] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  195.138232][ T7758] erofs: (device loop6): mounted with root inode @ nid 36.
[  195.145113][ T4780] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  195.165817][ T6634] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  195.180694][ T6634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.189173][ T6634] usb 3-1: Product: syz
[  195.193576][ T6634] usb 3-1: Manufacturer: syz
[  195.205363][ T6634] usb 3-1: SerialNumber: syz
[  195.210485][ T4780] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  195.226142][ T7758] erofs: (device loop6): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[  195.229865][ T4780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.255876][ T6634] uvcvideo 3-1:135.230: Found Unit with invalid ID 0
[  195.266138][ T4780] usb 6-1: Product: syz
[  195.270804][ T4780] usb 6-1: Manufacturer: syz
[  195.279673][ T7758] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36
[  195.282271][ T4780] usb 6-1: SerialNumber: syz
[  195.304032][ T4780] usb 6-1: config 0 descriptor??
[  195.310679][ T7737] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  195.312223][ T7758] erofs: (device loop6): z_erofs_readahead: readahead error at page 9 @ nid 36
[  195.318429][ T7737] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  195.348857][ T7758] erofs: (device loop6): z_erofs_readahead: readahead error at page 8 @ nid 36
[  195.373201][ T7758] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36
[  195.384221][ T7758] syz.6.1028: attempt to access beyond end of device
[  195.384221][ T7758] loop6: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[  195.399081][ T7758] syz.6.1028: attempt to access beyond end of device
[  195.399081][ T7758] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16
[  195.465322][ T6634] usb 3-1: Found UVC 0.00 device syz (18ec:3288)
[  195.471787][ T6634] usb 3-1: No valid video chain found.
[  195.558435][ T7737] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  195.576213][ T7737] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  195.664972][ T7769] loop6: detected capacity change from 0 to 4096
[  195.686783][ T4396] usb 3-1: USB disconnect, device number 11
[  195.786057][   T26] audit: type=1800 audit(2000000017.249:86): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1033" name="file0" dev="loop6" ino=0 res=0 errno=0
[  195.808448][ T4780] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  195.835812][   T26] audit: type=1800 audit(2000000017.279:87): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1033" name="file0" dev="loop6" ino=0 res=0 errno=0
[  196.021654][ T4780] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 170
[  196.228684][ T7781] netlink: 'syz.4.1040': attribute type 11 has an invalid length.
[  196.232059][ T4396] usb 6-1: USB disconnect, device number 8
[  196.243909][ T7781] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1040'.
[  196.258836][ T7781] netlink: 'syz.4.1040': attribute type 11 has an invalid length.
[  196.283941][ T7781] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1040'.
[  196.326371][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.459363][ T4277] Bluetooth: hci2: link tx timeout
[  196.464608][ T4277] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  196.472285][ T4277] Bluetooth: hci2: link tx timeout
[  196.479223][ T4277] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  196.552233][ T7791] loop6: detected capacity change from 0 to 512
[  196.620783][ T7791] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.1044: inode has both inline data and extents flags
[  196.636241][ T4864] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  196.649258][ T7791] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1044: couldn't read orphan inode 15 (err -117)
[  196.689895][ T7791] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  196.709135][ T7771] comedi comedi0: reset error (fatal)
[  196.717224][ T7797] loop4: detected capacity change from 0 to 1024
[  196.755804][ T7797] EXT4-fs: inline encryption not supported
[  196.801959][ T7797] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  196.823580][ T5679] EXT4-fs (loop6): unmounting filesystem.
[  196.824107][ T7797] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.843960][ T4864] usb 3-1: Using ep0 maxpacket: 16
[  196.855439][ T4864] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  196.903849][ T4864] usb 3-1: config 0 has no interface number 0
[  196.909998][ T4864] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  196.995165][ T4864] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  197.030623][ T4864] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  197.056116][ T4864] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  197.068651][ T4864] usb 3-1: Product: syz
[  197.072845][ T4864] usb 3-1: SerialNumber: syz
[  197.096607][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  197.113470][ T4864] usb 3-1: config 0 descriptor??
[  197.141462][ T4864] cm109 3-1:0.8: invalid payload size 0, expected 4
[  197.171056][ T4864] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input13
[  197.371413][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  197.383056][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  197.384855][ T4396] usb 3-1: USB disconnect, device number 12
[  197.390031][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  197.499264][ T4396] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  197.757642][ T7803] loop6: detected capacity change from 0 to 40427
[  197.802196][ T7803] F2FS-fs (loop6): invalid crc value
[  197.849256][ T7803] F2FS-fs (loop6): Found nat_bits in checkpoint
[  197.999238][ T7825] program syz.0.1055 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.040740][ T7803] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  198.242061][ T5679] syz-executor: attempt to access beyond end of device
[  198.242061][ T5679] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  198.516416][ T7844] loop4: detected capacity change from 0 to 256
[  198.531781][ T7845] loop2: detected capacity change from 0 to 256
[  198.569275][ T7844] exfat: Deprecated parameter 'utf8'
[  198.603244][ T7845] FAT-fs (loop2): Directory bread(block 64) failed
[  198.615062][ T7847] tipc: Started in network mode
[  198.619987][ T7847] tipc: Node identity , cluster identity 4711
[  198.628728][ T7844] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d)
[  198.643890][ T7845] FAT-fs (loop2): Directory bread(block 65) failed
[  198.650606][ T7845] FAT-fs (loop2): Directory bread(block 66) failed
[  198.680382][ T7845] FAT-fs (loop2): Directory bread(block 67) failed
[  198.704215][ T7845] FAT-fs (loop2): Directory bread(block 68) failed
[  198.710794][ T7845] FAT-fs (loop2): Directory bread(block 69) failed
[  198.764606][ T7845] FAT-fs (loop2): Directory bread(block 70) failed
[  198.771231][ T7845] FAT-fs (loop2): Directory bread(block 71) failed
[  198.820847][ T7845] FAT-fs (loop2): Directory bread(block 72) failed
[  198.869594][ T7845] FAT-fs (loop2): Directory bread(block 73) failed
[  199.255911][ T4780] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  199.395028][ T4396] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  199.435244][ T7871] loop0: detected capacity change from 0 to 1024
[  199.444537][ T4780] usb 5-1: Using ep0 maxpacket: 16
[  199.468221][ T4780] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  199.507852][ T4780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.538604][   T26] audit: type=1800 audit(2000000020.999:88): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1076" name="file2" dev="loop0" ino=20 res=0 errno=0
[  199.580126][ T4780] usb 5-1: Product: syz
[  199.596579][ T4396] usb 7-1: config 0 has no interfaces?
[  199.605564][ T4396] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  199.617066][ T4780] usb 5-1: Manufacturer: syz
[  199.631396][ T4780] usb 5-1: SerialNumber: syz
[  199.636820][ T7871] syz.0.1076: attempt to access beyond end of device
[  199.636820][ T7871] loop0: rw=34817, sector=5778, nr_sectors = 2 limit=1024
[  199.657399][ T4396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.672439][ T4396] usb 7-1: Product: syz
[  199.679502][ T4396] usb 7-1: Manufacturer: syz
[  199.696032][ T4396] usb 7-1: SerialNumber: syz
[  199.716487][ T4396] usb 7-1: config 0 descriptor??
[  199.772804][ T7875] loop2: detected capacity change from 0 to 256
[  199.894119][ T7875] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  199.957413][ T4864] usb 7-1: USB disconnect, device number 5
[  199.963420][ T4780] usb 5-1: USB disconnect, device number 8
[  199.993222][ T7877] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  200.031194][ T7877] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  200.069614][ T7877] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  200.145185][ T4272] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  200.267608][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  200.311663][ T7886] program syz.5.1083 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  200.911779][ T7909] loop6: detected capacity change from 0 to 512
[  200.975735][ T7909] EXT4-fs: Ignoring removed nobh option
[  201.067010][ T7909] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  201.124901][ T7909] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61
[  201.133425][ T7909] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #13: comm syz.6.1093: inode has both inline data and extents flags
[  201.194077][ T4317] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  201.219854][ T7909] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.1093: couldn't read orphan inode 13 (err -117)
[  201.273504][ T7909] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  201.393863][ T4317] usb 3-1: Using ep0 maxpacket: 32
[  201.400876][ T4317] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  201.427825][ T7924] loop5: detected capacity change from 0 to 64
[  201.433909][ T4317] usb 3-1: config 0 has no interface number 0
[  201.467264][ T4317] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  201.530234][ T4317] usb 3-1: config 0 interface 85 has no altsetting 0
[  201.543675][ T4317] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  201.561332][ T5679] EXT4-fs (loop6): unmounting filesystem.
[  201.603913][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.621208][ T4317] usb 3-1: Product: syz
[  201.630273][ T4317] usb 3-1: Manufacturer: syz
[  201.635866][ T7924] hfs: request for non-existent node 237 in B*Tree
[  201.642942][ T7924] hfs: request for non-existent node 237 in B*Tree
[  201.654296][ T4317] usb 3-1: SerialNumber: syz
[  201.671747][ T4317] usb 3-1: config 0 descriptor??
[  201.731006][ T7923] hfs: request for non-existent node 237 in B*Tree
[  201.739922][ T7923] hfs: request for non-existent node 237 in B*Tree
[  201.816855][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1101'.
[  201.829272][ T5108] hfs: request for non-existent node 237 in B*Tree
[  201.843866][ T5108] hfs: request for non-existent node 237 in B*Tree
[  201.915913][ T7933] loop4: detected capacity change from 0 to 1024
[  201.956072][ T7933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  201.985623][ T7933] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  202.024024][ T7933] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  202.057949][ T7933] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  202.260308][ T7945] loop5: detected capacity change from 0 to 4096
[  202.293359][ T4317] appletouch 3-1:0.85: Geyser mode initialized.
[  202.301288][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  202.319496][ T4317] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input14
[  202.407682][ T7949] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.473263][ T7945] NILFS (loop5): nilfs_sufile_do_free: segment 7 is already clean
[  202.498800][ T4317] usb 3-1: USB disconnect, device number 13
[  202.500834][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1114'.
[  202.535311][ T7945] NILFS (loop5): nilfs_sufile_do_free: segment 8 is already clean
[  202.566848][ T4317] appletouch 3-1:0.85: input: appletouch disconnected
[  202.995519][ T7971] loop5: detected capacity change from 0 to 128
[  203.035848][ T7971] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  203.099780][   T26] audit: type=1800 audit(2000000024.559:89): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1121" name="bus" dev="loop5" ino=1048641 res=0 errno=0
[  203.172346][ T7971] syz.5.1121: attempt to access beyond end of device
[  203.172346][ T7971] loop5: rw=0, sector=61, nr_sectors = 95 limit=128
[  203.289450][    T9] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  203.429288][ T7981] loop2: detected capacity change from 0 to 512
[  203.445060][ T7981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  203.513250][ T7981] EXT4-fs (loop2): 1 orphan inode deleted
[  203.519320][ T7981] EXT4-fs (loop2): 1 truncate cleaned up
[  203.525366][ T7981] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  203.619625][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  203.667764][ T7986] loop5: detected capacity change from 0 to 4096
[  203.709700][ T7986] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  204.000787][ T8000] loop5: detected capacity change from 0 to 128
[  204.611422][ T8020] loop5: detected capacity change from 0 to 4096
[  204.651081][ T8020] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  204.723330][ T7996] [U] 
[  205.010530][ T5031] EXT4-fs (loop5): unmounting filesystem.
