last executing test programs:

5m12.837113624s ago: executing program 0 (id=987):
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)='S', 0x1}], 0x1)

5m12.614891049s ago: executing program 0 (id=988):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

5m10.837032444s ago: executing program 0 (id=997):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000a00)={[{@grpquota}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0)

5m10.117301893s ago: executing program 0 (id=1002):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x198, &(0x7f00000006c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1008020, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

5m9.247094435s ago: executing program 0 (id=1009):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000f4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000f00c00024000000000000000010900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000000c0002400000000000000001"], 0x8c}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0)

5m8.704174948s ago: executing program 0 (id=1014):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/swiotlb/io_tlb_used_hiwater\x00', 0x0, 0x0)

5m7.83746854s ago: executing program 32 (id=1014):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/swiotlb/io_tlb_used_hiwater\x00', 0x0, 0x0)

3m55.218859003s ago: executing program 4 (id=1549):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r0, &(0x7f0000000080)=""/58, 0x3a)
getdents(r0, 0xfffffffffffffffd, 0xbb)

3m55.026164338s ago: executing program 4 (id=1551):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x20048843)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x2c}, 0x10)

3m54.896458031s ago: executing program 4 (id=1552):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m54.51745147s ago: executing program 4 (id=1555):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4008, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]})

3m54.018953393s ago: executing program 4 (id=1557):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x800455c9, 0x100000002)

3m53.212121023s ago: executing program 4 (id=1560):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5)
ioctl$TCSETS(r0, 0x8910, 0x0)

3m52.56022474s ago: executing program 33 (id=1560):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5)
ioctl$TCSETS(r0, 0x8910, 0x0)

3m19.869978065s ago: executing program 3 (id=1823):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0)
recvmmsg$unix(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2, 0x0)

3m19.728007909s ago: executing program 3 (id=1826):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf6100000000000007010000043f000085000000c2000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m19.456352736s ago: executing program 3 (id=1828):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)

3m19.171190053s ago: executing program 3 (id=1831):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f00000003c0)={[{@gid}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {@errors_continue}, {@namecase}]}, 0xfe, 0x153d, &(0x7f00000028c0)="$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")
mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)

3m18.425815761s ago: executing program 3 (id=1838):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
setreuid(0xffffffffffffffff, 0xee01)
cachestat(r0, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0)

3m16.91523914s ago: executing program 3 (id=1850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newneigh={0x2c, 0x1c, 0x401, 0x0, 0x1, {0x2, 0x0, 0x0, 0x1, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=@newneigh={0x24, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0)

3m16.193955168s ago: executing program 34 (id=1850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newneigh={0x2c, 0x1c, 0x401, 0x0, 0x1, {0x2, 0x0, 0x0, 0x1, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=@newneigh={0x24, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0)

1m43.79700191s ago: executing program 1 (id=2683):
r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r1, &(0x7f0000000d00)='nf   ::7.0.0.1 2\\00000\\\\0 l\\calhost\n', 0x24)

1m43.641811344s ago: executing program 1 (id=2685):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x1033, r0, 0x0)

1m43.38226312s ago: executing program 1 (id=2687):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0x1f}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000ec0000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051413030076657468315f6d6163767461700000000900010073797a310000000058000000050a03000000000000000000010020000900030073797a31000000000900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050b0007"], 0xf4}}, 0x0)

1m43.134194907s ago: executing program 1 (id=2691):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]})

1m42.550316852s ago: executing program 1 (id=2698):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r1, 0x1, 0x70bd2c, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)

1m40.543492572s ago: executing program 1 (id=2704):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0x7fffffff}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

1m39.960362477s ago: executing program 35 (id=2704):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0x7fffffff}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

5.491678202s ago: executing program 7 (id=3626):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='name ~ \"*\"', 0xa)

5.143386711s ago: executing program 7 (id=3633):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.882209207s ago: executing program 7 (id=3636):
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e05003e20"], 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c0001800600060008"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c9008fb6c181baab6c5aa900d525c410d896d76285c2a697665951db406b93aaaea7849124ecd63d6b08000000000000000e4269a77fe09f35f143e9ec5be2ba262201fe8868d6c0c806605a82935e06d05f7f959204e29bd7cfd28c86caf514ac2e9b815456749d7b600d3fae8de39ca9ca34c58a79e061c0520017b5ea0f39a46612bc8d51ed4576f09357f86200000000"], 0x93)

4.067539527s ago: executing program 7 (id=3651):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x48}}, 0x400488e4)

3.882718792s ago: executing program 7 (id=3654):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)

2.665259033s ago: executing program 2 (id=3662):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300010025bd70000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200004801c000a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040)

2.100985647s ago: executing program 5 (id=3665):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3})

2.093976877s ago: executing program 2 (id=3666):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msgget(0x3, 0x710)

1.696112747s ago: executing program 7 (id=3667):
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0481c20001000000010902200001010080320904000002030000000705810310000a070502031000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="404f040000004f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.695798077s ago: executing program 5 (id=3668):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
renameat2(r0, &(0x7f0000000080)='./bus\x00', r0, &(0x7f0000000400)='./file0\x00', 0x4)

1.498757412s ago: executing program 6 (id=3669):
setns(0xc9, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0107000000000000000067000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="0800c300741300000800c4"], 0x34}}, 0x0)

1.20987438s ago: executing program 6 (id=3670):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000480)=0x2)

903.973598ms ago: executing program 6 (id=3671):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070003004001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

793.53514ms ago: executing program 5 (id=3672):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd2c, 0xfffffffd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x40)

679.492233ms ago: executing program 6 (id=3673):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x34, r1, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800)

647.704714ms ago: executing program 2 (id=3674):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1}, 0x20)

508.084127ms ago: executing program 5 (id=3675):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='+bond0', 0x6)

496.071428ms ago: executing program 6 (id=3676):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff)
open_by_handle_at(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\b'], 0x80)

492.712738ms ago: executing program 2 (id=3677):
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000)

332.781481ms ago: executing program 2 (id=3678):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000b5900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

212.386775ms ago: executing program 5 (id=3679):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x3200014, &(0x7f0000000280)=ANY=[], 0x1, 0x61f, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000500)=""/45, 0x2d)
getdents64(r0, 0x0, 0xff75)

104.094447ms ago: executing program 6 (id=3680):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/140)

103.903787ms ago: executing program 2 (id=3681):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semctl$GETZCNT(r0, 0x2, 0xf, 0x0)

0s ago: executing program 5 (id=3682):
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

kernel console output (not intermixed with test programs):