[  205.361227][ T8016] loop2: detected capacity change from 0 to 40427
[  205.405238][ T8016] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  205.430240][ T8016] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  205.486643][ T8016] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[  205.523958][ T8016] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  205.533203][ T8016] F2FS-fs (loop2): invalid crc value
[  205.565380][ T8016] F2FS-fs (loop2): Found nat_bits in checkpoint
[  205.702142][ T8016] F2FS-fs (loop2): Start checkpoint disabled!
[  205.732585][ T8048] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  205.758341][ T8016] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  205.778366][ T8016] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  205.836521][ T8016] syz.2.1142: attempt to access beyond end of device
[  205.836521][ T8016] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  205.908918][ T8016] syz.2.1142: attempt to access beyond end of device
[  205.908918][ T8016] loop2: rw=2049, sector=45104, nr_sectors = 40 limit=40427
[  205.941746][ T8016] syz.2.1142: attempt to access beyond end of device
[  205.941746][ T8016] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  206.007507][ T8027] set_capacity_and_notify: 1 callbacks suppressed
[  206.007522][ T8027] loop6: detected capacity change from 0 to 40427
[  206.085917][ T8027] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff
[  206.104126][ T8027] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4
[  206.114890][ T8027] F2FS-fs (loop6): invalid crc value
[  206.179140][ T8027] F2FS-fs (loop6): Found nat_bits in checkpoint
[  206.247364][ T4780] kernel write not supported for file /528/clear_refs (pid: 4780 comm: kworker/0:16)
[  206.302500][ T8027] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  206.314497][   T46] kworker/u4:3: attempt to access beyond end of device
[  206.314497][   T46] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  206.360628][ T8027] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  206.418394][ T8066] loop5: detected capacity change from 0 to 2048
[  206.436850][ T8027] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10
[  206.513327][ T8066] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  206.542940][ T8066] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.599316][ T8027] F2FS-fs (loop6) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x123/0xbd0
[  206.633173][ T8066] fs-verity (loop5, inode 13): Unknown hash algorithm number: 3
[  206.660854][ T8075] loop0: detected capacity change from 0 to 256
[  206.695486][ T8075] exfat: Deprecated parameter 'namecase'
[  206.701269][ T8075] exfat: Deprecated parameter 'namecase'
[  206.783768][ T8075] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  206.826344][ T5031] EXT4-fs (loop5): unmounting filesystem.
[  206.836872][ T5679] syz-executor: attempt to access beyond end of device
[  206.836872][ T5679] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  207.235709][ T8081] loop0: detected capacity change from 0 to 1024
[  207.349283][   T26] audit: type=1800 audit(2000000028.809:90): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1168" name="file1" dev="loop0" ino=20 res=0 errno=0
[  207.385687][ T8085] loop5: detected capacity change from 0 to 1764
[  207.893491][ T8102] loop0: detected capacity change from 0 to 512
[  207.932160][ T8102] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  208.870334][ T4322] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  208.891356][ T8127] loop5: detected capacity change from 0 to 1024
[  208.934194][ T8127] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  209.040970][ T8127] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  209.169373][ T8127] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 28
[  209.224011][ T8127] EXT4-fs (loop5): This should not happen!! Data will be lost
[  209.224011][ T8127] 
[  209.259113][ T8127] EXT4-fs (loop5): Total free blocks count 0
[  209.299932][ T8127] EXT4-fs (loop5): Free/Dirty block details
[  209.332983][ T8127] EXT4-fs (loop5): free_blocks=0
[  209.358759][ T8127] EXT4-fs (loop5): dirty_blocks=0
[  209.364258][ T8127] EXT4-fs (loop5): Block reservation details
[  209.406539][ T8127] EXT4-fs (loop5): i_reserved_data_blocks=0
[  209.549524][ T5031] EXT4-fs (loop5): unmounting filesystem.
[  210.299200][ T8179] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1212'.
[  210.343932][ T8179] netlink: 'syz.5.1212': attribute type 9 has an invalid length.
[  210.351755][ T8179] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1212'.
[  210.412915][ T8179] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1212'.
[  210.423959][ T4935] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  210.624014][ T4935] usb 7-1: Using ep0 maxpacket: 16
[  210.635460][ T4935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.664566][ T4935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.691259][ T4935] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  210.720204][ T4935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.782358][ T4935] usb 7-1: config 0 descriptor??
[  210.812309][ T8175] loop0: detected capacity change from 0 to 32768
[  210.855144][ T8175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1210 (8175)
[  210.890415][ T8175] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  210.935576][ T8175] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  210.954559][ T8175] BTRFS info (device loop0): using free space tree
[  211.168973][ T8175] BTRFS info (device loop0): enabling ssd optimizations
[  211.196770][ T4935] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  211.207429][ T4935] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  211.215325][ T4935] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  211.228867][ T4935] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  211.236521][ T4864] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  211.244216][ T4935] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  211.255823][ T4935] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0
[  211.336956][ T4281] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.393659][ T4935] corsair 0003:1B1C:1B02.000C: Read invalid backlight brightness: 54.
[  211.429798][ T4864] usb 3-1: Using ep0 maxpacket: 8
[  211.443286][ T4864] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.478798][ T4864] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.531271][ T4864] usb 3-1: config 0 interface 0 has no altsetting 0
[  211.573934][ T4864] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  211.602758][ T4864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.621630][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  211.631804][ T8224] loop5: detected capacity change from 0 to 4096
[  211.669451][ T4864] usb 3-1: config 0 descriptor??
[  211.721349][ T8224] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  211.772270][ T8224] NILFS (loop5): mounting unchecked fs
[  211.793888][ T8224] NILFS (loop5): recovery required for readonly filesystem
[  211.801245][ T8224] NILFS (loop5): write access will be enabled during recovery
[  211.822612][ T4775] usb 7-1: USB disconnect, device number 6
[  211.907265][ T8224] NILFS (loop5): recovery complete
[  212.121472][ T4864] smartjoyplus 0003:6666:8804.000D: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0
[  212.163738][ T4864] smartjoyplus 0003:6666:8804.000D: Force feedback for SmartJoy PLUS PS2/USB adapter
[  212.320901][ T4864] usb 3-1: USB disconnect, device number 14
[  212.461994][ T8240] fido_id[8240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  212.595397][ T8246] loop0: detected capacity change from 0 to 2048
[  212.609615][ T8248] loop5: detected capacity change from 0 to 128
[  212.628895][ T8246] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  212.698855][ T8246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.731676][ T8250] loop6: detected capacity change from 0 to 256
[  212.773548][ T8250] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  212.954959][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'.
[  213.294144][ T4774] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  213.513979][ T4774] usb 3-1: Using ep0 maxpacket: 8
[  213.523566][ T4774] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  213.570760][ T4774] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  213.591396][ T4774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.608300][ T4774] usb 3-1: Product: syz
[  213.612785][ T4774] usb 3-1: Manufacturer: syz
[  213.632645][ T4774] usb 3-1: SerialNumber: syz
[  213.680144][ T4774] usb 3-1: config 0 descriptor??
[  213.711471][ T4774] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  213.724019][ T4780] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  213.739210][ T4774] usb 3-1: setting power ON
[  213.748185][ T4774] dvb-usb: bulk message failed: -22 (2/0)
[  213.762363][ T4774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  213.778519][ T4774] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  213.792150][ T4774] usb 3-1: media controller created
[  213.821178][ T4774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  213.859301][ T4774] usb 3-1: selecting invalid altsetting 6
[  213.875429][ T4774] usb 3-1: digital interface selection failed (-22)
[  213.882310][ T4774] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  213.897038][ T4774] usb 3-1: setting power OFF
[  213.909430][ T4774] dvb-usb: bulk message failed: -22 (2/0)
[  213.928248][ T8258] dvb-usb: bulk message failed: -22 (3/0)
[  213.939495][ T4774] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  213.951868][ T4780] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  213.970914][ T8258] cxusb: i2c rd: len=147 is too big!
[  213.970914][ T8258] 
[  213.982402][ T4780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.997446][ T4774] (NULL device *): no alternate interface
[  214.006163][ T8273] dvb-usb: bulk message failed: -22 (4/0)
[  214.025407][ T4780] usb 7-1: Product: syz
[  214.035949][ T4780] usb 7-1: Manufacturer: syz
[  214.042892][ T8264] loop0: detected capacity change from 0 to 131072
[  214.064093][ T4780] usb 7-1: SerialNumber: syz
[  214.068942][ T8264] F2FS-fs (loop0): invalid crc value
[  214.078294][ T4774] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  214.103768][ T8264] F2FS-fs (loop0): Found nat_bits in checkpoint
[  214.148108][ T8264] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  214.154830][ T4774] usb 3-1: USB disconnect, device number 15
[  214.161142][ T8264] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  214.204042][ T4864] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  214.351684][ T4780] rtl8150 7-1:1.0: couldn't reset the device
[  214.361621][ T4780] rtl8150: probe of 7-1:1.0 failed with error -5
[  214.407382][ T4864] usb 5-1: Using ep0 maxpacket: 8
[  214.412441][ T4780] usb 7-1: USB disconnect, device number 7
[  214.440392][ T4864] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  214.459031][ T4864] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  214.481486][ T4864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  214.500477][ T4864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  214.524570][ T4864] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  214.574537][ T4864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  214.584790][ T4864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.791512][ T8289] loop2: detected capacity change from 0 to 2048
[  214.830274][ T4864] usb 5-1: GET_CAPABILITIES returned 0
[  214.836008][ T4864] usbtmc 5-1:16.0: can't read capabilities
[  214.843020][ T8289] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  214.956143][ T8289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.046216][ T8262] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90
[  215.105379][ T4774] usb 5-1: USB disconnect, device number 9
[  215.303969][ T4864] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  215.483900][ T4864] usb 7-1: Using ep0 maxpacket: 8
[  215.490634][ T4864] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.522099][ T4864] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.552764][ T4864] usb 7-1: config 0 interface 0 has no altsetting 0
[  215.569908][ T4864] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  215.589744][ T4864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.612833][ T4864] usb 7-1: config 0 descriptor??
[  216.062915][ T4864] smartjoyplus 0003:6666:8804.000E: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.6-1/input0
[  216.097962][ T4864] smartjoyplus 0003:6666:8804.000E: Force feedback for SmartJoy PLUS PS2/USB adapter
[  216.196242][ T8324] loop4: detected capacity change from 0 to 256
[  216.256979][ T8324] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  216.284191][ T4774] usb 7-1: USB disconnect, device number 8
[  216.512832][ T8333] loop4: detected capacity change from 0 to 256
[  216.571964][ T8330] loop5: detected capacity change from 0 to 2048
[  216.621565][ T8330] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  216.669321][ T8337] loop2: detected capacity change from 0 to 64
[  216.682680][ T8330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.079698][ T8346] loop5: detected capacity change from 0 to 512
[  217.128157][ T8346] EXT4-fs (loop5): invalid journal inode
[  217.141276][ T8350] loop4: detected capacity change from 0 to 16
[  217.153971][ T8346] EXT4-fs (loop5): can't get journal size
[  217.184237][ T8350] erofs: (device loop4): mounted with root inode @ nid 36.
[  217.213336][ T8353] loop0: detected capacity change from 0 to 256
[  217.223074][ T8346] EXT4-fs (loop5): 1 truncate cleaned up
[  217.249608][ T8346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  217.333134][ T8353] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d)
[  217.338067][ T8360] loop4: detected capacity change from 0 to 256
[  217.381770][ T5031] EXT4-fs (loop5): unmounting filesystem.
[  217.582980][ T8364] overlayfs: filesystem on './file0' not supported as upperdir
[  217.749812][ T8367] loop4: detected capacity change from 0 to 1024
[  217.840434][ T8367] hfsplus: catalog searching failed
[  217.875371][ T8369] loop0: detected capacity change from 0 to 8192
[  217.923511][ T8369] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  217.937322][ T8369] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  217.937979][   T46] hfsplus: b-tree write err: -5, ino 3
[  217.946576][ T8369] REISERFS (device loop0): using ordered data mode
[  217.959462][ T8369] reiserfs: using flush barriers
[  217.971280][ T8369] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  217.989960][ T8369] REISERFS (device loop0): checking transaction log (loop0)
[  217.998399][ T8369] REISERFS (device loop0): Using r5 hash to sort names
[  218.011479][ T8369] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  218.083983][   T26] audit: type=1326 audit(2000000039.539:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.114111][ T4774] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  218.175022][   T26] audit: type=1326 audit(2000000039.539:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.285711][   T26] audit: type=1326 audit(2000000039.539:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.318871][ T4774] usb 6-1: Using ep0 maxpacket: 32
[  218.346817][ T4774] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  218.363909][   T26] audit: type=1326 audit(2000000039.539:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.383858][ T4774] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  218.431651][ T4774] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  218.459253][   T26] audit: type=1326 audit(2000000039.539:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.470430][ T4774] usb 6-1: config 1 has no interface number 0
[  218.496465][   T26] audit: type=1326 audit(2000000039.539:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.536678][ T4774] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  218.541737][   T26] audit: type=1326 audit(2000000039.539:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.576334][ T4774] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  218.597706][ T4774] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  218.623864][ T4774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.628561][   T26] audit: type=1326 audit(2000000039.539:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.657914][   T26] audit: type=1326 audit(2000000039.539:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.676566][ T4774] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  218.682372][   T26] audit: type=1326 audit(2000000039.539:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.6.1279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a44f9ce59 code=0x7fc00000
[  218.785411][ T8390] loop2: detected capacity change from 0 to 8192
[  218.818838][ T8390] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  218.838989][ T8390] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  218.868960][ T8390] REISERFS (device loop2): using ordered data mode
[  218.878432][ T4774] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  218.923542][ T8390] reiserfs: using flush barriers
[  218.958041][ T8390] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  219.032678][ T8390] REISERFS (device loop2): checking transaction log (loop2)
[  219.047945][ T8390] REISERFS (device loop2): Using r5 hash to sort names
[  219.055872][ T8390] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  219.119343][ T8400] loop0: detected capacity change from 0 to 2048
[  219.221917][ T8402] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.245468][ T8402] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  219.262665][ T8402] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  219.283283][ T8402] Remounting filesystem read-only
[  219.311581][ T8400] NILFS (loop0): mounting fs with errors
[  219.324464][ T8405] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  219.358315][ T8405] Remounting filesystem read-only
[  219.446663][ T4281] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  219.460680][ T4281] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  219.485527][ T4935] usb 6-1: USB disconnect, device number 9
[  219.505591][ T4935] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  219.740417][ T8415] loop0: detected capacity change from 0 to 256
[  220.292807][ T8424] overlayfs: filesystem on './file0' not supported as upperdir
[  220.295669][ T8421] hfsplus: catalog searching failed
[  220.478029][ T8426] netlink: 'syz.0.1321': attribute type 30 has an invalid length.
[  220.489616][   T46] hfsplus: b-tree write err: -5, ino 3
[  220.513149][ T8426] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  220.522190][ T8426] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  220.531011][ T8426] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  220.539858][ T8426] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.583737][ T8413] JBD2: Ignoring recovery information on journal
[  220.629719][ T8428] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d)
[  220.664303][ T8426] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.673980][ T8426] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.682863][ T8426] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.691783][ T8426] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.820256][ T8413] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  220.975195][ T8436] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  221.064660][ T8436] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  221.074016][ T8436] REISERFS (device loop5): using ordered data mode
[  221.087184][ T8436] reiserfs: using flush barriers
[  221.093344][ T8436] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  221.118833][ T8436] REISERFS (device loop5): checking transaction log (loop5)
[  221.129590][ T8436] REISERFS (device loop5): Using r5 hash to sort names
[  221.130064][ T8440] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.145236][ T8413] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  221.172434][ T8436] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  221.246273][ T8439] NILFS error (device loop6): nilfs_dotdot: directory #12 missing '.'
[  221.259821][ T8442] netlink: 'syz.0.1315': attribute type 1 has an invalid length.
[  221.281236][ T8413] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  221.282157][ T8439] Remounting filesystem read-only
[  221.313977][ T8442] netlink: 'syz.0.1315': attribute type 2 has an invalid length.
[  221.388446][ T8413] OCFS2: File system is now read-only.
[  221.410766][ T8413] (syz.2.1304,8413,1):ocfs2_trim_mainbm:7610 ERROR: status = -30
[  221.622905][ T4272] ocfs2: Unmounting device (7,2) on (node local)
[  222.427318][ T4864] kernel read not supported for file /dsp1 (pid: 4864 comm: kworker/1:13)
[  222.594025][ T8475] set_capacity_and_notify: 6 callbacks suppressed
[  222.594042][ T8475] loop9: detected capacity change from 0 to 524287871
[  222.618526][ T8460] loop6: detected capacity change from 0 to 32768
[  222.626985][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.636228][    C0] buffer_io_error: 8 callbacks suppressed
[  222.636241][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.679541][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.688875][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.739792][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.749052][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.782061][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.791311][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.845511][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.854783][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.872616][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.881863][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.891833][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.901062][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.937275][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.946518][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  222.963083][ T8475] ldm_validate_partition_table(): Disk read failed.
[  222.984104][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  222.993346][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  223.001853][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  223.011065][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  223.020387][ T8475] Dev loop9: unable to read RDB block 0
[  223.072793][ T8475]  loop9: unable to read partition table
[  223.105931][ T8475] loop_reread_partitions: partition scan of loop9 (áĹžXHuůŁ¨ĂŇJíˆý[źd‚ŇwÍ|i4F‡Â-—şä˝ÚÚŁrwǘ3›ęĺůU™ČžŒžJ˝„?"e) failed (rc=-5)
[  223.169354][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'.
[  223.744010][ T4773] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  223.946538][ T4773] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  223.961646][ T4773] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  223.972474][ T4773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  223.989008][ T4773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  224.037600][ T4773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  224.106870][ T4773] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  224.145784][ T4773] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  224.172108][ T4773] usb 3-1: Product: syz
[  224.181804][ T4773] usb 3-1: Manufacturer: syz
[  224.206751][ T4773] cdc_wdm 3-1:1.0: skipping garbage
[  224.212179][ T4773] cdc_wdm 3-1:1.0: skipping garbage
[  224.236178][ T4773] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  224.249993][ T4773] cdc_wdm 3-1:1.0: Unknown control protocol
[  224.463974][ T4774] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  224.471779][ T6635] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  224.482614][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  224.488077][ T4860] usb 3-1: USB disconnect, device number 16
[  224.489238][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  224.501234][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  224.709140][ T6635] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.720072][ T4774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.735816][ T4774] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  224.745970][ T6635] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  224.757197][ T6635] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  224.767077][ T4774] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  224.776335][ T6635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  224.785564][ T4774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  224.793746][ T6635] usb 6-1: SerialNumber: syz
[  224.802754][ T4774] usb 1-1: SerialNumber: syz
[  225.030871][ T4774] usb 1-1: 0:2 : does not exist
[  225.064933][ T6635] usb 6-1: 0:2 : does not exist
[  225.082596][ T4774] usb 1-1: USB disconnect, device number 12
[  225.107043][ T6635] usb 6-1: USB disconnect, device number 10
[  225.278006][ T8511] loop4: detected capacity change from 0 to 1024
[  225.327373][ T8511] gfs2: path_lookup on c::: returned error -2
[  225.334838][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  225.369856][ T5108] hfsplus: b-tree write err: -5, ino 25
[  225.385968][ T5108] hfsplus: b-tree write err: -5, ino 4
[  225.387679][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  225.404105][ T5108] hfsplus: b-tree write err: -5, ino 2
[  225.410499][ T8515] device bond1 entered promiscuous mode
[  225.604190][ T8520] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  225.741199][ T8524] devpts: called with bogus options
[  226.330224][ T8544] loop2: detected capacity change from 0 to 164
[  226.790614][ T8562] loop5: detected capacity change from 0 to 256
[  226.990619][ T8540] loop0: detected capacity change from 0 to 32768
[  227.003921][ T4774] kernel read not supported for file /dsp1 (pid: 4774 comm: kworker/0:10)
[  227.104161][ T8540] ialloc: diAlloc returned -28!
[  227.420982][ T8569] loop5: detected capacity change from 0 to 4096
[  227.431969][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.439408][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.773529][ T8581] device bridge0 entered promiscuous mode
[  227.802386][ T8582] loop6: detected capacity change from 0 to 16
[  227.829247][ T8579] device bridge0 left promiscuous mode
[  227.843265][ T8582] erofs: (device loop6): mounted with root inode @ nid 36.
[  227.853468][ T8583] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1380'.
[  228.098208][ T8586] loop0: detected capacity change from 0 to 512
[  228.149212][ T8586] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1383: corrupted in-inode xattr
[  228.262599][ T8586] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1383: couldn't read orphan inode 15 (err -117)
[  228.338541][ T8586] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  228.374100][ T6635] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  228.545230][ T4281] EXT4-fs error (device loop0): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  228.566884][ T6635] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  228.603893][ T6635] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.613696][ T6635] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  228.633019][ T4281] EXT4-fs error (device loop0): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  228.646297][ T6635] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  228.668971][ T6635] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.700960][ T6635] usb 7-1: config 0 descriptor??
[  229.050365][ T4281] EXT4-fs (loop0): unmounting filesystem.