294967295 subj=unconfined pid=13039 comm="syz.2.2569" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  401.398069][T13062] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.2573: Attempting to read directory block (0) that is past i_size (16)
[  401.564858][T13062] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  401.583189][T13062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.671323][T13062] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  401.914307][T13081] loop6: detected capacity change from 0 to 64
[  401.946701][T10116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.107412][T13085] netlink: 'syz.5.2579': attribute type 1 has an invalid length.
[  402.116969][T13085] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2579'.
[  402.956299][T13112] loop5: detected capacity change from 0 to 2048
[  403.037038][T13117] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  403.530019][T13135] Bluetooth: hci0: unsupported parameter 5134
[  403.545213][T13135] Bluetooth: hci0: unsupported parameter 8192
[  403.551497][T13135] Bluetooth: hci0: unsupported parameter 5134
[  403.567103][T13135] Bluetooth: hci0: unsupported parameter 8192
[  403.729592][T13145] loop5: detected capacity change from 0 to 128
[  403.756633][T13145] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  403.784659][T13145] hpfs: filesystem error: improperly stopped
[  403.792309][T13145] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  403.821495][T13145] hpfs: You really don't want any checks? You are crazy...
[  403.842266][T13145] hpfs: Code page index out of array
[  403.860015][T13145] hpfs: code page support is disabled
[  403.881026][T13145] hpfs: hpfs_map_4sectors(): unaligned read
[  403.903053][T13145] hpfs: hpfs_map_4sectors(): unaligned read
[  403.924319][T13145] hpfs: filesystem error: unable to find root dir
[  404.310276][T13141] loop2: detected capacity change from 0 to 32768
[  404.353584][T13141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2607 (13141)
[  404.402310][T13141] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  404.432269][T13141] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  404.458508][T13141] BTRFS info (device loop2): setting nodatasum
[  404.482363][T13141] BTRFS info (device loop2): enabling auto defrag
[  404.506408][T13141] BTRFS info (device loop2): disabling tree log
[  404.514203][T13141] BTRFS info (device loop2): using free space tree
[  404.611828][T13141] BTRFS info (device loop2): enabling ssd optimizations
[  404.645981][T13141] BTRFS info (device loop2): auto enabling async discard
[  404.826712][ T5776] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  405.068257][ T5791] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5791)
[  405.248185][T13191] loop5: detected capacity change from 0 to 4096
[  405.270772][T13191] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  405.287513][ T5842] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  405.415921][T13191] ntfs3: loop5: ino=19, mi_enum_attr
[  405.432240][T13191] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  405.465724][T13191] ntfs3: loop5: ino=1a, mi_enum_attr
[  405.486400][T13191] ntfs3: loop5: ino=1a, mi_enum_attr
[  405.497053][ T5842] usb 2-1: Using ep0 maxpacket: 32
[  405.518504][T13191] ntfs3: loop5: Failed to initialize $Extend/$Reparse.
[  405.526715][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.559592][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  405.597626][ T5842] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00
[  405.628816][T13191] ntfs3: loop5: ino=1e, mi_enum_attr
[  405.635289][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.664052][ T5842] usb 2-1: config 0 descriptor??
[  406.142967][ T5842] wacom 0003:056A:00FA.0022: hidraw0: USB HID v0.02 Device [HID 056a:00fa] on usb-dummy_hcd.1-1/input0
[  406.157172][T13201] loop2: detected capacity change from 0 to 512
[  406.217896][T13201] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  406.266010][T13201] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.2628: bad orphan inode 131083
[  406.300663][T13201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  406.391960][ T5843] usb 2-1: USB disconnect, device number 20
[  406.637310][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.597670][T13218] loop2: detected capacity change from 0 to 32768
[  408.245782][T13251] loop2: detected capacity change from 0 to 512
[  408.268662][T13232] loop5: detected capacity change from 0 to 32768
[  408.290148][T13251] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.2650: bg 0: block 5: invalid block bitmap
[  408.336476][T13232] ERROR: (device loop5): dbAlloc: the hint is outside the map
[  408.336476][T13232] 
[  408.365585][T13232] read_mapping_page failed!
[  408.370314][T13232] ERROR: (device loop5): txCommit: 
[  408.370314][T13232] 
[  408.398899][T13251] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  408.458412][T13251] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2650: invalid indirect mapped block 3 (level 2)
[  408.542079][T13251] EXT4-fs (loop2): 1 orphan inode deleted
[  408.574311][T13251] EXT4-fs (loop2): 1 truncate cleaned up
[  408.587612][T13251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.649487][   T28] audit: type=1800 audit(1791483954.186:210): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2650" name="file1" dev="loop2" ino=15 res=0 errno=0
[  408.711044][T13259] loop6: detected capacity change from 0 to 256
[  408.808279][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.869785][T13261] loop5: detected capacity change from 0 to 256
[  408.967959][T13261] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d)
[  409.541972][T13252] loop1: detected capacity change from 0 to 40427
[  409.596081][T13252] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[  409.614177][T13252] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  409.664781][T13252] F2FS-fs (loop1): invalid crc value
[  409.699633][T13278] loop2: detected capacity change from 0 to 2048
[  409.705313][T13252] F2FS-fs (loop1): Found nat_bits in checkpoint
[  409.721997][T13278] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  409.858427][T13282] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  409.863975][T13278] syz.2.2662: attempt to access beyond end of device
[  409.863975][T13278] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  409.953827][T13252] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  409.970302][T13252] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  410.018812][   T28] audit: type=1800 audit(1791483955.468:211): pid=13252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2649" name="file1" dev="loop1" ino=10 res=0 errno=0
[  410.222286][ T5773] syz-executor: attempt to access beyond end of device
[  410.222286][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  410.263920][ T5773] F2FS-fs (loop1): Remounting filesystem read-only
[  410.898277][T13296] loop6: detected capacity change from 0 to 4096
[  410.936195][T13296] EXT4-fs: Ignoring removed bh option
[  411.004076][T13296] EXT4-fs: Ignoring removed orlov option
[  411.261971][T13296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.576843][T11021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.965132][T13323] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  412.533853][T13316] loop5: detected capacity change from 0 to 40427
[  412.558947][T13316] F2FS-fs (loop5): Invalid uid value -1
[  412.584996][T13337] loop6: detected capacity change from 0 to 1024
[  412.621428][ T5778] Bluetooth: hci1: command tx timeout
[  412.760868][T13339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2687'.
[  413.046355][T13345] loop1: detected capacity change from 0 to 2048
[  413.083725][T13345] EXT4-fs: Ignoring removed nomblk_io_submit option
[  413.090461][T13345] EXT4-fs: inline encryption not supported
[  413.199680][T13345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.504531][T13357] loop5: detected capacity change from 0 to 256
[  413.517574][T13357] FAT-fs (loop5): "posix" option is obsolete, not supported now
[  413.553736][ T5773] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz-executor: bg 0: block 2: invalid block bitmap
[  413.594098][ T5773] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  413.698903][ T5773] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 5: comm syz-executor: path /737/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[  413.729640][ T5773] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 5: comm syz-executor: path /737/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[  413.798125][ T5773] EXT4-fs error (device loop1): empty_inline_dir:1884: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[  413.882039][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  413.932909][ T5773] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 5: comm syz-executor: path /737/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[  414.000238][ T5773] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 5: comm syz-executor: path /737/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[  414.041461][ T5773] EXT4-fs error (device loop1): empty_inline_dir:1884: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[  414.078648][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  414.105517][ T5773] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 5: comm syz-executor: path /737/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[  414.143352][ T5773] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 5: comm syz-executor: path /737/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[  414.176528][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  414.225499][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  414.270038][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  414.309499][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  414.332374][ T5821] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  414.350381][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  414.371122][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  414.392427][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  414.407431][ T3365] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  414.425041][ T5773] EXT4-fs warning (device loop1): empty_inline_dir:1891: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  414.551307][ T5821] usb 6-1: too many endpoints for config 0 interface 0 altsetting 76: 206, using maximum allowed: 30
[  414.566165][ T5821] usb 6-1: config 0 interface 0 altsetting 76 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.584222][ T5821] usb 6-1: config 0 interface 0 altsetting 76 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.605629][ T5821] usb 6-1: config 0 interface 0 altsetting 76 has 1 endpoint descriptor, different from the interface descriptor's value: 206
[  414.621960][ T3365] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.633332][ T3365] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.643736][ T5821] usb 6-1: config 0 interface 0 has no altsetting 0
[  414.681730][ T5821] usb 6-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00
[  414.694800][ T3365] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  414.721497][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.735593][ T3365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.772617][ T5821] usb 6-1: config 0 descriptor??
[  415.069966][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.225588][ T3365] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0
[  415.262669][ T3365] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0
[  415.270176][ T3365] hid-picolcd 0003:04D8:C002.0023: unknown main item tag 0x0
[  415.293518][ T5821] input: HID 12ba:074b as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:12BA:074B.0024/input/input24
[  415.350068][ T5821] sony 0003:12BA:074B.0024: input,hidraw0: USB HID v80.00 Joystick [HID 12ba:074b] on usb-dummy_hcd.5-1/input0
[  415.390286][ T3365] hid-picolcd 0003:04D8:C002.0023: unsupported KEY_STATE report
[  415.420425][ T3365] hid-picolcd: probe of 0003:04D8:C002.0023 failed with error -22
[  415.442769][ T5842] usb 6-1: USB disconnect, device number 7
[  415.459673][ T3365] usb 3-1: USB disconnect, device number 16
[  415.650695][T13375] fido_id[13375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  415.698198][   T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.849934][T13373] loop6: detected capacity change from 0 to 40427
[  415.866941][   T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.891507][T13373] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  415.927366][T13373] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  415.972183][T13373] F2FS-fs (loop6): build fault injection attr: rate: 27487, type: 0x7ffff
[  416.011979][T13373] F2FS-fs (loop6): invalid crc value
[  416.148370][   T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.175508][T13373] F2FS-fs (loop6): Found nat_bits in checkpoint
[  416.293598][T13381] loop2: detected capacity change from 0 to 256
[  416.327869][T13381] FAT-fs (loop2): Unrecognized mount option "shortname=mixwinnt" or missing value
[  416.339666][   T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.620879][T13373] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30
[  416.629061][T13373] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  416.806100][T13387] loop5: detected capacity change from 0 to 256
[  416.866430][T13387] exfat: Deprecated parameter 'namecase'
[  416.911555][T13387] exfat: Deprecated parameter 'namecase'
[  416.950306][T13387] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  417.131242][T13390] loop2: detected capacity change from 0 to 4096
[  417.228024][T13390] EXT4-fs (loop2): Test dummy encryption mode enabled
[  417.318994][T13390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.390917][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  417.403136][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  417.419283][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  417.434679][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  417.463449][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  417.474232][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  417.681064][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.988388][T13409] tipc: Started in network mode
[  417.993387][T13409] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711
[  418.025121][T13409] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  418.441107][T13422] loop5: detected capacity change from 0 to 512
[  418.588175][T13428] loop2: detected capacity change from 0 to 16
[  418.617683][T13428] erofs: (device loop2): mounted with root inode @ nid 36.
[  419.378800][T13398] chnl_net:caif_netlink_parms(): no params data found
[  419.720154][ T5778] Bluetooth: hci0: command tx timeout
[  419.757983][T13434] loop6: detected capacity change from 0 to 32768
[  419.773539][T13434] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2723 (13434)
[  419.841750][T13434] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  419.869702][T13434] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  419.899483][T13434] BTRFS info (device loop6): use zlib compression, level 3
[  419.933894][T13434] BTRFS info (device loop6): turning on sync discard
[  419.944177][T13434] BTRFS info (device loop6): using free space tree
[  419.995559][T13432] loop5: detected capacity change from 0 to 40427