[  229.133759][ T6635] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max
[  229.171066][ T6635] microsoft 0003:045E:07DA.000F: unsupported Resolution Multiplier 0
[  229.203471][ T6635] microsoft 0003:045E:07DA.000F: implement() called with n (152) > 32! (kworker/0:18)
[  229.257840][ T4322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.373919][ T6635] microsoft 0003:045E:07DA.000F: unsupported Resolution Multiplier 0
[  229.382344][ T6635] microsoft 0003:045E:07DA.000F: No inputs registered, leaving
[  229.400805][ T6635] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  229.412393][ T6635] microsoft 0003:045E:07DA.000F: no inputs found
[  229.418906][ T6635] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway
[  229.502376][ T4322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.648095][ T6635] usb 7-1: USB disconnect, device number 9
[  229.650041][ T8617] loop5: detected capacity change from 0 to 256
[  229.668446][ T4322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.709441][ T8617] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  229.856526][ T4322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.530104][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.542386][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.552351][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.560264][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.568068][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  230.576258][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.678609][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1410'.
[  230.803488][ T8652] netlink: 'syz.5.1411': attribute type 9 has an invalid length.
[  231.417777][ T8678] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1420'.
[  231.669582][ T8635] chnl_net:caif_netlink_parms(): no params data found
[  231.914941][ T8700] netlink: 'syz.4.1426': attribute type 2 has an invalid length.
[  231.922829][ T8700] netlink: 'syz.4.1426': attribute type 3 has an invalid length.
[  232.046447][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.059884][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.099305][ T8635] device bridge_slave_0 entered promiscuous mode
[  232.380522][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.387959][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.409760][ T8635] device bridge_slave_1 entered promiscuous mode
[  232.566036][ T8690] loop6: detected capacity change from 0 to 32768
[  232.628645][ T8690] 
[  232.628645][ T8690]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.628645][ T8690] 
[  232.656516][ T4277] Bluetooth: hci3: command 0x0409 tx timeout
[  232.714069][ T4864] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  232.755825][ T8690] ERROR: (device loop6): diWrite: ixpxd invalid
[  232.755825][ T8690] 
[  232.794811][ T8690] ERROR: (device loop6): txCommit: 
[  232.794811][ T8690] 
[  232.806814][ T8723] loop2: detected capacity change from 0 to 1024
[  232.883930][ T8635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.905344][ T5679] 
[  232.905344][ T5679]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.905344][ T5679] 
[  232.915595][ T8635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.923432][ T5679] 
[  232.923432][ T5679]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.923432][ T5679] 
[  232.944914][ T8723] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  232.951698][ T8635] team0: Port device team_slave_0 added
[  232.954911][ T4864] usb 5-1: Using ep0 maxpacket: 8
[  232.964894][ T8635] team0: Port device team_slave_1 added
[  233.045429][ T4864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  233.071714][ T4864] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  233.083098][ T4864] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  233.096573][ T4864] usb 5-1: Product: syz
[  233.100834][ T4864] usb 5-1: Manufacturer: syz
[  233.105955][ T4864] usb 5-1: SerialNumber: syz
[  233.134487][ T4322] device hsr_slave_0 left promiscuous mode
[  233.144393][ T4322] device hsr_slave_1 left promiscuous mode
[  233.163251][ T8727] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.1437: bit already cleared for inode 15
[  233.176302][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.186270][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.193862][ T8727] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  233.207276][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.217543][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.231088][ T4322] batman_adv: batadv0: Interface deactivated: macvtap1
[  233.239525][ T4322] batman_adv: batadv0: Removing interface: macvtap1
[  233.249593][ T4322] device bridge_slave_1 left promiscuous mode
[  233.256786][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.276825][ T8729] loop6: detected capacity change from 0 to 8192
[  233.294969][ T4322] device bridge_slave_0 left promiscuous mode
[  233.303025][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.304824][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  233.333767][ T8729] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  233.347981][ T8729] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  233.357269][ T8729] REISERFS (device loop6): using ordered data mode
[  233.362399][ T4864] usb 5-1: Handspring Visor / Palm OS: port 0, is for unknown use
[  233.363870][ T8729] reiserfs: using flush barriers
[  233.378531][ T8729] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  233.382737][ T4864] usb 5-1: Handspring Visor / Palm OS: Number of ports: 1
[  233.404150][ T8729] REISERFS (device loop6): checking transaction log (loop6)
[  233.448105][ T4322] device batadv_slave_0 left promiscuous mode
[  233.455146][ T4322] device veth1_macvtap left promiscuous mode
[  233.485981][ T4322] device veth0_macvtap left promiscuous mode
[  233.505339][ T4322] device veth1_vlan left promiscuous mode
[  233.511204][ T4322] device veth0_vlan left promiscuous mode
[  233.575512][ T4864] usb 5-1: palm_os_3_probe - error -71 getting bytes available request
[  233.595088][ T4864] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  233.627246][ T4864] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  233.636602][ T8729] REISERFS (device loop6): Using tea hash to sort names
[  233.651432][ T8729] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  233.670298][ T4864] usb 5-1: USB disconnect, device number 10
[  233.732343][ T4864] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  233.765111][ T4864] visor 5-1:1.0: device disconnected
[  233.881577][ T8737] loop2: detected capacity change from 0 to 8
[  234.105844][ T8740] loop2: detected capacity change from 0 to 512
[  234.149800][ T8740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  234.200895][ T8740] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1442: corrupted xattr entries
[  234.243418][ T8740] EXT4-fs (loop2): 1 truncate cleaned up
[  234.249448][ T8740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  234.286569][ T8740] EXT4-fs (loop2): shut down requested (1)
[  234.383475][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  234.740482][ T4277] Bluetooth: hci3: command 0x041b tx timeout
[  234.806388][ T4775] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  234.964304][ T8758] loop6: detected capacity change from 0 to 128
[  235.038607][ T4775] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  235.061840][ T4775] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  235.105015][ T4775] usb 3-1: config 0 interface 0 has no altsetting 0
[  235.148890][ T4775] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  235.173862][ T4775] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  235.192275][ T4775] usb 3-1: Product: syz
[  235.197373][ T4775] usb 3-1: Manufacturer: syz
[  235.202003][ T4775] usb 3-1: SerialNumber: syz
[  235.256138][ T4775] usb 3-1: config 0 descriptor??
[  235.278225][ T4775] usb 3-1: selecting invalid altsetting 0
[  235.536620][ T4773] usb 3-1: USB disconnect, device number 17
[  235.608781][ T8769] overlayfs: upper fs does not support tmpfile.
[  235.622271][ T4322] team0 (unregistering): Port device team_slave_1 removed
[  235.712937][ T4322] team0 (unregistering): Port device team_slave_0 removed
[  235.772220][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.839146][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.278358][ T4322] bond0 (unregistering): Released all slaves
[  236.410746][ T8754] bridge0: port 3(erspan0) entered blocking state
[  236.420347][ T8754] bridge0: port 3(erspan0) entered disabled state
[  236.430419][ T8754] device erspan0 entered promiscuous mode
[  236.441262][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.495066][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.563853][ T8635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.651724][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.672198][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.781719][ T8635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.814082][ T4284] Bluetooth: hci3: command 0x040f tx timeout
[  236.886636][ T8789] loop6: detected capacity change from 0 to 128
[  237.020088][ T8635] device hsr_slave_0 entered promiscuous mode
[  237.084832][ T8635] device hsr_slave_1 entered promiscuous mode
[  237.114109][ T8635] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.130593][ T8635] Cannot create hsr debugfs directory
[  237.557959][ T8803] loop6: detected capacity change from 0 to 16
[  237.603631][ T8803] erofs: (device loop6): mounted with root inode @ nid 36.
[  237.793746][ T8635] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  237.901946][ T8635] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  237.948193][ T8814] overlayfs: unrecognized mount option "\']*=°˘°Šć[\1\,-\=" or missing value
[  237.959136][ T8635] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  237.991371][ T8635] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  238.036160][ T8817] netlink: 'syz.6.1472': attribute type 3 has an invalid length.
[  238.063910][ T8817] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1472'.
[  238.304335][ T8635] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.359338][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  238.374722][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  238.407991][ T8635] 8021q: adding VLAN 0 to HW filter on device team0
[  238.437461][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  238.456750][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  238.480077][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.487273][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.527423][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  238.549444][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  238.583178][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  238.606886][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.614084][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.637560][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  238.672486][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  238.684662][ T4773] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  238.697774][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  238.709852][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  238.719494][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  238.730741][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  238.736049][ T8809] loop2: detected capacity change from 0 to 32768
[  238.740481][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  238.765757][ T8635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  238.777772][ T8635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.792530][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  238.809900][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  238.820821][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  238.829706][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  238.844625][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  238.858493][ T8809] XFS (loop2): Mounting V5 Filesystem
[  238.877345][ T4773] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  238.903926][ T4277] Bluetooth: hci3: command 0x0419 tx timeout
[  238.947226][ T4773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.955691][ T4773] usb 5-1: Product: syz
[  238.959876][ T4773] usb 5-1: Manufacturer: syz
[  238.965377][ T8809] XFS (loop2): Ending clean mount
[  238.969768][ T4773] usb 5-1: SerialNumber: syz
[  238.987646][ T4773] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  239.009026][ T6635] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  239.185214][ T4272] XFS (loop2): Unmounting Filesystem
[  239.673144][ T4775] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  239.680110][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  239.685838][ T4774] usb 5-1: USB disconnect, device number 11
[  239.708051][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  239.728936][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.903995][ T4775] usb 6-1: Using ep0 maxpacket: 32
[  239.918210][ T4775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.968035][ T4775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.008555][ T4775] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  240.028777][ T4775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.067947][ T4775] usb 6-1: config 0 descriptor??
[  240.096908][ T4775] hub 6-1:0.0: USB hub found
[  240.265531][ T6635] usb 5-1: Service connection timeout for: 256
[  240.271759][ T6635] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  240.301449][ T4775] hub 6-1:0.0: config failed, can't read hub descriptor (err -90)
[  240.314071][ T6635] ath9k_htc: Failed to initialize the device
[  240.321990][ T4774] usb 5-1: ath9k_htc: USB layer deinitialized
[  240.675139][ T8888] loop4: detected capacity change from 0 to 512
[  240.722385][ T4775] hid-generic 0003:046D:C31C.0010: item fetching failed at offset 0/1
[  240.741317][ T4775] hid-generic: probe of 0003:046D:C31C.0010 failed with error -22
[  240.833783][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  240.842613][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.856502][ T8888] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.1487: corrupted inode contents
[  240.929072][ T8888] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #16: comm syz.4.1487: mark_inode_dirty error
[  240.988562][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  241.005028][ T8888] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.1487: corrupted inode contents
[  241.024290][ T8888] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1487: mark_inode_dirty error
[  241.027332][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  241.044209][ T4774] usb 6-1: USB disconnect, device number 11
[  241.069145][ T8888] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.1487: corrupted inode contents
[  241.126574][ T8635] device veth0_vlan entered promiscuous mode
[  241.146360][ T8888] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  241.165429][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  241.175481][ T8888] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.1487: corrupted inode contents
[  241.183664][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.204682][ T8888] EXT4-fs error (device loop4): ext4_truncate:4325: inode #16: comm syz.4.1487: mark_inode_dirty error
[  241.235037][ T8888] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  241.247596][ T8635] device veth1_vlan entered promiscuous mode
[  241.256677][ T8882] loop6: detected capacity change from 0 to 32768
[  241.273144][ T8888] EXT4-fs (loop4): 1 truncate cleaned up
[  241.283928][ T8888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  241.298819][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  241.303216][ T8888] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.344621][   T33] __quota_error: 58 callbacks suppressed
[  241.344636][   T33] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  241.364750][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  241.384471][ T8882] XFS (loop6): Mounting V5 Filesystem
[  241.425306][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  241.441749][   T26] audit: type=1800 audit(2000000062.899:159): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1487" name="file2" dev="loop4" ino=16 res=0 errno=0
[  241.464598][   T33] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1
[  241.543183][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  241.621874][ T8635] device veth0_macvtap entered promiscuous mode
[  241.634765][ T8882] XFS (loop6): Ending clean mount
[  241.656108][ T8635] device veth1_macvtap entered promiscuous mode
[  241.730941][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.799032][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.843911][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.881699][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.916272][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.936621][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.964078][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.996880][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.013199][ T5679] XFS (loop6): Unmounting Filesystem
[  242.015325][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.033310][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  242.043767][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  242.055126][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  242.063434][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  242.124686][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  242.167051][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.209039][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.240365][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.272653][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.293129][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.316342][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.368248][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.383708][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.391838][ T8937] loop4: detected capacity change from 0 to 256
[  242.411700][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.452823][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  242.493208][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  242.517378][ T8635] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.542800][ T8635] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.590697][ T8635] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.610075][ T8635] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.871331][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.934204][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.006034][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  243.031460][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.070887][ T8947] loop5: detected capacity change from 0 to 1024
[  243.089406][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.249001][ T8947] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  243.268002][ T8947] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.391396][ T8946] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.1502: lblock 0 mapped to illegal pblock 0 (length 1)
[  243.452995][ T8934] loop2: detected capacity change from 0 to 32768
[  243.467595][ T8946] EXT4-fs (loop5): Remounting filesystem read-only
[  243.499498][ T8947] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.1502: lblock 0 mapped to illegal pblock 0 (length 1)
[  243.559946][ T8934] XFS (loop2): Mounting V5 Filesystem
[  243.582581][ T8947] EXT4-fs (loop5): Remounting filesystem read-only
[  243.611717][ T8934] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  243.627593][ T8947] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: comm syz.5.1502: lblock 0 mapped to illegal pblock 0 (length 1)
[  243.668719][ T8934] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30
[  243.690479][ T8947] EXT4-fs (loop5): Remounting filesystem read-only
[  243.733355][ T8934] XFS (loop2): Ending clean mount
[  243.899448][ T8945] loop4: detected capacity change from 0 to 131072
[  243.915850][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  243.943724][ T4272] XFS (loop2): Unmounting Filesystem
[  243.945888][ T5031] EXT4-fs (loop5): unmounting filesystem.
[  243.976105][ T8949] netem: incorrect gi model size
[  243.981943][ T8949] netem: change failed
[  243.993857][ T8945] F2FS-fs (loop4): invalid crc value
[  244.127873][ T8945] F2FS-fs (loop4): Found nat_bits in checkpoint
[  244.231517][ T8945] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  244.315317][ T8945] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36
[  244.345607][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1506'.
[  245.166766][ T8987] loop2: detected capacity change from 0 to 8192
[  245.196941][ T8987] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  245.210094][ T8987] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  245.219426][ T8987] REISERFS (device loop2): using ordered data mode
[  245.224008][ T4861] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  245.226739][ T8987] reiserfs: using flush barriers
[  245.239957][ T8987] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  245.256583][ T8987] REISERFS (device loop2): checking transaction log (loop2)
[  245.265082][ T8987] REISERFS (device loop2): Using r5 hash to sort names
[  245.272282][ T8987] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  245.466120][ T4861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.508713][ T4861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.563556][ T4861] usb 7-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  245.603622][ T4861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.636335][ T4861] usb 7-1: config 0 descriptor??
[  245.883696][ T8993] loop6: detected capacity change from 0 to 256
[  245.915421][ T8993] exFAT-fs (loop6): failed to read boot sector
[  245.942044][ T8993] exFAT-fs (loop6): failed to recognize exfat type
[  246.254141][ T8985] loop7: detected capacity change from 0 to 40427
[  246.298712][ T4861] hid (null): nested delimiters
[  246.312440][ T8985] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  246.324029][ T4861] wacom 0003:056A:030C.0011: nested delimiters
[  246.330253][ T4861] wacom 0003:056A:030C.0011: item 0 1 2 10 parsing failed
[  246.365349][ T8985] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  246.407558][ T4861] wacom 0003:056A:030C.0011: parse failed
[  246.439139][ T4861] wacom: probe of 0003:056A:030C.0011 failed with error -22
[  246.457942][ T8995] loop4: detected capacity change from 0 to 32768
[  246.466035][ T8985] F2FS-fs (loop7): Found nat_bits in checkpoint
[  246.571863][ T4864] usb 7-1: USB disconnect, device number 10
[  246.612882][ T8995] XFS (loop4): Mounting V5 Filesystem
[  246.685115][ T8995] XFS (loop4): Ending clean mount
[  246.756575][ T9013] loop5: detected capacity change from 0 to 32768
[  246.786209][ T9013] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1519 (9013)
[  246.822607][ T8985] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  246.836310][ T8985] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  246.865316][ T9013] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  246.877654][ T9013] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  246.900917][ T9013] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  246.937863][ T9013] BTRFS info (device loop5): use zstd compression, level 3
[  246.963868][ T9013] BTRFS info (device loop5): using free space tree
[  246.988950][ T4282] XFS (loop4): Unmounting Filesystem
[  247.432645][ T9015] loop2: detected capacity change from 0 to 32768
[  247.584001][ T9013] BTRFS info (device loop5): enabling ssd optimizations
[  247.789664][ T9013] BTRFS warning (device loop5): this kernel does not support the compat:0 feature bit
[  248.026714][ T5031] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  248.323377][ T9071] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  248.848058][ T9057] loop4: detected capacity change from 0 to 32768
[  249.016584][ T9057] XFS (loop4): Mounting V5 Filesystem
[  249.127138][ T9099] loop5: detected capacity change from 0 to 2048
[  249.136832][ T9057] XFS (loop4): Ending clean mount
[  249.230541][ T9099] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  249.308862][ T9099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  249.335764][ T4282] XFS (loop4): Unmounting Filesystem
[  249.656824][ T9078] loop7: detected capacity change from 0 to 32768
[  249.855644][ T9078] XFS (loop7): Mounting V5 Filesystem
[  249.977668][ T9078] XFS (loop7): Ending clean mount
[  250.303702][ T8635] XFS (loop7): Unmounting Filesystem
[  250.602006][ T9139] loop2: detected capacity change from 0 to 256
[  250.638167][ T9114] loop5: detected capacity change from 0 to 32768
[  250.735143][ T9139] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d)
[  250.896178][ T9114] XFS (loop5): Mounting V5 Filesystem
[  251.135056][ T9114] XFS (loop5): Ending clean mount
[  251.168597][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'.
[  251.201754][ T9114] XFS (loop5): Quotacheck needed: Please wait.
[  251.230370][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'.
[  251.359187][ T9114] XFS (loop5): Quotacheck: Done.
[  251.485130][ T9133] loop4: detected capacity change from 0 to 40427
[  251.521463][ T9133] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  251.560106][ T5031] XFS (loop5): Unmounting Filesystem
[  251.563560][ T9133] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  251.631152][ T9133] F2FS-fs (loop4): invalid crc value
[  251.735394][ T9133] F2FS-fs (loop4): Found nat_bits in checkpoint
[  252.038626][ T9174] loop2: detected capacity change from 0 to 32768
[  252.057893][ T9174] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  252.075687][ T9174] JBD2: Ignoring recovery information on journal
[  252.115267][ T9174] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  252.154086][ T9133] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  252.161362][ T9133] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  252.180051][ T9174] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1
[  252.197094][ T9174] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  252.207032][ T9174] OCFS2: File system is now read-only.
[  252.212971][ T9174] (syz.2.1547,9174,0):ocfs2_search_chain:1761 ERROR: status = -30
[  252.220916][ T9174] (syz.2.1547,9174,0):ocfs2_search_chain:1871 ERROR: status = -30
[  252.228827][ T9174] (syz.2.1547,9174,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  252.237322][ T9174] (syz.2.1547,9174,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  252.245837][ T9174] (syz.2.1547,9174,0):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  252.254141][ T9174] (syz.2.1547,9174,0):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  252.262675][ T9174] (syz.2.1547,9174,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  252.271530][ T9174] (syz.2.1547,9174,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  252.280333][ T9174] (syz.2.1547,9174,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  252.289837][ T9174] (syz.2.1547,9174,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  252.298796][ T9174] (syz.2.1547,9174,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  252.307644][ T9174] (syz.2.1547,9174,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  252.316499][ T9174] (syz.2.1547,9174,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[  252.327309][ T9174] (syz.2.1547,9174,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[  252.336543][ T9174] (syz.2.1547,9174,0):ocfs2_symlink:1911 ERROR: status = -30
[  252.344209][ T9174] (syz.2.1547,9174,0):ocfs2_symlink:2065 ERROR: status = -30
[  252.467139][   T26] audit: type=1804 audit(2000000073.929:160): pid=9133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1537" name="/newroot/325/file0/bus" dev="loop4" ino=10 res=1 errno=0
[  252.488643][    C0] vkms_vblank_simulate: vblank timer overrun
[  252.536623][ T4272] ocfs2: Unmounting device (7,2) on (node local)
[  252.893975][ T9188] tap0: tun_chr_ioctl cmd 1074025677
[  252.921104][ T9188] tap0: linktype set to 772
[  252.926561][ T9190] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  252.998711][ T9190] bridge0: port 3(erspan0) entered disabled state
[  253.005432][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.014738][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.679289][ T9215] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  253.719668][ T9215] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  253.774988][ T9215] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  253.825912][ T9215] overlayfs: conflicting lowerdir path
[  253.858031][ T9218] loop2: detected capacity change from 0 to 8
[  253.910576][ T9218] SQUASHFS error: zlib decompression failed, data probably corrupt
[  253.951886][ T9218] SQUASHFS error: Failed to read block 0x9b: -5
[  253.998935][ T9218] SQUASHFS error: Unable to read metadata cache entry [99]
[  254.037361][ T9218] SQUASHFS error: Unable to read inode 0x127
[  254.052762][ T9223] loop4: detected capacity change from 0 to 1024
[  254.180597][ T9223] hfsplus: bad catalog entry type
[  254.712375][ T9240] loop5: detected capacity change from 0 to 512
[  254.796461][ T9240] EXT4-fs: Ignoring removed bh option
[  254.831656][ T9240] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  254.894659][ T9240] EXT4-fs (loop5): 1 truncate cleaned up
[  254.900368][ T9240] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  254.982881][ T9247] loop7: detected capacity change from 0 to 128
[  255.191701][ T5031] EXT4-fs (loop5): unmounting filesystem.