[  420.135020][T13432] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0)
[  420.168692][T13432] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  420.251384][T13432] F2FS-fs (loop5): invalid crc value
[  420.317399][T13432] F2FS-fs (loop5): Found nat_bits in checkpoint
[  420.577902][T13434] BTRFS info (device loop6): enabling ssd optimizations
[  420.736541][   T28] audit: type=1800 audit(1791483965.476:212): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2723" name="file1" dev="loop6" ino=260 res=0 errno=0
[  420.812896][T13432] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  420.822695][T13432] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  420.859442][   T48] hsr_slave_0: left promiscuous mode
[  420.873138][   T28] audit: type=1800 audit(1791483965.617:213): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2722" name="file1" dev="loop5" ino=10 res=0 errno=0
[  420.920961][   T48] hsr_slave_1: left promiscuous mode
[  420.941076][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  420.946789][T10116] syz-executor: attempt to access beyond end of device
[  420.946789][T10116] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  420.960645][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  420.990440][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  420.998531][T10116] F2FS-fs (loop5): Remounting filesystem read-only
[  421.011312][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.022652][T11021] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  421.041709][   T48] macsec0: left allmulticast mode
[  421.053291][   T48] veth1_macvtap: left allmulticast mode
[  421.060422][   T48] macsec0: left promiscuous mode
[  421.067440][   T48] bridge0: port 3(macsec0) entered disabled state
[  421.108025][   T48] bridge_slave_1: left allmulticast mode
[  421.116111][   T48] bridge_slave_1: left promiscuous mode
[  421.122444][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.145403][   T48] bridge_slave_0: left allmulticast mode
[  421.151434][   T48] bridge_slave_0: left promiscuous mode
[  421.165145][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.314249][   T48] veth1_macvtap: left promiscuous mode
[  421.321217][   T48] veth0_macvtap: left promiscuous mode
[  421.355953][   T48] veth1_vlan: left promiscuous mode
[  421.364886][   T48] veth0_vlan: left promiscuous mode
[  421.929921][   T48] bond1 (unregistering): Released all slaves
[  421.943922][ T5778] Bluetooth: hci0: command tx timeout
[  422.002166][T13499] vivid-000: disconnect
[  422.015393][T13498] vivid-000: reconnect
[  422.217732][T13505] loop6: detected capacity change from 0 to 2048
[  422.343182][T13505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.363731][T13509] loop5: detected capacity change from 0 to 1024
[  422.454305][T11021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.072627][T13528] loop6: detected capacity change from 0 to 128
[  423.107815][T13528] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  423.129385][    C0] vkms_vblank_simulate: vblank timer overrun
[  423.145969][T13528] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  423.298006][T11021] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  423.725181][   T48] team0 (unregistering): Port device team_slave_1 removed
[  423.806014][   T48] team0 (unregistering): Port device team_slave_0 removed
[  423.877172][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.960855][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.167466][ T5778] Bluetooth: hci0: command tx timeout
[  424.527967][   T48] bond0 (unregistering): Released all slaves
[  424.654733][T13532] netlink: 'syz.5.2750': attribute type 1 has an invalid length.
[  424.662843][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2750'.
[  424.713046][T13398] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.732945][T13398] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.742046][T13398] bridge_slave_0: entered allmulticast mode
[  424.753442][T13398] bridge_slave_0: entered promiscuous mode
[  424.797504][T13398] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.829620][T13398] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.860162][T13398] bridge_slave_1: entered allmulticast mode
[  424.912498][T13398] bridge_slave_1: entered promiscuous mode
[  424.981031][T13540] nbd: must specify a device to reconfigure
[  425.016231][T13398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.061326][T13398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.263916][T13398] team0: Port device team_slave_0 added
[  425.296780][T13547] loop5: detected capacity change from 0 to 2048
[  425.360521][T13398] team0: Port device team_slave_1 added
[  425.395841][T13547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  425.482211][   T28] audit: type=1800 audit(1791483969.919:214): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2757" name="file2" dev="loop5" ino=1416 res=0 errno=0
[  425.551851][T13398] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.589959][T13398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.673931][T13398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.730641][T13398] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.750830][   T28] audit: type=1326 audit(1791483970.181:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  425.803580][T13398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.869051][   T28] audit: type=1326 audit(1791483970.181:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  425.889784][T13398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.896514][    C0] vkms_vblank_simulate: vblank timer overrun
[  425.916596][T13559] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2760'.
[  425.988930][   T28] audit: type=1326 audit(1791483970.209:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  426.043402][   T28] audit: type=1326 audit(1791483970.209:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  426.075176][   T28] audit: type=1326 audit(1791483970.209:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  426.106653][   T28] audit: type=1326 audit(1791483970.209:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  426.149452][   T28] audit: type=1326 audit(1791483970.219:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  426.195260][   T28] audit: type=1326 audit(1791483970.219:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  426.240187][T13559] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2760'.
[  426.260895][T13561] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2760'.
[  426.279460][   T28] audit: type=1326 audit(1791483970.219:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  426.304071][    C0] vkms_vblank_simulate: vblank timer overrun
[  426.363113][   T28] audit: type=1326 audit(1791483970.219:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  426.402083][ T5778] Bluetooth: hci0: command tx timeout
[  426.414898][T13398] hsr_slave_0: entered promiscuous mode
[  426.424082][T13398] hsr_slave_1: entered promiscuous mode
[  426.430701][T13398] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  426.465877][T13398] Cannot create hsr debugfs directory
[  426.484917][   T28] audit: type=1326 audit(1791483970.284:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffa9cd5ea0e code=0x7ffc0000
[  426.533214][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2761'.
[  426.561736][   T28] audit: type=1326 audit(1791483970.284:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffa9cd5ea0e code=0x7ffc0000
[  426.641206][   T28] audit: type=1326 audit(1791483970.284:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffa9cd5ea0e code=0x7ffc0000
[  426.737481][   T28] audit: type=1326 audit(1791483970.284:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffa9cd5ea0e code=0x7ffc0000
[  426.811181][   T28] audit: type=1326 audit(1791483970.294:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.6.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffa9cd5ea0e code=0x7ffc0000
[  427.128308][T13398] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  427.149117][T13398] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  427.166772][T13398] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  427.204768][T13398] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  427.276402][T13581] loop6: detected capacity change from 0 to 8192
[  427.313006][T13581] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  427.332484][T13581] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  427.368022][T13581] REISERFS (device loop6): using ordered data mode
[  427.391923][T13581] reiserfs: using flush barriers
[  427.417741][T13581] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  427.497446][T13581] REISERFS (device loop6): checking transaction log (loop6)
[  427.533436][T13581] REISERFS (device loop6): Using r5 hash to sort names
[  427.546290][T13398] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.554111][T13581] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  427.605435][T13593] loop2: detected capacity change from 0 to 256
[  427.619246][T13398] 8021q: adding VLAN 0 to HW filter on device team0
[  427.662099][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.669405][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.782236][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.789476][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.996797][   T27] hid-generic 0003:046D:C21C.0025: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  428.018984][T13398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  428.306172][T13602] fido_id[13602]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  428.329494][T13608] Bluetooth: MGMT ver 1.22
[  428.786677][T13398] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.128254][ T5778] Bluetooth: hci0: command tx timeout
[  429.583804][T13398] veth0_vlan: entered promiscuous mode
[  429.603294][T13398] veth1_vlan: entered promiscuous mode
[  429.697511][T13398] veth0_macvtap: entered promiscuous mode
[  429.740972][T13398] veth1_macvtap: entered promiscuous mode
[  429.805145][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.833540][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.850945][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.869626][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.885269][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.896282][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.918075][T13398] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.975353][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.018199][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.053498][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.083475][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.099705][T13398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.115755][T13398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.138010][T13398] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.181559][T13398] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.211876][T13398] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.234780][T13398] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.253302][T13398] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.490301][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.521044][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.609007][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.625530][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.772239][T13694] loop5: detected capacity change from 0 to 256
[  430.857595][T13694] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[  431.309514][  T172] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  431.387805][T13715] loop6: detected capacity change from 0 to 2048
[  431.399965][T13718] loop7: detected capacity change from 0 to 8
[  431.429011][T13719] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.2809'.
[  431.513954][  T172] usb 3-1: not running at top speed; connect to a high speed hub
[  431.585167][  T172] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  431.608659][  T172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  431.649302][  T172] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  431.679499][  T172] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  431.704663][T13724] loop5: detected capacity change from 0 to 512
[  431.736105][T13724] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  431.750658][  T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.794314][T13724] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.2810: bad orphan inode 131083
[  431.810281][  T172] usb 3-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  431.893793][T13724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.082931][T10116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.275370][  T172] usb 3-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[  432.311016][  T172] usb 3-1: No streaming interface found for terminal 2.
[  432.360078][  T172] usb 3-1: USB disconnect, device number 17
[  433.000635][T13756] loop5: detected capacity change from 0 to 1024
[  433.012013][T13762] loop7: detected capacity change from 0 to 256
[  433.477150][T13777] loop5: detected capacity change from 0 to 256
[  433.651415][T13777] FAT-fs (loop5): Directory bread(block 64) failed
[  433.681776][T13777] FAT-fs (loop5): Directory bread(block 65) failed
[  433.690765][T13777] FAT-fs (loop5): Directory bread(block 66) failed
[  433.712820][T13777] FAT-fs (loop5): Directory bread(block 67) failed
[  433.731084][T13777] FAT-fs (loop5): Directory bread(block 68) failed
[  433.764697][T13777] FAT-fs (loop5): Directory bread(block 69) failed
[  433.783119][T13777] FAT-fs (loop5): Directory bread(block 70) failed
[  433.804403][T13777] FAT-fs (loop5): Directory bread(block 71) failed
[  433.826304][T13777] FAT-fs (loop5): Directory bread(block 72) failed
[  433.844427][T13777] FAT-fs (loop5): Directory bread(block 73) failed
[  433.901925][T13790] loop7: detected capacity change from 0 to 128
[  434.510236][T13808] loop6: detected capacity change from 0 to 512
[  434.537538][T13808] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  434.677656][T13808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.773492][T13808] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  435.046848][T13825] loop2: detected capacity change from 0 to 4096
[  435.147062][T13825] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  435.257935][T11021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.304092][T13834] loop7: detected capacity change from 0 to 512
[  435.599391][T13840] loop6: detected capacity change from 0 to 1024
[  435.643968][T13840] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  435.688058][T13840] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  435.754442][T13840] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  435.819851][T13840] System zones: 0-1, 3-36
[  435.863811][T13840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.156233][T11021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.281095][T13858] loop2: detected capacity change from 0 to 64
[  436.449383][   T28] kauditd_printk_skb: 64 callbacks suppressed
[  436.449401][   T28] audit: type=1800 audit(1791483980.181:294): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2855" name="file1" dev="loop2" ino=5 res=0 errno=0
[  436.742307][T13867] loop5: detected capacity change from 0 to 8192