[  255.319479][ T9233] loop4: detected capacity change from 0 to 32768
[  255.373998][ T9233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1569 (9233)
[  255.939831][ T9251] loop2: detected capacity change from 0 to 131072
[  255.950629][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  255.957071][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  255.975150][ T9251] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  255.981896][ T9251] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  255.996838][ T9251] F2FS-fs (loop2): invalid crc value
[  256.061810][ T9251] F2FS-fs (loop2): Found nat_bits in checkpoint
[  256.068313][ T9233] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.109842][ T9251] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  256.116985][ T9251] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  256.164225][ T9233] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  256.165788][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1578'.
[  256.172899][ T9233] BTRFS info (device loop4): using free space tree
[  256.260036][ T9251] fscrypt (loop2, inode 8): Error -61 getting encryption context
[  256.564639][ T9233] BTRFS info (device loop4): enabling ssd optimizations
[  256.644067][ T9258] loop6: detected capacity change from 0 to 32768
[  256.737362][ T9258] XFS (loop6): Mounting V5 Filesystem
[  256.759116][ T9258] XFS (loop6): Ending clean mount
[  256.912076][ T5679] XFS (loop6): Unmounting Filesystem
[  256.937869][ T4282] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  257.146252][ T9311] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  257.861202][ T9329] loop5: detected capacity change from 0 to 512
[  257.925201][ T9331] program syz.7.1597 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  258.217649][ T9340] bridge_slave_0: default FDB implementation only supports local addresses
[  258.268729][ T9344] loop6: detected capacity change from 0 to 512
[  258.302898][ T9344] EXT4-fs: Ignoring removed orlov option
[  258.367624][ T9344] EXT4-fs (loop6): Test dummy encryption mode enabled
[  258.413633][ T9344] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  258.447979][ T9344] EXT4-fs (loop6): 1 truncate cleaned up
[  258.466365][ T9344] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  258.685852][ T5679] EXT4-fs (loop6): unmounting filesystem.
[  258.805951][ T9366] loop5: detected capacity change from 0 to 256
[  259.151935][ T9376] loop2: detected capacity change from 0 to 512
[  259.257968][ T9376] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  259.308454][ T9376] System zones: 0-2, 18-18, 34-35
[  259.334022][ T4937] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  259.342091][ T9376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  259.360612][ T9353] loop7: detected capacity change from 0 to 32768
[  259.369434][ T9376] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.537151][ T4937] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  259.554791][ T4937] usb 7-1: config 0 interface 0 has no altsetting 0
[  259.555363][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  259.562526][ T9383] hpfs: Bad magic ... probably not HPFS
[  259.587717][ T4937] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  259.603774][ T4937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  259.620249][ T4937] usb 7-1: Product: syz
[  259.627110][ T4937] usb 7-1: Manufacturer: syz
[  259.632268][ T4937] usb 7-1: SerialNumber: syz
[  259.645475][ T4937] usb 7-1: config 0 descriptor??
[  259.662038][ T4937] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  259.670086][ T4937] pctv452e: pctv452e_power_ctrl: 1
[  259.670086][ T4937] 
[  259.872804][ T4937] dvb-usb: bulk message failed: -22 (5/0)
[  259.897729][ T4937] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  259.916876][ T4937] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  259.943272][ T4284] Bluetooth: hci2: link tx timeout
[  259.948701][ T4284] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  259.958232][ T4284] Bluetooth: hci2: link tx timeout
[  259.963378][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  260.164738][ T4937] usb 7-1: USB disconnect, device number 11
[  260.553984][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'.
[  260.561630][   T26] audit: type=1326 audit(2000000000.119:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.7.1626" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff074d9ce59 code=0x0
[  260.677337][ T9392] loop4: detected capacity change from 0 to 40427
[  260.716985][ T9392] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  260.742964][ T9392] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  260.791021][ T9392] F2FS-fs (loop4): Found nat_bits in checkpoint
[  260.916010][ T9392] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  260.923111][ T9392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  261.068320][ T9424] netlink: 1060 bytes leftover after parsing attributes in process `syz.2.1631'.
[  261.117231][ T9424] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  261.743223][ T9437] loop7: detected capacity change from 0 to 4096
[  261.749839][ T4937] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  261.878897][   T26] audit: type=1800 audit(2000000001.439:162): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1639" name="file0" dev="loop7" ino=0 res=0 errno=0
[  261.885618][ T9448] loop4: detected capacity change from 0 to 2048
[  261.948974][ T4937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.952824][ T9448] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.974015][   T26] audit: type=1800 audit(2000000001.459:163): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1639" name="file0" dev="loop7" ino=0 res=0 errno=0
[  262.004887][ T4937] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  262.023886][ T4937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.063937][ T4937] usb 6-1: config 0 descriptor??
[  262.136343][ T4937] pwc: Askey VC010 type 2 USB webcam detected.
[  262.445309][ T9460] program syz.4.1646 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  262.489287][ T6635] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  262.489322][ T4937] pwc: recv_control_msg error -32 req 02 val 2b00
[  262.693909][ T6635] usb 3-1: Using ep0 maxpacket: 16
[  262.701070][ T6635] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  262.717469][ T4937] pwc: recv_control_msg error -71 req 02 val 2c00
[  262.719843][ T6635] usb 3-1: config 0 has no interface number 0
[  262.745895][ T6635] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  262.749268][ T4937] pwc: recv_control_msg error -71 req 04 val 1000
[  262.763986][ T4937] pwc: recv_control_msg error -71 req 04 val 1300
[  262.766209][ T6635] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  262.789437][ T4937] pwc: recv_control_msg error -71 req 04 val 1400
[  262.797212][ T4937] pwc: recv_control_msg error -71 req 02 val 2000
[  262.798446][ T6635] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  262.819591][ T4937] pwc: recv_control_msg error -71 req 02 val 2100
[  262.829178][ T6635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.838456][    T7] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  262.850053][ T4937] pwc: recv_control_msg error -71 req 04 val 1500
[  262.854095][ T6635] usb 3-1: Product: syz
[  262.869822][ T6635] usb 3-1: Manufacturer: syz
[  262.870299][ T4937] pwc: recv_control_msg error -71 req 02 val 2500
[  262.887850][ T6635] usb 3-1: SerialNumber: syz
[  262.895067][ T4937] pwc: recv_control_msg error -71 req 02 val 2400
[  262.908576][ T6635] usb 3-1: config 0 descriptor??
[  262.917455][ T9456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  262.920498][ T4937] pwc: recv_control_msg error -71 req 02 val 2600
[  262.931522][ T9456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  262.952937][ T4937] pwc: recv_control_msg error -71 req 02 val 2900
[  262.982408][ T4937] pwc: recv_control_msg error -71 req 02 val 2800
[  263.002800][ T4937] pwc: recv_control_msg error -71 req 04 val 1100
[  263.014006][ T4937] pwc: recv_control_msg error -71 req 04 val 1200
[  263.037742][    T7] usb 7-1: Using ep0 maxpacket: 16
[  263.043925][ T4937] pwc: Registered as video103.
[  263.049103][    T7] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  263.050359][ T4937] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16
[  263.077648][    T7] usb 7-1: config 0 has no interface number 0
[  263.093518][    T7] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  263.122480][ T4937] usb 6-1: USB disconnect, device number 12
[  263.136887][    T7] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  263.164497][ T9456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  263.167107][    T7] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  263.193959][    T7] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  263.203380][ T9454] comedi comedi0: reset error (fatal)
[  263.209266][    T7] usb 7-1: Product: syz
[  263.211253][ T9456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  263.213734][    T7] usb 7-1: SerialNumber: syz
[  263.261195][    T7] usb 7-1: config 0 descriptor??
[  263.282773][    T7] cm109 7-1:0.8: invalid payload size 0, expected 4
[  263.316067][    T7] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input17
[  263.418927][ T9464] loop4: detected capacity change from 0 to 40427
[  263.441676][ T9464] F2FS-fs (loop4): invalid crc value
[  263.451965][ T9464] F2FS-fs (loop4): Found nat_bits in checkpoint
[  263.463324][ T6635] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  263.553347][ T9464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  263.561925][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  263.571132][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  263.584000][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  263.593886][    T7] usb 7-1: USB disconnect, device number 12
[  263.604984][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  263.611988][    C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  263.625461][    T7] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  263.665092][ T6635] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 170
[  263.714098][ T4282] syz-executor: attempt to access beyond end of device
[  263.714098][ T4282] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.922629][ T9476] tipc: Started in network mode
[  263.944033][ T9476] tipc: Node identity , cluster identity 4711
[  263.964825][ T4937] usb 3-1: USB disconnect, device number 18
[  264.128956][ T9478] loop7: detected capacity change from 0 to 256
[  264.152664][ T9478] FAT-fs (loop7): Directory bread(block 64) failed
[  264.159637][ T9478] FAT-fs (loop7): Directory bread(block 65) failed
[  264.179838][ T9478] FAT-fs (loop7): Directory bread(block 66) failed
[  264.224793][ T9478] FAT-fs (loop7): Directory bread(block 67) failed
[  264.239084][ T9478] FAT-fs (loop7): Directory bread(block 68) failed
[  264.271709][ T9478] FAT-fs (loop7): Directory bread(block 69) failed
[  264.292760][ T9478] FAT-fs (loop7): Directory bread(block 70) failed
[  264.309394][ T9478] FAT-fs (loop7): Directory bread(block 71) failed
[  264.316785][ T9478] FAT-fs (loop7): Directory bread(block 72) failed
[  264.336647][ T9478] FAT-fs (loop7): Directory bread(block 73) failed
[  265.024962][ T9500] loop4: detected capacity change from 0 to 4096
[  265.058914][ T9500] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  265.989146][ T9510] loop7: detected capacity change from 0 to 40427
[  266.007915][ T9526] loop2: detected capacity change from 0 to 256
[  266.034835][ T9510] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  266.052529][ T9526] exfat: Deprecated parameter 'namecase'
[  266.083116][ T9510] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  266.116998][ T9526] exfat: Deprecated parameter 'namecase'
[  266.122180][ T9510] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7
[  266.161192][ T9526] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  266.177683][ T9510] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x3ffff
[  266.209379][ T9510] F2FS-fs (loop7): invalid crc value
[  266.239313][ T9510] F2FS-fs (loop7): Found nat_bits in checkpoint
[  266.504202][ T9510] F2FS-fs (loop7): Start checkpoint disabled!
[  266.564990][ T9510] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  266.572095][ T9510] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  266.664959][ T9510] syz.7.1666: attempt to access beyond end of device
[  266.664959][ T9510] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  266.711896][ T9510] syz.7.1666: attempt to access beyond end of device
[  266.711896][ T9510] loop7: rw=2049, sector=45104, nr_sectors = 40 limit=40427
[  266.787720][ T9510] syz.7.1666: attempt to access beyond end of device
[  266.787720][ T9510] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  267.571729][   T33] kworker/u4:2: attempt to access beyond end of device
[  267.571729][   T33] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  267.573395][ T9566] loop2: detected capacity change from 0 to 2048
[  267.678017][ T9569] loop4: detected capacity change from 0 to 256
[  267.797839][ T9569] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  267.849180][ T9566] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  267.904935][ T9566] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.013371][ T9566] fs-verity (loop2, inode 13): Unknown hash algorithm number: 3
[  268.076396][ T9562] loop5: detected capacity change from 0 to 40427
[  268.184929][ T9562] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff
[  268.206713][ T9562] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0xe4
[  268.230219][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  268.254262][ T9562] F2FS-fs (loop5): invalid crc value
[  268.270942][ T9562] F2FS-fs (loop5): Found nat_bits in checkpoint
[  268.353012][ T9562] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  268.504728][ T9562] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  268.602338][ T9562] F2FS-fs (loop5) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10
[  268.704348][ T9562] F2FS-fs (loop5) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x123/0xbd0
[  268.888942][ T5031] syz-executor: attempt to access beyond end of device
[  268.888942][ T5031] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  269.168121][ T9615] loop4: detected capacity change from 0 to 128
[  269.311235][ T9594] [U] 
[  269.868959][ T9644] loop5: detected capacity change from 0 to 512
[  269.923959][ T9644] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  270.023753][ T9644] EXT4-fs (loop5): 1 orphan inode deleted
[  270.040932][ T9644] EXT4-fs (loop5): 1 truncate cleaned up
[  270.094179][ T9644] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  270.134940][ T9659] loop7: detected capacity change from 0 to 128
[  270.185465][ T9659] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  270.225447][   T26] audit: type=1800 audit(2000000009.789:164): pid=9659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1713" name="bus" dev="loop7" ino=1048674 res=0 errno=0
[  270.246142][    C1] vkms_vblank_simulate: vblank timer overrun
[  270.279478][ T5031] EXT4-fs (loop5): unmounting filesystem.
[  270.332775][ T9659] syz.7.1713: attempt to access beyond end of device
[  270.332775][ T9659] loop7: rw=0, sector=61, nr_sectors = 95 limit=128
[  270.353881][ T4937] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  270.528852][   T11] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  270.578998][ T4937] usb 5-1: Using ep0 maxpacket: 32
[  270.591374][ T4937] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  270.631756][ T4937] usb 5-1: config 0 has no interface number 0
[  270.649211][ T4937] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  270.699123][ T4937] usb 5-1: config 0 interface 85 has no altsetting 0
[  270.713435][ T9672] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1719'.
[  270.735822][ T4937] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  270.780945][ T4937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.808227][ T4937] usb 5-1: Product: syz
[  270.812504][ T4937] usb 5-1: Manufacturer: syz
[  270.853594][ T4937] usb 5-1: SerialNumber: syz
[  270.874753][ T4937] usb 5-1: config 0 descriptor??
[  270.977647][ T9682] loop7: detected capacity change from 0 to 64
[  271.132892][ T9682] hfs: request for non-existent node 237 in B*Tree
[  271.197437][ T9682] hfs: request for non-existent node 237 in B*Tree
[  271.239371][ T9687] loop5: detected capacity change from 0 to 512
[  271.260174][ T9677] hfs: request for non-existent node 237 in B*Tree
[  271.273929][ T9677] hfs: request for non-existent node 237 in B*Tree
[  271.281657][ T9687] EXT4-fs: Ignoring removed nobh option
[  271.372736][ T9687] fscrypt (loop5, inode 2): Error -61 getting encryption context
[  271.390624][ T9687] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61
[  271.404372][ T9687] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.1725: inode has both inline data and extents flags
[  271.431301][ T4393] hfs: request for non-existent node 237 in B*Tree
[  271.453879][ T4393] hfs: request for non-existent node 237 in B*Tree
[  271.464584][ T9687] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1725: couldn't read orphan inode 13 (err -117)
[  271.489801][ T9687] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  271.499848][ T4937] appletouch 5-1:0.85: Geyser mode initialized.
[  271.509937][ T4937] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input18
[  271.760686][ T5031] EXT4-fs (loop5): unmounting filesystem.
[  271.769447][   T41] usb 5-1: USB disconnect, device number 12
[  271.878101][   T41] appletouch 5-1:0.85: input: appletouch disconnected
[  272.381157][ T9718] program syz.7.1733 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.539186][ T9722] loop4: detected capacity change from 0 to 256
[  272.599708][ T9722] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  272.654745][ T9730] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  272.694469][ T9730] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  272.736604][ T9730] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  272.769925][ T6635] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  272.799530][ T9733] loop6: detected capacity change from 0 to 1024
[  272.862399][   T26] audit: type=1800 audit(2000000012.419:165): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1739" name="file2" dev="loop6" ino=20 res=0 errno=0
[  272.864208][ T4282] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  272.887218][ T9733] syz.6.1739: attempt to access beyond end of device
[  272.887218][ T9733] loop6: rw=34817, sector=5778, nr_sectors = 2 limit=1024
[  272.894027][ T4774] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  272.965858][ T6635] usb 6-1: config 0 has no interfaces?
[  272.985622][ T6635] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  273.008675][ T6635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.035797][ T6635] usb 6-1: Product: syz
[  273.040038][ T6635] usb 6-1: Manufacturer: syz
[  273.074899][ T6635] usb 6-1: SerialNumber: syz
[  273.092806][ T6635] usb 6-1: config 0 descriptor??
[  273.124093][ T4774] usb 3-1: Using ep0 maxpacket: 16
[  273.145462][ T4774] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  273.171693][ T4774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.187723][ T4774] usb 3-1: Product: syz
[  273.198831][ T4774] usb 3-1: Manufacturer: syz
[  273.203480][ T4774] usb 3-1: SerialNumber: syz
[  273.315470][ T4937] usb 6-1: USB disconnect, device number 13
[  273.493173][ T4774] usb 3-1: USB disconnect, device number 19
[  273.808609][ T9763] loop6: detected capacity change from 0 to 256
[  273.844042][ T9763] exfat: Deprecated parameter 'utf8'
[  273.876585][ T9763] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d)
[  274.512075][ T9789] loop6: detected capacity change from 0 to 1024
[  274.560573][ T9789] EXT4-fs: inline encryption not supported
[  274.638846][ T9789] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  274.667518][ T9789] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.881474][ T9805] loop4: detected capacity change from 0 to 512
[  274.904656][ T5679] EXT4-fs (loop6): unmounting filesystem.
[  274.981233][ T9805] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1761: inode has both inline data and extents flags
[  275.100821][ T9812] netlink: 'syz.7.1764': attribute type 11 has an invalid length.
[  275.108985][ T9812] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1764'.
[  275.126846][ T9805] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1761: couldn't read orphan inode 15 (err -117)
[  275.155906][ T9812] netlink: 'syz.7.1764': attribute type 11 has an invalid length.
[  275.187450][ T9805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  275.196811][ T9812] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1764'.
[  275.248710][ T9811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  275.412761][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  275.693982][ T4937] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  275.846899][ T9834] loop4: detected capacity change from 0 to 1024
[  275.867275][ T9836] loop6: detected capacity change from 0 to 1024
[  275.893890][ T4937] usb 6-1: Using ep0 maxpacket: 8
[  275.910594][ T9836] EXT4-fs: Ignoring removed oldalloc option
[  275.914684][ T4937] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[  275.963861][ T4937] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  276.009400][ T4937] usb 6-1: config 135 has no interface number 0
[  276.031666][ T9836] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  276.033934][ T4937] usb 6-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  276.061472][ T4937] usb 6-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  276.075345][ T4937] usb 6-1: config 135 interface 230 has no altsetting 0
[  276.084759][ T4937] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  276.100249][ T4937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.108545][ T4937] usb 6-1: Product: syz
[  276.112772][ T4937] usb 6-1: Manufacturer: syz
[  276.117678][ T4937] usb 6-1: SerialNumber: syz
[  276.140493][ T4937] uvcvideo 6-1:135.230: Found Unit with invalid ID 0
[  276.285786][ T5679] EXT4-fs (loop6): unmounting filesystem.
[  276.339105][ T4937] usb 6-1: Found UVC 0.00 device syz (18ec:3288)
[  276.353862][ T4937] usb 6-1: No valid video chain found.
[  276.482808][ T9857] loop6: detected capacity change from 0 to 2048
[  276.583085][ T9860] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.602696][ T6635] usb 6-1: USB disconnect, device number 14
[  276.754278][ T9860] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  276.793946][ T9860] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  276.804446][ T9860] Remounting filesystem read-only
[  276.837939][ T4780] hid-generic 0005:0B57:1010.0012: item fetching failed at offset 0/1
[  276.849081][ T5679] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  276.859018][ T4780] hid-generic: probe of 0005:0B57:1010.0012 failed with error -22
[  277.182723][ T9877] loop6: detected capacity change from 0 to 4096
[  277.224533][ T9884] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1788'.
[  277.268878][ T9877] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  277.903724][ T5679] EXT4-fs (loop6): unmounting filesystem.
[  278.057935][ T9912] loop5: detected capacity change from 0 to 1764
[  278.153943][ T4780] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  278.355454][ T4780] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  278.403957][ T4780] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  278.433951][ T4780] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  278.444088][ T4780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.486089][ T9910] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  278.516331][ T9929] loop6: detected capacity change from 0 to 8
[  278.545804][ T9929] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  278.575075][ T4505] udevd[4505]: incorrect cramfs checksum on /dev/loop6
[  278.663954][ T4937] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  278.882365][ T4937] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  278.901572][ T9934] loop2: detected capacity change from 0 to 4096
[  278.917425][ T4937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.962073][ T4937] usb 6-1: config 0 descriptor??
[  278.988128][ T4774] usb 5-1: USB disconnect, device number 13
[  279.001749][ T4937] cp210x 6-1:0.0: cp210x converter detected
[  279.006580][ T9934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  279.027800][ T9941] cgroup: fork rejected by pids controller in /syz6
[  279.129555][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  279.402594][ T4937] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  279.435633][ T4937] usb 6-1: cp210x converter now attached to ttyUSB0
[  279.623922][ T4937] usb 6-1: USB disconnect, device number 15
[  279.648167][ T4937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  279.692095][ T4937] cp210x 6-1:0.0: device disconnected
[  279.863329][ T9936] loop7: detected capacity change from 0 to 32768
[  279.967442][ T9936] ERROR: (device loop7): dbAdjCtl: the maximum free buddy is not the old root
[  279.967442][ T9936] 
[  280.027499][ T9936] ERROR: (device loop7): remounting filesystem as read-only
[  280.274986][ T4327] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.304032][   T41] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  280.438771][  T106] BUG: Bad page state in process jfsCommit  pfn:28f56
[  280.463994][  T106] page:ffffea0000a3d580 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x28f56
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  280.501275][  T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  280.513272][   T41] usb 3-1: Using ep0 maxpacket: 32
[  280.523490][ T4327] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.526526][   T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.547165][  T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000
[  280.567978][   T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.583955][  T106] raw: 000000000000001c ffff88802f1324d8 00000000ffffffff 0000000000000000
[  280.592768][   T41] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  280.622789][  T106] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  280.652071][   T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.713880][  T106] page_owner tracks the page as allocated
[  280.716808][   T41] usb 3-1: config 0 descriptor??