[  436.754125][T13867] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  436.892797][T13873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.111920][T13398] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.362625][T13887] EXT4-fs: Ignoring removed bh option
[  437.434813][T13887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.522126][T10116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.761544][T13901] ip_tables: iptables: counters copy to user failed while replacing table
[  437.878221][T13906] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2873'.
[  437.905934][T13906] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2873'.
[  437.965610][T13908] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  437.999091][T13908] hpfs: filesystem error: improperly stopped
[  438.016330][T13908] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  438.045142][T13908] hpfs: You really don't want any checks? You are crazy...
[  438.066677][T13908] hpfs: Code page index out of array
[  438.075869][T13908] hpfs: code page support is disabled
[  438.096425][T13908] hpfs: hpfs_map_4sectors(): unaligned read
[  438.107201][T13908] hpfs: hpfs_map_4sectors(): unaligned read
[  438.136304][T13908] hpfs: filesystem error: unable to find root dir
[  438.203523][T13908] hpfs: hpfs_map_4sectors(): unaligned read
[  439.025509][T13955] ip_tables: iptables: counters copy to user failed while replacing table
[  439.203766][T13963] set_capacity_and_notify: 4 callbacks suppressed
[  439.203784][T13963] loop2: detected capacity change from 0 to 8
[  439.206775][T13959] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  439.401450][T13963] SQUASHFS error: xz decompression failed, data probably corrupt
[  439.410215][T13963] SQUASHFS error: Failed to read block 0x60: -5
[  439.441501][T13963] SQUASHFS error: xz decompression failed, data probably corrupt
[  439.454288][T13963] SQUASHFS error: Failed to read block 0x60: -5
[  439.477958][   T28] audit: type=1800 audit(1791483983.015:295): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2896" name="file0" dev="loop2" ino=1 res=0 errno=0
[  439.590323][T13974] netlink: 'syz.5.2901': attribute type 5 has an invalid length.
[  439.687471][T13976] loop7: detected capacity change from 0 to 2048
[  439.780323][T13981] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  439.812466][T13983] loop5: detected capacity change from 0 to 256
[  439.841324][T13983] exfat: Bad value for 'umask'
[  439.924116][ T5791] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  439.955623][   T28] audit: type=1326 audit(1791483983.464:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13980 comm="syz.5.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b379e1d9 code=0x7ffc0000
[  440.026292][   T28] audit: type=1326 audit(1791483983.464:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13980 comm="syz.5.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b379e1d9 code=0x7ffc0000
[  440.131233][   T28] audit: type=1326 audit(1791483983.464:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13980 comm="syz.5.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b379e1d9 code=0x7ffc0000
[  440.217510][   T28] audit: type=1326 audit(1791483983.464:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13980 comm="syz.5.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b379e1d9 code=0x7ffc0000
[  440.303642][   T28] audit: type=1326 audit(1791483983.492:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13980 comm="syz.5.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b379e1d9 code=0x7ffc0000
[  440.386867][   T28] audit: type=1326 audit(1791483983.492:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13980 comm="syz.5.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f61b379e1d9 code=0x7ffc0000
[  440.526271][   T28] audit: type=1326 audit(1791483983.492:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13980 comm="syz.5.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b379e1d9 code=0x7ffc0000
[  440.553471][   T28] audit: type=1326 audit(1791483983.492:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13980 comm="syz.5.2905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f61b379e1d9 code=0x7ffc0000
[  440.958150][T13987] loop2: detected capacity change from 0 to 32768
[  441.005322][T13987] 
[  441.005322][T13987]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  441.005322][T13987] 
[  441.059811][T13987] ERROR: (device loop2): diWrite: ixpxd invalid
[  441.059811][T13987] 
[  441.095955][T13987] ERROR: (device loop2): txCommit: 
[  441.095955][T13987] 
[  441.117304][T13987] ERROR: (device loop2): dtSearch: stack overrun!
[  441.117304][T13987] 
[  441.137195][T13987] btstack dump:
[  441.151427][T13987] bn = 0, index = 0
[  441.162919][T13987] bn = 0, index = 0
[  441.170625][T13987] bn = 0, index = 0
[  441.183368][T13987] bn = 0, index = 0
[  441.194329][T13987] bn = 0, index = 0
[  441.207979][T13987] bn = 0, index = 0
[  441.228936][T13987] bn = 0, index = 0
[  441.237294][T13987] bn = 0, index = 0
[  441.264650][T13987] jfs_lookup: dtSearch returned -5
[  441.372042][ T5776] 
[  441.372042][ T5776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  441.372042][ T5776] 
[  441.423992][ T5776] 
[  441.423992][ T5776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  441.423992][ T5776] 
[  441.916369][T14048] loop7: detected capacity change from 0 to 164
[  441.931992][T14049] loop6: detected capacity change from 0 to 512
[  441.974911][T14048] Unsupported NM flag settings (8)
[  442.030033][T14049] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.2935: bg 0: block 5: invalid block bitmap
[  442.108108][T14049] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  442.136194][T14049] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2935: invalid indirect mapped block 3 (level 2)
[  442.166741][T14049] EXT4-fs (loop6): 1 orphan inode deleted
[  442.186839][T14049] EXT4-fs (loop6): 1 truncate cleaned up
[  442.224174][T14057] netlink: 'syz.2.2939': attribute type 8 has an invalid length.
[  442.227097][T14049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.256737][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'.
[  442.311113][T14057] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.319381][T14057] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.393659][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2940'.
[  442.441266][T11021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.641407][T14066] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  442.942203][T14079] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2950'.
[  443.111063][T14087] smc: net device erspan0 applied user defined pnetid SYZ1
[  443.128507][T14089] macsec1: entered promiscuous mode
[  443.144513][T14089] macsec1: entered allmulticast mode
[  443.492520][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  443.492536][   T28] audit: type=1326 audit(1791483986.775:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.2963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  443.621815][   T28] audit: type=1326 audit(1791483986.803:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.2963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  443.646185][    C1] vkms_vblank_simulate: vblank timer overrun
[  443.657828][   T28] audit: type=1326 audit(1791483986.822:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.2963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  443.682203][    C1] vkms_vblank_simulate: vblank timer overrun
[  443.755322][   T28] audit: type=1326 audit(1791483986.822:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.2963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  443.869970][   T28] audit: type=1326 audit(1791483986.822:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.2963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  443.898093][    C1] vkms_vblank_simulate: vblank timer overrun
[  443.924574][T14122] netlink: 'syz.6.2967': attribute type 7 has an invalid length.
[  443.933281][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2967'.
[  443.941778][   T28] audit: type=1326 audit(1791483986.822:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.2963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  443.967808][    C1] vkms_vblank_simulate: vblank timer overrun
[  443.975329][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2967'.
[  443.992193][   T28] audit: type=1326 audit(1791483986.831:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.6.2963" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd9e1d9 code=0x7ffc0000
[  444.018534][    C1] vkms_vblank_simulate: vblank timer overrun
[  444.120621][T14130] loop6: detected capacity change from 0 to 256
[  444.760716][T14158] netlink: 'syz.6.2984': attribute type 30 has an invalid length.
[  445.216817][ T5823] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  445.409234][ T5823] usb 8-1: Using ep0 maxpacket: 16
[  445.411399][ T5823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.411437][ T5823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.411465][ T5823] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  445.411513][ T5823] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  445.411541][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.415101][ T5823] usb 8-1: config 0 descriptor??
[  445.658491][T14179] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2994'.
[  445.789792][T14181] loop2: detected capacity change from 0 to 64
[  445.802957][T14181] MINIX-fs: mounting file system with errors, running fsck is recommended
[  445.829814][T14181] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  445.911966][ T5823] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0026/input/input26
[  446.048225][ T5823] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  446.120208][ T5823] usb 8-1: USB disconnect, device number 2
[  446.182584][T14186] loop2: detected capacity change from 0 to 256
[  446.298231][T14186] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  446.356882][T14183] fido_id[14183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  446.581153][T14194] loop5: detected capacity change from 0 to 64
[  447.101144][T14213] loop6: detected capacity change from 0 to 64
[  447.124459][T14211] loop5: detected capacity change from 0 to 1764
[  447.638017][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3010'.
[  447.937615][T14237] syz.5.3014 uses old SIOCAX25GETINFO
[  448.272477][T14216] loop7: detected capacity change from 0 to 32768
[  448.329339][T14216] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  448.413601][    T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  448.498579][T14216] XFS (loop7): Ending clean mount
[  448.644524][T13398] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  448.665687][    T8] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  448.684814][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.726536][    T8] usb 3-1: Product: syz
[  448.730797][    T8] usb 3-1: Manufacturer: syz
[  448.760618][    T8] usb 3-1: SerialNumber: syz
[  448.842765][    T8] ums_eneub6250 3-1:1.0: USB Mass Storage device detected
[  448.897086][    T8] scsi host1: usb-storage 3-1:1.0
[  449.127443][T14278] loop5: detected capacity change from 0 to 4096
[  449.247299][T14284] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  449.386484][T14278] NILFS (loop5): cannot delete checkpoints: invalid range [0, 0)
[  449.396573][T14278] NILFS (loop5): error -22 preparing GC: cannot delete checkpoints
[  449.561338][    T8] ums_eneub6250: probe of 3-1:1.0 failed with error 3
[  449.584605][    T8] usb 3-1: USB disconnect, device number 18
[  449.638996][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3027'.
[  449.987957][T14307] loop7: detected capacity change from 0 to 1024
[  450.093199][T14307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.476872][ T5821] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  450.550653][T14326] loop2: detected capacity change from 0 to 512
[  450.562333][T14301] loop5: detected capacity change from 0 to 32768
[  450.580275][T14326] EXT4-fs: Ignoring removed nomblk_io_submit option
[  450.615725][T14301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3030 (14301)
[  450.646266][T14326] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  450.691863][T14326] EXT4-fs (loop2): orphan cleanup on readonly fs
[  450.702642][T14301] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  450.725896][T14326] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  450.734773][T14301] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  450.743496][T14301] BTRFS info (device loop5): use zlib compression, level 3
[  450.744152][ T5821] usb 8-1: unable to get BOS descriptor or descriptor too short
[  450.759648][T14326] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  450.774798][T14301] BTRFS info (device loop5): turning on sync discard
[  450.801162][ T5821] usb 8-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40
[  450.816931][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.827477][ T5821] usb 8-1: Product: syz
[  450.832823][ T5821] usb 8-1: Manufacturer: syz
[  450.838420][ T5821] usb 8-1: SerialNumber: syz
[  450.848122][T14301] BTRFS info (device loop5): using free space tree
[  450.869519][ T5821] usb 8-1: Invalid firmware size=105.
[  450.877151][T14326] EXT4-fs (loop2): 1 truncate cleaned up
[  450.900674][T14326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  450.910034][ T5821] usb 8-1: Invalid firmware size=105.
[  450.941012][ T5821] usb 8-1: Invalid firmware size=105.
[  451.067737][T14301] BTRFS info (device loop5): enabling ssd optimizations
[  451.138989][ T5842] usb 8-1: USB disconnect, device number 3
[  451.163018][T14326] EXT4-fs (loop2): can't enable nombcache during remount
[  451.193181][T14313] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  451.247143][   T28] audit: type=1800 audit(1791483994.025:312): pid=14301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3030" name="file1" dev="loop5" ino=260 res=0 errno=0
[  451.302949][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.448292][T10116] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  451.803814][T13398] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.999871][T14365] loop7: detected capacity change from 0 to 512
[  452.150583][T14365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.163726][T14365] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.256423][T14365] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #12: comm syz.7.3039: Directory hole found for htree leaf block 0
[  452.312055][T14365] EXT4-fs (loop7): Remounting filesystem read-only
[  452.395435][T13398] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.411911][   T34] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  452.412509][ T5827] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  452.458060][   T34] Quota error (device loop7): write_blk: dquota write failed
[  452.478118][   T34] Quota error (device loop7): free_dqentry: Can't write quota data block 5
[  452.646223][ T5827] usb 3-1: Using ep0 maxpacket: 16
[  452.655750][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.688677][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  452.710860][ T5827] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  452.743125][ T5827] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  452.760395][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.795851][ T5827] usb 3-1: config 0 descriptor??