[  280.720341][  T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9936, tgid 9935 (syz.7.1807), ts 279926651021, free_ts 279924734703
[  280.774035][  T106]  post_alloc_hook+0x173/0x1a0
[  280.778908][  T106]  get_page_from_freelist+0x1a1e/0x1ab0
[  280.793244][  T106]  __alloc_pages+0x1ec/0x4f0
[  280.814122][  T106]  folio_alloc+0x1c/0x60
[  280.818433][  T106]  filemap_alloc_folio+0xdb/0x480
[  280.823472][  T106]  do_read_cache_folio+0x1bb/0x760
[  280.860624][  T106]  do_read_cache_page+0x32/0x220
[  280.866972][  T106]  __get_metapage+0x316/0xfa0
[  280.871753][  T106]  diRead+0x6f7/0xbb0
[  280.880697][  T106]  jfs_iget+0x89/0x3f0
[  280.887205][  T106]  jfs_fill_super+0x70e/0xad0
[  280.891956][  T106]  mount_bdev+0x287/0x3c0
[  280.901494][  T106]  legacy_get_tree+0xe6/0x180
[  280.906427][  T106]  vfs_get_tree+0x88/0x270
[  280.910896][  T106]  do_new_mount+0x24a/0xa40
[  280.915445][  T106]  __se_sys_mount+0x2e3/0x3d0
[  280.920132][  T106] page last free stack trace:
[  280.924879][  T106]  free_unref_page_prepare+0x8b4/0x9a0
[  280.930472][  T106]  free_unref_page+0x2e/0x3f0
[  280.935301][  T106]  __vunmap+0x856/0xa00
[  280.939489][  T106]  vb2_vmalloc_put+0x64/0xa0
[  280.944201][  T106]  __vb2_buf_mem_free+0x113/0x2c0
[  280.949426][  T106]  __vb2_queue_free+0x447/0xd80
[  280.955018][  T106]  vb2_core_reqbufs+0x682/0x1110
[  280.960297][  T106]  __vb2_cleanup_fileio+0x109/0x1f0
[  280.965605][  T106]  vb2_core_queue_release+0x13/0x80
[  280.970846][  T106]  vb2_fop_release+0x160/0x1e0
[  280.975753][  T106]  v4l2_release+0x1f9/0x390
[  280.980308][  T106]  __fput+0x22c/0x920
[  280.984397][  T106]  task_work_run+0x1d0/0x260
[  280.989034][  T106]  exit_to_user_mode_loop+0xe6/0x110
[  280.994730][  T106]  exit_to_user_mode_prepare+0xee/0x180
[  281.000302][  T106]  syscall_exit_to_user_mode+0x16/0x40
[  281.006252][  T106] Modules linked in:
[  281.010233][  T106] CPU: 1 PID: 106 Comm: jfsCommit Not tainted syzkaller #0
[  281.017456][  T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  281.027539][  T106] Call Trace:
[  281.030833][  T106]  <TASK>
[  281.033771][  T106]  dump_stack_lvl+0x188/0x24e
[  281.038464][  T106]  ? show_regs_print_info+0x12/0x12
[  281.043695][  T106]  ? swiotlb_print_info+0x60/0x60
[  281.048744][  T106]  bad_page+0x14b/0x170
[  281.052912][  T106]  free_unref_page_prepare+0x42a/0x9a0
[  281.058389][  T106]  free_unref_page+0x2e/0x3f0
[  281.063082][  T106]  ? __folio_put+0xf1/0x210
[  281.067608][  T106]  txUnlock+0x27e/0xcb0
[  281.071785][  T106]  ? lockdep_hardirqs_on+0x94/0x140
[  281.077008][  T106]  jfs_lazycommit+0x56a/0xa70
[  281.081709][  T106]  ? txFreelock+0x5a0/0x5a0
[  281.086223][  T106]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  281.092124][  T106]  ? do_task_dead+0xd0/0xd0
[  281.096647][  T106]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  281.102558][  T106]  ? __kthread_parkme+0x162/0x1c0
[  281.107704][  T106]  kthread+0x29d/0x330
[  281.111797][  T106]  ? txFreelock+0x5a0/0x5a0
[  281.116317][  T106]  ? kthread_blkcg+0xd0/0xd0
[  281.120909][  T106]  ret_from_fork+0x1f/0x30
[  281.125334][  T106]  </TASK>
[  281.153885][  T106] Disabling lock debugging due to kernel taint
[  281.160120][  T106] page:ffffea0000a3d580 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x28f56
[  281.193837][  T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  281.216080][  T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000
[  281.236409][  T106] raw: 000000000000001c ffff88802f1324d8 00000000ffffffff 0000000000000000
[  281.255492][  T106] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  281.283838][  T106] page_owner tracks the page as allocated
[  281.292031][  T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9936, tgid 9935 (syz.7.1807), ts 279926651021, free_ts 279924734703
[  281.333909][  T106]  post_alloc_hook+0x173/0x1a0
[  281.338792][  T106]  get_page_from_freelist+0x1a1e/0x1ab0
[  281.344724][  T106]  __alloc_pages+0x1ec/0x4f0
[  281.349354][  T106]  folio_alloc+0x1c/0x60
[  281.353598][  T106]  filemap_alloc_folio+0xdb/0x480
[  281.358683][  T106]  do_read_cache_folio+0x1bb/0x760
[  281.363871][  T106]  do_read_cache_page+0x32/0x220
[  281.368978][  T106]  __get_metapage+0x316/0xfa0
[  281.373683][  T106]  diRead+0x6f7/0xbb0
[  281.377744][  T106]  jfs_iget+0x89/0x3f0
[  281.381832][  T106]  jfs_fill_super+0x70e/0xad0
[  281.386577][  T106]  mount_bdev+0x287/0x3c0
[  281.390926][  T106]  legacy_get_tree+0xe6/0x180
[  281.395670][  T106]  vfs_get_tree+0x88/0x270
[  281.400127][  T106]  do_new_mount+0x24a/0xa40
[  281.404663][  T106]  __se_sys_mount+0x2e3/0x3d0
[  281.409355][  T106] page last free stack trace:
[  281.414056][  T106]  free_unref_page_prepare+0x8b4/0x9a0
[  281.419570][  T106]  free_unref_page+0x2e/0x3f0
[  281.424314][  T106]  __vunmap+0x856/0xa00
[  281.428503][  T106]  vb2_vmalloc_put+0x64/0xa0
[  281.433108][  T106]  __vb2_buf_mem_free+0x113/0x2c0
[  281.438176][  T106]  __vb2_queue_free+0x447/0xd80
[  281.443186][  T106]  vb2_core_reqbufs+0x682/0x1110
[  281.448181][  T106]  __vb2_cleanup_fileio+0x109/0x1f0
[  281.453403][  T106]  vb2_core_queue_release+0x13/0x80
[  281.458746][  T106]  vb2_fop_release+0x160/0x1e0
[  281.463537][  T106]  v4l2_release+0x1f9/0x390
[  281.468121][  T106]  __fput+0x22c/0x920
[  281.472265][  T106]  task_work_run+0x1d0/0x260
[  281.476928][  T106]  exit_to_user_mode_loop+0xe6/0x110
[  281.482236][  T106]  exit_to_user_mode_prepare+0xee/0x180
[  281.487838][  T106]  syscall_exit_to_user_mode+0x16/0x40
[  281.493670][  T106] ------------[ cut here ]------------
[  281.499450][  T106] kernel BUG at include/linux/mm.h:1146!
[  281.506518][ T4327] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.508059][  T106] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  281.522855][  T106] CPU: 0 PID: 106 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  281.531528][  T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  281.541585][  T106] RIP: 0010:put_metapage+0x24f/0x340
[  281.546880][  T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 80 3a c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  281.566503][  T106] RSP: 0018:ffffc9000253fce0 EFLAGS: 00010246
[  281.572581][  T106] RAX: 633b4dfc30726f00 RBX: ffff88802f1324d8 RCX: 633b4dfc30726f00
[  281.580566][  T106] RDX: 0000000000000000 RSI: ffffffff8adf1b40 RDI: ffffffff8adf1b00
[  281.588538][  T106] RBP: 000000000000007f R08: ffffffff8e200c2f R09: 1ffffffff1c40185
[  281.596523][  T106] R10: dffffc0000000000 R11: fffffbfff1c40186 R12: ffff88802f132500
[  281.604622][  T106] R13: ffffea0000a3d5b4 R14: 1ffff11005e264a0 R15: 1ffff11005e264ad
[  281.612606][  T106] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  281.621534][  T106] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  281.628129][  T106] CR2: 00007f3decf0c000 CR3: 000000002eb5a000 CR4: 00000000003506f0
[  281.636102][  T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  281.644074][  T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  281.652046][  T106] Call Trace:
[  281.655340][  T106]  <TASK>
[  281.658369][  T106]  txUnlock+0x427/0xcb0
[  281.662534][  T106]  jfs_lazycommit+0x56a/0xa70
[  281.667207][  T106]  ? txFreelock+0x5a0/0x5a0
[  281.671708][  T106]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  281.677603][  T106]  ? do_task_dead+0xd0/0xd0
[  281.682109][  T106]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  281.688004][  T106]  ? __kthread_parkme+0x162/0x1c0
[  281.693020][  T106]  kthread+0x29d/0x330
[  281.697102][  T106]  ? txFreelock+0x5a0/0x5a0
[  281.701606][  T106]  ? kthread_blkcg+0xd0/0xd0
[  281.706185][  T106]  ret_from_fork+0x1f/0x30
[  281.710614][  T106]  </TASK>
[  281.713628][  T106] Modules linked in:
[  281.718359][  T106] ---[ end trace 0000000000000000 ]---
[  281.723951][  T106] RIP: 0010:put_metapage+0x24f/0x340
[  281.729281][  T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 80 3a c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  281.749176][  T106] RSP: 0018:ffffc9000253fce0 EFLAGS: 00010246
[  281.755345][  T106] RAX: 633b4dfc30726f00 RBX: ffff88802f1324d8 RCX: 633b4dfc30726f00
[  281.763338][  T106] RDX: 0000000000000000 RSI: ffffffff8adf1b40 RDI: ffffffff8adf1b00
[  281.771376][  T106] RBP: 000000000000007f R08: ffffffff8e200c2f R09: 1ffffffff1c40185
[  281.779819][  T106] R10: dffffc0000000000 R11: fffffbfff1c40186 R12: ffff88802f132500
[  281.787895][  T106] R13: ffffea0000a3d5b4 R14: 1ffff11005e264a0 R15: 1ffff11005e264ad
[  281.795949][  T106] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  281.804961][  T106] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  281.811575][  T106] CR2: 00007f3decf0c000 CR3: 000000002eb5a000 CR4: 00000000003506f0
[  281.819626][  T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  281.828310][  T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  281.836458][  T106] Kernel panic - not syncing: Fatal exception
[  281.854482][  T106] Kernel Offset: disabled
[  281.858832][  T106] Rebooting in 86400 seconds..