[  452.851693][T14394] Bluetooth: MGMT ver 1.22
[  453.300373][ T5827] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0027/input/input27
[  453.468300][ T5827] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  453.508657][ T5827] usb 3-1: USB disconnect, device number 19
[  453.728458][T14411] fido_id[14411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  454.054017][T14404] loop5: detected capacity change from 0 to 32768
[  454.075326][T14404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3049 (14404)
[  454.092630][T14398] loop7: detected capacity change from 0 to 40427
[  454.131999][T14398] F2FS-fs (loop7): Corrupted extension count (327717 + 1 > 64)
[  454.142438][T14398] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  454.174786][T14404] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  454.203831][T14398] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x7ffff
[  454.210359][T14404] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  454.248365][T14398] F2FS-fs (loop7): invalid crc value
[  454.282013][T14404] BTRFS info (device loop5): disabling tree log
[  454.293832][T14404] BTRFS info (device loop5): using free space tree
[  454.293849][T14398] F2FS-fs (loop7): Found nat_bits in checkpoint
[  454.550023][T14404] BTRFS info (device loop5): enabling ssd optimizations
[  454.557116][T14404] BTRFS info (device loop5): auto enabling async discard
[  454.635508][T14398] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  454.642648][T14398] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  454.834887][T14409] loop6: detected capacity change from 0 to 32768
[  454.976196][T14409] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  455.103218][   T34] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  455.230835][T14409] XFS (loop6): Ending clean mount
[  455.540619][T10116] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  455.566561][T11021] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  456.604575][T14482] loop5: detected capacity change from 0 to 1024
[  456.728061][T14461] loop2: detected capacity change from 0 to 40427
[  456.856211][T14468] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  456.864023][T14461] F2FS-fs (loop2): invalid crc value
[  456.917125][T14461] F2FS-fs (loop2): Found nat_bits in checkpoint
[  457.149287][T14492] loop7: detected capacity change from 0 to 16
[  457.157930][T14461] F2FS-fs (loop2): Start checkpoint disabled!
[  457.187233][T14492] erofs: (device loop7): mounted with root inode @ nid 36.
[  457.280429][T14461] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  457.677317][T14505] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3065'.
[  457.732652][   T34] kworker/u4:2: attempt to access beyond end of device
[  457.732652][   T34] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  457.756139][T14505] vlan2: entered allmulticast mode
[  457.762158][T14505] gretap0: entered allmulticast mode
[  457.768444][   T34] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  457.775690][   T34] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  457.814190][T14509] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3067'.
[  458.505704][T14532] 0x000000000000-0x000000020000 : ""
[  458.557769][T14532] ftl_cs: FTL header not found.
[  458.658812][T14540] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3076'.
[  458.681982][T14542] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  458.826024][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  458.832462][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  459.125635][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3084'.
[  459.498380][T14572] loop5: detected capacity change from 0 to 128
[  459.669076][T14558] loop7: detected capacity change from 0 to 32768
[  459.688021][T14558] 
[  459.688021][T14558]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  459.688021][T14558] 
[  459.771976][T14558] JFS: metapage_get_blocks failed
[  459.779557][T14576] loop2: detected capacity change from 0 to 256
[  459.799927][T14576] exfat: Deprecated parameter 'namecase'
[  459.806687][T14576] exfat: Deprecated parameter 'namecase'
[  459.823669][T14558] ERROR: (device loop7): release_metapage: metapage_write_one() failed
[  459.823669][T14558] 
[  459.851558][T14576] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  459.852652][T14577] 
[  459.852652][T14577]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  459.852652][T14577] 
[  459.910315][T14577] 
[  459.910315][T14577]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  459.910315][T14577] 
[  459.921476][T14558] ERROR: (device loop7): remounting filesystem as read-only
[  459.935893][T14558] ERROR: (device loop7): diWrite: ixpxd invalid
[  459.935893][T14558] 
[  459.957139][T14558] ERROR: (device loop7): txCommit: 
[  459.957139][T14558] 
[  459.985174][T14558] 
[  459.985174][T14558]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  459.985174][T14558] 
[  460.132524][T14581] loop2: detected capacity change from 0 to 256
[  460.151673][T13398] 
[  460.151673][T13398]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.151673][T13398] 
[  460.193166][T13398] 
[  460.193166][T13398]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.193166][T13398] 
[  460.221901][T14581] FAT-fs (loop2): Directory bread(block 64) failed
[  460.238394][T14581] FAT-fs (loop2): Directory bread(block 65) failed
[  460.245984][T14581] FAT-fs (loop2): Directory bread(block 66) failed
[  460.279945][T14581] FAT-fs (loop2): Directory bread(block 67) failed
[  460.286704][T14581] FAT-fs (loop2): Directory bread(block 68) failed
[  460.300582][T14581] FAT-fs (loop2): Directory bread(block 69) failed
[  460.310591][T14581] FAT-fs (loop2): Directory bread(block 70) failed
[  460.318253][T14581] FAT-fs (loop2): Directory bread(block 71) failed
[  460.336407][T14581] FAT-fs (loop2): Directory bread(block 72) failed
[  460.343015][T14581] FAT-fs (loop2): Directory bread(block 73) failed
[  460.846317][T14599] loop2: detected capacity change from 0 to 128
[  460.974963][T14599] VFS: Found a Xenix FS (block size = 512) on device loop2
[  461.221616][ T5776] sysv_free_block: trying to free block not in datazone
[  461.239774][T14593] loop5: detected capacity change from 0 to 32768
[  461.247170][ T5776] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  461.305944][   T28] audit: type=1326 audit(1791484003.435:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14602 comm="syz.6.3106" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa9cd9e1d9 code=0x0
[  461.346365][T14593] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  461.544963][T10116] ocfs2: Unmounting device (7,5) on (node local)
[  461.744572][  T971] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  461.947573][  T971] usb 3-1: Using ep0 maxpacket: 32
[  461.956358][  T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.978974][  T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.996039][  T971] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  462.014901][  T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.038042][  T971] usb 3-1: config 0 descriptor??
[  462.418118][ T5821] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  462.524197][  T971] savu 0003:1E7D:2D5A.0028: item fetching failed at offset 6/8
[  462.531469][  T971] savu 0003:1E7D:2D5A.0028: parse failed
[  462.531544][  T971] savu: probe of 0003:1E7D:2D5A.0028 failed with error -22
[  462.610417][ T5821] usb 8-1: Using ep0 maxpacket: 16
[  462.613479][ T5821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.613519][ T5821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.613547][ T5821] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  462.613596][ T5821] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  462.613624][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.616305][ T5821] usb 8-1: config 0 descriptor??
[  462.795155][    T8] usb 3-1: USB disconnect, device number 20
[  463.064788][ T5821] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max
[  463.088338][ T5821] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max
[  463.174115][T14629] loop6: detected capacity change from 0 to 32768
[  463.305904][ T5821] microsoft 0003:045E:07DA.0029: No inputs registered, leaving
[  463.327862][ T5821] microsoft 0003:045E:07DA.0029: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  463.362332][ T5821] microsoft 0003:045E:07DA.0029: no inputs found
[  463.388355][ T5821] microsoft 0003:045E:07DA.0029: could not initialize ff, continuing anyway
[  463.430270][ T5821] usb 8-1: USB disconnect, device number 4
[  463.601530][T14638] fido_id[14638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  463.797185][ T5843] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  463.990223][T14652] netlink: 'syz.2.3126': attribute type 27 has an invalid length.
[  464.003590][ T5843] usb 6-1: Using ep0 maxpacket: 32
[  464.033466][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.056397][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  464.100843][ T5843] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  464.128525][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.160174][ T5843] usb 6-1: config 0 descriptor??
[  464.176059][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3127'.
[  464.198557][ T5843] hub 6-1:0.0: USB hub found
[  464.213276][T14656] loop2: detected capacity change from 0 to 8
[  464.304186][T14656] SQUASHFS error: Unable to read directory block [629:46]
[  464.327358][T14646] loop6: detected capacity change from 0 to 32768
[  464.430947][T14646] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  464.441478][ T5843] hub 6-1:0.0: config failed, can't read hub descriptor (err -90)
[  464.455285][T14646] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  464.500898][T14666] loop7: detected capacity change from 0 to 256
[  464.627486][T14666] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  464.648710][T14666] FAT-fs (loop7): Filesystem has been set read-only
[  464.660079][ T5843] usbhid 6-1:0.0: can't add hid device: -71
[  464.667362][ T5843] usbhid: probe of 6-1:0.0 failed with error -71
[  464.675861][T14646] XFS (loop6): Ending clean mount
[  464.710375][T14646] XFS (loop6): Quotacheck needed: Please wait.
[  464.743998][ T5843] usb 6-1: USB disconnect, device number 8
[  464.861272][T14646] XFS (loop6): Quotacheck: Done.
[  464.954163][T14672] loop7: detected capacity change from 0 to 512
[  465.014953][T14672] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00)
[  465.042774][T14672] FAT-fs (loop7): Filesystem has been set read-only
[  465.057848][T11021] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  465.412608][T14679] loop5: detected capacity change from 0 to 128
[  465.423283][T14668] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  465.468455][T14679] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  465.485445][T14679] hpfs: filesystem error: improperly stopped
[  465.509680][T14679] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  465.527577][T14679] hpfs: You really don't want any checks? You are crazy...
[  465.545971][T14679] hpfs: Code page index out of array
[  465.569486][T14679] hpfs: code page support is disabled
[  465.581028][T14679] hpfs: hpfs_map_4sectors(): unaligned read
[  465.600138][T14679] hpfs: hpfs_map_4sectors(): unaligned read
[  465.617463][T14679] hpfs: filesystem error: unable to find root dir
[  466.669391][T14697] loop5: detected capacity change from 0 to 32768
[  466.752716][T14697] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  466.795757][T14697] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  466.812858][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3152'.
[  466.854962][   T28] audit: type=1326 audit(1791484008.626:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  466.918554][   T28] audit: type=1326 audit(1791484008.626:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  466.971641][   T28] audit: type=1326 audit(1791484008.636:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  467.066595][   T28] audit: type=1326 audit(1791484008.636:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  467.092622][ T5827] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  467.132645][   T28] audit: type=1326 audit(1791484008.636:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  467.169976][T14697] XFS (loop5): Ending clean mount
[  467.191983][T14697] XFS (loop5): Quotacheck needed: Please wait.
[  467.211058][   T28] audit: type=1326 audit(1791484008.636:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  467.245640][   T28] audit: type=1326 audit(1791484008.636:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  467.275055][   T28] audit: type=1326 audit(1791484008.636:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  467.314494][   T28] audit: type=1326 audit(1791484008.636:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  467.358405][ T5827] usb 8-1: too many endpoints for config 0 interface 0 altsetting 76: 206, using maximum allowed: 30
[  467.369899][ T5827] usb 8-1: config 0 interface 0 altsetting 76 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.382287][ T5827] usb 8-1: config 0 interface 0 altsetting 76 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.392739][   T28] audit: type=1326 audit(1791484008.636:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.2.3154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  467.424949][ T5827] usb 8-1: config 0 interface 0 altsetting 76 has 1 endpoint descriptor, different from the interface descriptor's value: 206
[  467.440585][T14697] XFS (loop5): Quotacheck: Done.
[  467.442376][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0
[  467.482225][ T5827] usb 8-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00
[  467.507860][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.536294][ T5827] usb 8-1: config 0 descriptor??
[  467.640556][T10116] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  468.024371][T14746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3163'.
[  468.045190][ T5827] input: HID 12ba:074b as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:12BA:074B.002A/input/input29
[  468.062718][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3163'.
[  468.176080][ T5827] sony 0003:12BA:074B.002A: input,hidraw0: USB HID v80.00 Joystick [HID 12ba:074b] on usb-dummy_hcd.7-1/input0
[  468.362128][    T8] usb 8-1: USB disconnect, device number 5
[  468.394540][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3166'.
[  468.487026][T14755] vlan3: entered promiscuous mode
[  468.495687][T14755] bridge0: entered promiscuous mode
[  469.268878][T14765] loop2: detected capacity change from 0 to 32768
[  469.317311][T14765] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3171 (14765)
[  469.370583][T14765] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  469.392097][T14765] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  469.416170][T14765] BTRFS info (device loop2): force zlib compression, level 3
[  469.431185][T14765] BTRFS info (device loop2): turning on flush-on-commit
[  469.452211][T14765] BTRFS info (device loop2): max_inline at 4096
[  469.477588][T14765] BTRFS info (device loop2): using free space tree
[  469.632745][T14765] BTRFS info (device loop2): enabling ssd optimizations
[  469.669421][T14765] BTRFS info (device loop2): auto enabling async discard
[  469.977747][ T5776] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  470.358499][ T5791] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (5791)
[  470.374811][T14820] ip_tables: iptables: counters copy to user failed while replacing table
[  470.413128][T14822] loop6: detected capacity change from 0 to 256
[  470.499252][T14822] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x0612b11d, utbl_chksum : 0xe619d30d)
[  471.373670][T14848] netlink: 'syz.6.3193': attribute type 3 has an invalid length.
[  471.581638][T14858] loop6: detected capacity change from 0 to 512
[  471.612007][ T5843] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  471.621155][T14858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.637278][T14858] ext4 filesystem being mounted at /301/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  471.692477][T11021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.839686][T14867] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  471.849219][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.865798][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.895301][ T5843] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  471.926305][ T5843] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00
[  471.955571][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.989749][ T5843] usb 6-1: config 0 descriptor??
[  472.471372][ T5843] wacom 0003:056A:00ED.002B: unknown main item tag 0x0
[  472.490495][ T5843] wacom 0003:056A:00ED.002B: unknown main item tag 0x0
[  472.497808][ T5843] wacom 0003:056A:00ED.002B: unknown main item tag 0x0
[  472.505190][ T5843] wacom 0003:056A:00ED.002B: unknown main item tag 0x0
[  472.550499][ T5843] wacom 0003:056A:00ED.002B: unknown main item tag 0x0
[  472.562941][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  472.563075][   T28] audit: type=1326 audit(1791484013.967:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  472.595941][T14889] loop2: detected capacity change from 0 to 256
[  472.613406][ T5843] wacom 0003:056A:00ED.002B: unknown main item tag 0x0
[  472.627577][ T5843] wacom 0003:056A:00ED.002B: unknown main item tag 0x0
[  472.651212][ T5843] wacom 0003:056A:00ED.002B: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.5-1/input0
[  472.665531][   T28] audit: type=1326 audit(1791484013.967:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  472.709721][T14889] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  472.752516][   T28] audit: type=1326 audit(1791484013.986:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  472.815739][ T5843] usb 6-1: USB disconnect, device number 9
[  472.863842][   T28] audit: type=1326 audit(1791484013.986:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  472.921862][   T28] audit: type=1326 audit(1791484013.986:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  472.965086][T14890] fido_id[14890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  473.043765][   T28] audit: type=1326 audit(1791484013.986:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f318279df42 code=0x7ffc0000
[  473.157345][   T28] audit: type=1326 audit(1791484013.995:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f318275ea0e code=0x7ffc0000
[  473.189360][   T28] audit: type=1326 audit(1791484013.995:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f318279e007 code=0x7ffc0000
[  473.215713][   T28] audit: type=1326 audit(1791484013.995:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f318275ea0e code=0x7ffc0000
[  473.241788][   T28] audit: type=1326 audit(1791484013.995:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14888 comm="syz.2.3205" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f318279de6b code=0x7ffc0000
[  473.768797][T14901] loop7: detected capacity change from 0 to 32768
[  473.802171][T14901] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop7 scanned by syz.7.3210 (14901)
[  473.870700][T14901] BTRFS info (device loop7): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  473.890302][T14901] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  473.923673][T14901] BTRFS info (device loop7): using free space tree
[  474.138944][T14901] BTRFS info (device loop7): enabling ssd optimizations
[  474.138973][T14901] BTRFS info (device loop7): auto enabling async discard
[  474.469238][T13398] BTRFS info (device loop7): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  475.124865][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'.
[  475.140014][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'.
[  475.160133][T14948] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22)
[  475.596547][ T5778] Bluetooth: hci0: unexpected event for opcode 0x204e
[  475.764134][T14968] loop2: detected capacity change from 0 to 8192
[  476.069563][T14974] sp0: Synchronizing with TNC
[  476.550555][T14993] loop7: detected capacity change from 0 to 1024
[  476.621189][T14993] hfsplus: bad catalog entry type
[  477.243894][T15014] loop2: detected capacity change from 0 to 8
[  477.285492][T14995] loop6: detected capacity change from 0 to 32768
[  477.317731][T14995] 
[  477.317731][T14995]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  477.317731][T14995] 
[  477.359411][T14995] ERROR: (device loop6): diWrite: ixpxd invalid
[  477.359411][T14995] 
[  477.400157][T14995] ERROR: (device loop6): txCommit: 
[  477.400157][T14995] 
[  477.420515][T14995] ERROR: (device loop6): dtSearch: stack overrun!
[  477.420515][T14995] 
[  477.435894][T14995] btstack dump:
[  477.446246][T14995] bn = 0, index = 0
[  477.452841][T14995] bn = 0, index = 0
[  477.493433][T14995] bn = 0, index = 0
[  477.502865][T14995] bn = 0, index = 0
[  477.534825][T14995] bn = 0, index = 0
[  477.538799][T14995] bn = 0, index = 0
[  477.542666][T14995] bn = 0, index = 0
[  477.556643][T14995] bn = 0, index = 0
[  477.560574][T14995] jfs_lookup: dtSearch returned -5
[  477.645643][T15022] loop7: detected capacity change from 0 to 256
[  477.691236][T11021] 
[  477.691236][T11021]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  477.691236][T11021] 
[  477.741309][T11021] 
[  477.741309][T11021]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  477.741309][T11021] 
[  477.777781][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3259'.
[  477.815694][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3258'.
[  477.968506][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.004962][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.014914][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.057229][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.093917][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.122490][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.150853][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  478.184599][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.217057][T15028] batadv_slave_1: entered promiscuous mode
[  478.466295][T15044] loop6: detected capacity change from 0 to 8
[  478.751865][T15043] loop5: detected capacity change from 0 to 8192
[  478.760244][T15047] netlink: 'syz.7.3269': attribute type 1 has an invalid length.
[  478.785590][T15043] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  478.921072][T15043] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  478.949991][T15043] ntfs3: loop5: Failed to load $Extend (-2).
[  478.964841][T15032] loop2: detected capacity change from 0 to 32768
[  478.967296][T15043] ntfs3: loop5: Failed to initialize $Extend.
[  479.758337][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3281'.
[  479.788356][T15075] loop7: detected capacity change from 0 to 128
[  479.855165][T15075] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  479.916223][T15075] hpfs: filesystem error: improperly stopped
[  479.950795][T15075] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  479.965738][T15075] hpfs: You really don't want any checks? You are crazy...
[  479.975734][T15075] hpfs: Code page index out of array
[  479.981146][T15075] hpfs: code page support is disabled
[  479.998370][T15075] hpfs: hpfs_map_4sectors(): unaligned read
[  480.035202][T15075] hpfs: hpfs_map_4sectors(): unaligned read
[  480.050427][T15075] hpfs: filesystem error: unable to find root dir
[  480.241707][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3288'.
[  480.407616][T15094] syz_tun: entered promiscuous mode
[  480.453721][T15094] syz_tun: left promiscuous mode
[  480.458679][T15097] loop6: detected capacity change from 0 to 64
[  480.527739][T15099] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3294'.
[  480.938613][T15113] EXT4-fs: Ignoring removed mblk_io_submit option
[  480.967180][T15113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.998340][T15113] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  481.098541][T15113] EXT4-fs warning (device loop7): ext4_group_add:1722: Can't resize non-sparse filesystem further
[  481.280486][T15123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3306'.
[  481.294245][T15123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3306'.
[  481.303387][T13398] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.338438][T15123] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  481.832485][T15140] set_capacity_and_notify: 1 callbacks suppressed
[  481.832587][T15140] loop7: detected capacity change from 0 to 256
[  481.881270][T15140] FAT-fs (loop7): Directory bread(block 64) failed
[  481.933094][T15140] FAT-fs (loop7): Directory bread(block 65) failed
[  481.944015][T15140] FAT-fs (loop7): Directory bread(block 66) failed
[  481.971234][T15140] FAT-fs (loop7): Directory bread(block 67) failed
[  481.979124][T15140] FAT-fs (loop7): Directory bread(block 68) failed
[  482.025039][T15140] FAT-fs (loop7): Directory bread(block 69) failed
[  482.039769][T15140] FAT-fs (loop7): Directory bread(block 70) failed
[  482.053820][T15140] FAT-fs (loop7): Directory bread(block 71) failed
[  482.064328][T15140] FAT-fs (loop7): Directory bread(block 72) failed
[  482.083332][T15140] FAT-fs (loop7): Directory bread(block 73) failed
[  482.505752][ T5843] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  482.730356][ T5843] usb 6-1: Using ep0 maxpacket: 32
[  482.738920][ T5843] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  482.749652][ T5843] usb 6-1: config 0 has no interface number 0
[  482.796030][ T5843] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  482.816547][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.824650][ T5843] usb 6-1: Product: syz
[  482.837136][ T5843] usb 6-1: Manufacturer: syz
[  482.848156][ T5843] usb 6-1: SerialNumber: syz
[  482.873999][ T5843] usb 6-1: config 0 descriptor??
[  482.880686][T15168] loop2: detected capacity change from 0 to 4096
[  482.889532][T15168] ntfs3: loop2: ino=3, Correct links count -> 2.
[  482.911915][ T5843] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  482.943982][ T5843] usb 6-1: selecting invalid altsetting 1
[  482.953390][ T5843] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  482.991706][ T5843] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  483.013490][ T5843] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  483.030749][ T5843] usb 6-1: media controller created
[  483.112936][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  483.158563][T15168] ntfs3: loop2: failed to convert "0080" to cp874
[  483.177456][T15168] ntfs3: loop2: failed to convert name for inode 1e.
[  483.186644][T15170] loop6: detected capacity change from 0 to 4096
[  483.216669][T15168] ntfs3: loop2: ino=1f, mi_enum_attr
[  483.223381][T15170] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  483.238070][T15168] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  483.277152][T15168] ntfs3: loop2: ino=1f, mi_enum_attr
[  483.304977][T15170] ntfs3: loop6: ino=19, mi_enum_attr
[  483.331622][T15170] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  483.618014][T15175] loop2: detected capacity change from 0 to 256
[  484.273173][T15172] loop7: detected capacity change from 0 to 32768
[  484.330933][T15172] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  484.387619][T15149] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  484.443576][ T5843] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  484.453360][T15172] XFS (loop7): Ending clean mount
[  484.463104][ T5843] zl10353_read_register: readreg error (reg=127, ret==-71)
[  484.481791][ T5843] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  484.543287][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  484.543304][   T28] audit: type=1800 audit(1791484025.174:358): pid=15172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3327" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  484.641976][ T5843] usb 6-1: USB disconnect, device number 10
[  484.682606][T13398] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  484.876381][T15205] loop2: detected capacity change from 0 to 64
[  485.033957][T15209] loop6: detected capacity change from 0 to 2048
[  485.095950][T15209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.264732][T15209] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  485.416297][T11021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.555256][T15216] loop5: detected capacity change from 0 to 8192
[  485.592678][T15216] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  485.649982][   T28] audit: type=1326 audit(1791484026.212:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.2.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  485.655869][T15216] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  485.684003][   T28] audit: type=1326 audit(1791484026.240:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.2.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  485.708649][    C0] vkms_vblank_simulate: vblank timer overrun
[  485.735576][T15216] REISERFS (device loop5): using ordered data mode
[  485.771021][T15216] reiserfs: using flush barriers
[  485.845487][T15216] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  485.880633][   T28] audit: type=1326 audit(1791484026.277:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.2.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  485.970079][T15216] REISERFS (device loop5): checking transaction log (loop5)
[  486.008693][   T28] audit: type=1326 audit(1791484026.277:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.2.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  486.034822][T15216] REISERFS (device loop5): Using r5 hash to sort names
[  486.042434][T15216] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  486.079649][T15232] loop2: detected capacity change from 0 to 64
[  486.097763][   T28] audit: type=1326 audit(1791484026.277:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.2.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  486.262740][   T28] audit: type=1326 audit(1791484026.277:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.2.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  486.321383][   T28] audit: type=1326 audit(1791484026.277:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15223 comm="syz.2.3347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318279e1d9 code=0x7ffc0000
[  486.347041][    C0] vkms_vblank_simulate: vblank timer overrun
[  486.606284][T15240] program syz.5.3353 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  486.697959][T15238] loop6: detected capacity change from 0 to 4096
[  486.777467][T15238] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  486.820634][T15238] ntfs3: loop6: Failed to load $Extend (-22).
[  486.839546][T15238] ntfs3: loop6: Failed to initialize $Extend.
[  486.890584][T15230] JBD2: Ignoring recovery information on journal
[  486.930399][T15244] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  486.985271][T15244] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  487.053017][T15230] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  487.147673][T15244] ntfs: volume version 3.1.
[  487.467652][ T5778] Bluetooth: hci0: Zero size dump init pkt
[  487.499344][T13398] ocfs2: Unmounting device (7,7) on (node local)
[  487.837161][T15259] set_capacity_and_notify: 2 callbacks suppressed
[  487.837178][T15259] loop5: detected capacity change from 0 to 64
[  487.978685][T15263] loop7: detected capacity change from 0 to 512
[  487.986526][T15263] EXT4-fs: Ignoring removed orlov option
[  487.997569][T15263] EXT4-fs: Ignoring removed mblk_io_submit option
[  488.008154][T15247] loop2: detected capacity change from 0 to 32768
[  488.037068][T15263] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal
[  488.051505][T15247] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3358 (15247)
[  488.119737][T15263] 9pnet_fd: Insufficient options for proto=fd
[  488.126741][T15247] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  488.164309][T15247] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  488.210379][T15247] BTRFS info (device loop2): turning off barriers
[  488.230713][T15247] BTRFS info (device loop2): turning on sync discard
[  488.239907][T15247] BTRFS info (device loop2): doing ref verification
[  488.247373][T15247] BTRFS info (device loop2): using free space tree
[  488.384714][T15247] BTRFS info (device loop2): enabling ssd optimizations
[  488.707550][ T5776] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  489.399863][T15308] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  489.440015][T15306] loop7: detected capacity change from 0 to 8192
[  489.496530][T15306] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  489.512039][T15306] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  489.522382][T15306] REISERFS (device loop7): using ordered data mode
[  489.529044][T15306] reiserfs: using flush barriers
[  489.538867][T15306] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  489.588281][T15294] loop6: detected capacity change from 0 to 32768
[  489.609394][T15306] REISERFS (device loop7): checking transaction log (loop7)
[  489.634607][T15306] REISERFS (device loop7): Using r5 hash to sort names
[  489.649980][T15306] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  489.676779][T15294] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  490.033087][T15294] XFS (loop6): Ending clean mount
[  490.062227][T15294] XFS (loop6): Quotacheck needed: Please wait.
[  490.126500][T15327] loop7: detected capacity change from 0 to 512
[  490.159819][T15327] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  490.245621][T15294] XFS (loop6): Quotacheck: Done.
[  490.262261][T15327] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.3382: casefold flag without casefold feature
[  490.334501][T15327] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.3382: couldn't read orphan inode 15 (err -117)
[  490.414103][T15327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  490.455259][T11021] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  490.533480][T15327] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm syz.7.3382: bg 0: block 5: invalid block bitmap
[  490.561773][T15327] CacheFiles: mkdir cache failed with error -28
[  490.593382][T15327] CacheFiles: Failed to register: -28
[  490.781473][T13398] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.593815][  T971] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  491.707446][T15376] loop7: detected capacity change from 0 to 2048
[  491.739952][T15376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  491.815486][  T971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  491.851726][  T971] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  491.872000][  T971] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  491.886631][  T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.935404][  T971] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  492.222118][T15388] vxcan1: tx drop: invalid da for name 0x00000000000000c8
[  492.336017][T15394] loop5: detected capacity change from 0 to 512
[  492.514049][T15396] loop7: detected capacity change from 0 to 4096
[  493.150281][T15410] ieee802154 phy0 wpan0: encryption failed: -22
[  493.285448][T15412] loop6: detected capacity change from 0 to 512
[  493.340742][T15412] EXT4-fs: Invalid want_extra_isize 206
[  493.389371][T15414] loop7: detected capacity change from 0 to 1024
[  493.707693][  T971] usb 3-1: USB disconnect, device number 21
[  493.725276][  T971] idmouse 3-1:1.0: disconnected
[  493.802142][T15402] loop5: detected capacity change from 0 to 32768
[  493.830654][T15402] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  493.845293][T15402] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  493.906437][T15402] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  493.926270][ T5827] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  493.933405][ T5827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  494.040100][ T5827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 99ms
[  494.073115][ T5827] gfs2: fsid=syz:syz.0: jid=0: Done
[  494.078428][T15402] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  494.624734][T15402] gfs2: fsid=syz:syz.0: found 1 quota changes
[  494.887987][T15429] loop7: detected capacity change from 0 to 32768
[  494.911377][T10116] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  494.911377][T10116]   inode = 11 2339
[  494.911377][T10116]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  494.934726][T10116] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  494.948992][T10116] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:10116 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  494.960394][T15429] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.3429 (15429)
[  494.981314][T10116] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  494.990513][T10116] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  495.008934][T15429] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  495.031618][T10116] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  495.043219][T10116] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  495.049858][T15429] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  495.050111][T15429] BTRFS info (device loop7): turning off barriers
[  495.080559][T10116] gfs2: fsid=syz:syz.0: File system withdrawn
[  495.086807][T10116] CPU: 0 PID: 10116 Comm: syz-executor Not tainted syzkaller #0
[  495.094495][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  495.102713][T15429] BTRFS info (device loop7): turning on sync discard
[  495.104603][T10116] Call Trace:
[  495.114961][T10116]  <TASK>
[  495.118048][T10116]  dump_stack_lvl+0x18c/0x250
[  495.122952][T10116]  ? show_regs_print_info+0x20/0x20
[  495.128288][T10116]  ? load_image+0x420/0x420
[  495.132896][T10116]  ? kobject_uevent_env+0x368/0x890
[  495.138257][T10116]  gfs2_withdraw+0xe16/0x1400
[  495.140327][T15429] BTRFS info (device loop7): doing ref verification
[  495.143476][T10116]  ? gfs2_lm+0x240/0x240
[  495.143539][T10116]  ? gfs2_consist_inode_i+0xf5/0x110
[  495.143581][T10116]  gfs2_inode_refresh+0xb3c/0x11a0
[  495.143618][T10116]  ? gfs2_inode_metasync+0xf0/0xf0
[  495.143649][T10116]  ? gfs2_glock_nq+0xe2e/0x1440
[  495.143703][T10116]  gfs2_instantiate+0x162/0x220
[  495.143744][T10116]  gfs2_glock_wait+0x1d4/0x2a0
[  495.143784][T10116]  do_sync+0x4b8/0xd90
[  495.143811][T10116]  ? gfs2_quota_sync+0x411/0x5a0
[  495.143844][T10116]  ? bh_get+0x760/0x760
[  495.143873][T10116]  ? gfs2_quota_sync+0x318/0x5a0
[  495.143905][T10116]  ? gfs2_quota_sync+0x411/0x5a0
[  495.143929][T10116]  ? do_raw_spin_unlock+0x121/0x230
[  495.144023][T10116]  ? do_raw_spin_unlock+0x121/0x230
[  495.174310][T15429] BTRFS info (device loop7): using free space tree
[  495.177170][T10116]  gfs2_quota_sync+0x411/0x5a0
[  495.239047][T10116]  gfs2_sync_fs+0x4c/0xb0
[  495.243633][T10116]  sync_filesystem+0xea/0x220
[  495.248939][T10116]  generic_shutdown_super+0x6f/0x2b0
[  495.254339][T10116]  kill_block_super+0x44/0x90
[  495.259376][T10116]  deactivate_locked_super+0x97/0x100
[  495.265268][T10116]  cleanup_mnt+0x3d7/0x460
[  495.270021][T10116]  task_work_run+0x1d4/0x260
[  495.275538][T10116]  ? task_work_cancel+0x220/0x220
[  495.280786][T10116]  ? exit_to_user_mode_loop+0x3b/0x110
[  495.288940][T10116]  exit_to_user_mode_loop+0xe6/0x110
[  495.294672][T10116]  exit_to_user_mode_prepare+0xee/0x180
[  495.302237][T10116]  syscall_exit_to_user_mode+0x1a/0x50
[  495.308127][T10116]  do_syscall_64+0x61/0xb0
[  495.313151][T10116]  ? clear_bhb_loop+0x40/0x90
[  495.318320][T10116]  ? clear_bhb_loop+0x40/0x90
[  495.323171][T10116]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  495.329499][T10116] RIP: 0033:0x7f61b379f417
[  495.334100][T10116] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  495.355646][T10116] RSP: 002b:00007ffe7b31d498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  495.365629][T10116] RAX: 0000000000000000 RBX: 00007f61b3834ccb RCX: 00007f61b379f417
[  495.374292][T10116] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7b31d550
[  495.382872][T10116] RBP: 00007ffe7b31d550 R08: 00007ffe7b31e550 R09: 00000000ffffffff
[  495.391362][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b31e5e0
[  495.400351][T10116] R13: 00007f61b3834ccb R14: 0000000000073b63 R15: 00007ffe7b31e620
[  495.408686][T10116]  </TASK>
[  495.532723][T15431] loop6: detected capacity change from 0 to 32768
[  495.611790][T15431] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  495.634379][T15429] BTRFS info (device loop7): enabling ssd optimizations
[  495.890704][T13398] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  495.930041][T15431] XFS (loop6): Ending clean mount
[  495.985447][T15431] XFS (loop6): Quotacheck needed: Please wait.
[  496.179402][T15431] XFS (loop6): Quotacheck: Done.
[  496.441472][T15472] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  496.456107][T11021] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  496.707146][T15479] loop5: detected capacity change from 0 to 64
[  497.099093][T15489] loop5: detected capacity change from 0 to 2048
[  497.157056][T15489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  497.317771][T15496] sctp: [Deprecated]: syz.7.3447 (pid 15496) Use of int in maxseg socket option.
[  497.317771][T15496] Use struct sctp_assoc_value instead
[  497.641700][T15508] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3454'.
[  497.664433][T15511] loop6: detected capacity change from 0 to 256
[  497.676526][T15511] exfat: Deprecated parameter 'utf8'
[  497.693750][T15512] loop2: detected capacity change from 0 to 256
[  497.735431][T15511] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  497.793237][  T971] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  497.998651][  T971] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  498.010613][  T971] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  498.032553][  T971] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  498.045986][  T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  498.087010][  T971] usb 6-1: SerialNumber: syz
[  498.101527][T15517] loop2: detected capacity change from 0 to 4096
[  498.365531][  T971] usb 6-1: 0:2 : does not exist
[  498.419604][  T971] usb 6-1: USB disconnect, device number 11
[  498.520721][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  498.668741][T15528] sctp: [Deprecated]: syz.2.3463 (pid 15528) Use of int in maxseg socket option.
[  498.668741][T15528] Use struct sctp_assoc_value instead
[  499.016054][T15537] loop2: detected capacity change from 0 to 256
[  499.033038][T15537] exfat: Deprecated parameter 'utf8'
[  499.038960][T15537] exfat: Deprecated parameter 'utf8'
[  499.051988][T15529] loop6: detected capacity change from 0 to 32768
[  499.083799][T15529] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.3462 (15529)
[  499.120819][T15529] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  499.149068][T15529] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  499.167429][T15529] BTRFS info (device loop6): turning off barriers
[  499.191649][T15537] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  499.204055][T15529] BTRFS info (device loop6): turning on sync discard
[  499.229678][T15529] BTRFS info (device loop6): doing ref verification
[  499.248754][T15529] BTRFS info (device loop6): using free space tree
[  499.350262][ T5085] Bluetooth: hci1: command 0x0406 tx timeout
[  499.444473][T15529] BTRFS info (device loop6): enabling ssd optimizations
[  499.595650][T15559] loop2: detected capacity change from 0 to 512
[  499.632541][T15559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  499.701754][T15559] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.3469: bad orphan inode 131083
[  499.763324][T15559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  499.786731][T11021] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  500.062651][T15569] loop7: detected capacity change from 0 to 8
[  500.775009][T15583] serio: Serial port ttyS3
[  501.049923][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.385451][T15607] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3492'.
[  501.430840][T15610] netlink: 'syz.7.3494': attribute type 1 has an invalid length.
[  501.460283][T15610] netlink: 'syz.7.3494': attribute type 2 has an invalid length.
[  501.697516][T15617] loop7: detected capacity change from 0 to 4096
[  501.771524][T15624] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  501.859885][T15617] NILFS (loop7): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0
[  501.905328][T15617] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=3)
[  501.983701][T15617] Remounting filesystem read-only
[  502.016073][T15617] NILFS (loop7): error -5 preparing GC: cannot mark copying blocks dirty
[  502.235676][T15634] loop2: detected capacity change from 0 to 4096
[  502.264107][T15634] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  502.358149][T15634] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  502.390296][T15634] ntfs3: loop2: mft corrupted
[  502.395190][T15634] ntfs3: loop2: Failed to load $Extend (-22).
[  502.422326][T15634] ntfs3: loop2: Failed to initialize $Extend.
[  502.461475][T15634] ntfs3: loop2: ino=1e, mi_enum_attr
[  502.475759][T15634] ntfs3: loop2: ino=1e, mi_enum_attr
[  502.538058][T15642] loop5: detected capacity change from 0 to 8192
[  502.594268][T15642] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  502.608342][T15642] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  502.621302][T15642] REISERFS (device loop5): using ordered data mode
[  502.628379][T15642] reiserfs: using flush barriers
[  502.638460][T15642] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  502.692399][T15642] REISERFS (device loop5): checking transaction log (loop5)
[  502.738301][T15642] REISERFS (device loop5): Using r5 hash to sort names
[  502.760470][T15642] REISERFS (device loop5): using 3.5.x disk format
[  502.804929][T15642] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  502.952972][T15653] netlink: 'syz.6.3511': attribute type 12 has an invalid length.
[  502.973588][T15653] netlink: 'syz.6.3511': attribute type 29 has an invalid length.
[  502.995012][T15653] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3511'.
[  504.043428][T15682] loop2: detected capacity change from 0 to 32768
[  504.116224][T15682] blkno = 8ed2c, nblocks = 1
[  504.132973][T15682] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  504.132973][T15682] 
[  504.175997][T15682] ERROR: (device loop2): remounting filesystem as read-only
[  504.183200][T15692] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  504.183200][T15692] 
[  504.209994][T15692] ERROR: (device loop2): remounting filesystem as read-only
[  504.236227][T15692] syz.2.3525: attempt to access beyond end of device
[  504.236227][T15692] loop2: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  504.239378][T15682] ialloc: diAlloc returned -17!
[  504.384227][  T112] blkno = 8ed2c, nblocks = 1
[  504.389096][  T112] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  504.389096][  T112] 
[  504.638602][T15700] block device autoloading is deprecated and will be removed.
[  504.659413][T15700] syz.5.3533: attempt to access beyond end of device
[  504.659413][T15700] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  504.908327][T15711] loop6: detected capacity change from 0 to 256
[  505.748107][T15721] loop6: detected capacity change from 0 to 32768
[  505.795876][T15731] loop5: detected capacity change from 0 to 8192
[  505.815981][T15731] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  505.829673][T15731] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  505.839683][T15731] REISERFS (device loop5): using ordered data mode
[  505.847640][T15731] reiserfs: using flush barriers
[  505.864642][T15731] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  505.922500][T15721] find_entry called with index = 0
[  505.934516][T15731] REISERFS (device loop5): checking transaction log (loop5)
[  505.958295][T15731] REISERFS (device loop5): Using tea hash to sort names
[  505.971736][T15721] read_mapping_page failed!
[  505.976339][T15721] ERROR: (device loop6): txCommit: 
[  505.976339][T15721] 
[  505.985046][T15731] REISERFS (device loop5): using 3.5.x disk format
[  506.386717][T15749] loop6: detected capacity change from 0 to 1024
[  506.419538][T15749] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  506.444635][T15749] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  506.472252][T15749] EXT4-fs error (device loop6): ext4_get_journal_inode:5820: inode #32: comm syz.6.3555: iget: special inode unallocated
[  506.508795][T15749] EXT4-fs (loop6): no journal found
[  506.518802][T15749] EXT4-fs (loop6): can't get journal size
[  506.531080][T15749] EXT4-fs (loop6): filesystem is read-only
[  506.539282][T15749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  506.777165][T15763] program syz.5.3559 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  506.879853][T11021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.041291][T15768] loop5: detected capacity change from 0 to 512
[  507.056273][T15766] loop7: detected capacity change from 0 to 2048
[  507.093046][T15771] pimreg: tun_chr_ioctl cmd 1074025677
[  507.127806][T15771] pimreg: linktype set to 774
[  507.165911][T15766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.185771][T15768] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[  507.231313][T15766] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  507.237793][T15768] System zones: 
[  507.262908][    C0] vkms_vblank_simulate: vblank timer overrun
[  507.320544][T15768] 0-2, 18-18, 34-34
[  507.334036][T15768] EXT4-fs (loop5): 1 orphan inode deleted
[  507.372454][T15779] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  507.394874][T15768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.414906][T15768] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  507.518238][T15768] EXT4-fs (loop5): resizing filesystem from 64 to 2 blocks
[  507.531836][T13398] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.545920][T15768] EXT4-fs warning (device loop5): ext4_resize_fs:2048: can't shrink FS - resize aborted
[  507.590278][T10116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.627595][T15786] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  507.666217][T15786] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  508.156089][T15807] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma?
[  508.924346][T15842] loop2: detected capacity change from 0 to 1024
[  508.939110][T15842] EXT4-fs: Ignoring removed bh option
[  508.961237][T15842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  509.192349][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.412436][T15863] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3603'.
[  509.450926][T15865] loop2: detected capacity change from 0 to 256
[  509.691917][ T5085] Bluetooth: hci3: command tx timeout
[  509.732134][T15875] netlink: 'syz.7.3608': attribute type 1 has an invalid length.
[  510.294541][T15899] program syz.7.3619 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  510.495881][T15907] MTRR 2 not used
[  510.744136][T15918] loop5: detected capacity change from 0 to 8
[  510.908487][T15922] loop2: detected capacity change from 0 to 1024
[  510.934521][T15922] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  510.974269][T15922] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  511.018842][T15922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  511.089465][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.269200][ T5085] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1
[  511.276194][ T5085] Bluetooth: hci0: unexpected event for opcode 0x203e
[  511.298699][T15935] netlink: 'syz.7.3636': attribute type 1 has an invalid length.
[  511.349149][T15935] netlink: 4912 bytes leftover after parsing attributes in process `syz.7.3636'.
[  511.394867][ T5085] Bluetooth: hci0: SCO packet for unknown connection handle 201
[  511.645535][T15951] loop6: detected capacity change from 0 to 128
[  512.058678][T15967] loop5: detected capacity change from 0 to 512
[  512.083316][T15967] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  512.164603][T15967] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.3650: bad orphan inode 131083
[  512.281783][T15967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.347422][T15967] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.3650: path /newroot/527/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1
[  512.507736][T10116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.753399][T15973] loop2: detected capacity change from 0 to 32768
[  512.774453][T15973] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3653 (15973)
[  512.827416][T15973] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  512.856913][ T5085] Bluetooth: hci3: command tx timeout
[  512.867002][T15973] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  512.876514][T15973] BTRFS info (device loop2): enabling auto defrag
[  512.902895][T15973] BTRFS info (device loop2): force clearing of disk cache
[  512.910798][T15973] BTRFS info (device loop2): ignoring data csums
[  512.917317][T15973] BTRFS info (device loop2): turning on async discard
[  512.924742][T15973] BTRFS info (device loop2): setting nodatacow, compression disabled
[  512.942645][T15973] BTRFS info (device loop2): turning off async discard
[  512.949610][T15973] BTRFS info (device loop2): disabling free space tree
[  513.128444][T15975] loop7: detected capacity change from 0 to 32768
[  513.148041][T15975] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.3654 (15975)
[  513.228724][T15973] BTRFS error (device loop2: state MC): ignoredatacsums must be used with ro mount option
[  513.255432][T15975] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  513.294861][T15975] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  513.316345][T15975] BTRFS info (device loop7): setting nodatasum
[  513.322585][T15975] BTRFS info (device loop7): force zlib compression, level 3
[  513.369735][T15975] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8)
[  513.381951][ T5776] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  513.405363][T15975] BTRFS info (device loop7): use lzo compression, level 0
[  513.417150][T15975] BTRFS info (device loop7): turning on flush-on-commit
[  513.434726][T15975] BTRFS info (device loop7): enabling auto defrag
[  513.441464][T15975] BTRFS info (device loop7): max_inline at 4096
[  513.482344][T15975] BTRFS info (device loop7): using free space tree
[  513.706776][T15975] BTRFS info (device loop7): enabling ssd optimizations
[  513.925128][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  513.925146][   T28] audit: type=1800 audit(1791484052.637:373): pid=15975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3654" name="file1" dev="loop7" ino=260 res=0 errno=0
[  514.416024][T13398] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  514.469094][T16035] loop5: detected capacity change from 0 to 512
[  514.637078][T16035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  514.763908][T16035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  514.831491][ T5783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop7 scanned by udevd (5783)
[  514.849071][T16035] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  514.965854][T16035] EXT4-fs error (device loop5): ext4_empty_dir:3147: inode #12: block 32: comm syz.5.3668: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  515.081398][T16035] EXT4-fs (loop5): Remounting filesystem read-only
[  515.088002][T16035] EXT4-fs warning (device loop5): ext4_empty_dir:3149: inode #12: comm syz.5.3668: directory missing '.'
[  515.316174][T10116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.625957][T16056] bonding: bond0 is being created...
[  515.665945][T16056] bonding: bond0 already exists
[  515.672913][T16060] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead
[  515.700857][T16060] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead
[  515.741645][T16060] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead
[  515.763791][T16060] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead
[  515.782082][T16060] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead
[  515.793008][T16060] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead
[  515.821169][T16060] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  515.858674][T16060] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  515.936649][T16065] loop5: detected capacity change from 0 to 1024
[  516.119280][T16067] loop6: detected capacity change from 0 to 8192
[  524.496521][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  524.504544][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  526.711523][ T5085] Bluetooth: hci3: command 0x0406 tx timeout
[  590.177533][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  590.184140][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  655.860997][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  655.872362][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  670.906531][   T29] INFO: task syz-executor:5762 blocked for more than 143 seconds.
[  670.914419][   T29]       Not tainted syzkaller #0
[  670.919829][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  670.932600][   T29] task:syz-executor    state:D stack:20584 pid:5762  ppid:5761   flags:0x00004002
[  670.942685][   T29] Call Trace:
[  670.946021][   T29]  <TASK>
[  670.951416][   T29]  __schedule+0x15ae/0x4660
[  670.956252][   T29]  ? mark_lock+0x94/0x320
[  670.961029][   T29]  ? asan.module_dtor+0x20/0x20
[  670.966812][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  670.972077][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  670.978218][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  670.983741][   T29]  schedule+0xbd/0x170
[  670.988319][   T29]  io_schedule+0x80/0xd0
[  670.992771][   T29]  bit_wait_io+0x11/0xd0
[  670.997088][   T29]  __wait_on_bit+0x9f/0x2c0
[  671.002234][   T29]  ? bit_wait+0xd0/0xd0
[  671.007206][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  671.012904][   T29]  ? bit_wait+0xd0/0xd0
[  671.020281][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  671.025306][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  671.032083][   T29]  ? bit_waitqueue+0x30/0x30
[  671.042009][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  671.047708][   T29]  do_get_write_access+0x5c9/0xe00
[  671.053751][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  671.059887][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  671.066243][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  671.073822][   T29]  ? __might_sleep+0xe0/0xe0
[  671.079898][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  671.085615][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  671.091216][   T29]  ext4_dirty_inode+0xcb/0x110
[  671.096039][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  671.101983][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  671.107088][   T29]  file_update_time+0x187/0x1a0
[  671.112126][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  671.117313][   T29]  ? do_wp_page+0x4ce/0x34d0
[  671.122125][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  671.128413][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  671.134360][   T29]  do_page_mkwrite+0x153/0x3f0
[  671.139162][   T29]  do_wp_page+0xd4d/0x34d0
[  671.143915][   T29]  ? folio_put+0xd0/0xd0
[  671.149446][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  671.155490][   T29]  ? __rwlock_init+0x150/0x150
[  671.160362][   T29]  handle_mm_fault+0x1306/0x4a50
[  671.166052][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  671.171178][   T29]  ? numa_migrate_prep+0x350/0x350
[  671.177043][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  671.182464][   T29]  do_user_addr_fault+0x736/0x12d0
[  671.189242][   T29]  exc_page_fault+0x64/0x100
[  671.193927][   T29]  ? clear_bhb_loop+0x40/0x90
[  671.199298][   T29]  asm_exc_page_fault+0x26/0x30
[  671.204231][   T29] RIP: 0033:0x7f2851c7c762
[  671.209279][   T29] RSP: 002b:00007ffe89b8d030 EFLAGS: 00010202
[  671.215449][   T29] RAX: 00007f284fb28000 RBX: 0000555576869400 RCX: 0000000000000004
[  671.226419][   T29] RDX: 0000000000002379 RSI: 00005555768df798 RDI: 0000000000000010
[  671.234904][   T29] RBP: 00007ffe89b8d530 R08: 00005555768df830 R09: 0000000000000090
[  671.243084][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe89b8d370
[  671.252339][   T29] R13: 00007ffe89b8d160 R14: 585858582e7a7973 R15: 00007ffe89b8d0b0
[  671.263111][   T29]  </TASK>
[  671.266251][   T29] INFO: task syz.6.3680:16066 blocked for more than 143 seconds.
[  671.274093][   T29]       Not tainted syzkaller #0
[  671.279067][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  671.287901][   T29] task:syz.6.3680      state:D stack:26536 pid:16066 ppid:11021  flags:0x00004004
[  671.297280][   T29] Call Trace:
[  671.300606][   T29]  <TASK>
[  671.304636][   T29]  __schedule+0x15ae/0x4660
[  671.309217][   T29]  ? mark_lock+0x94/0x320
[  671.313646][   T29]  ? asan.module_dtor+0x20/0x20
[  671.318720][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  671.323882][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  671.330347][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  671.339377][   T29]  schedule+0xbd/0x170
[  671.343537][   T29]  io_schedule+0x80/0xd0
[  671.348002][   T29]  bit_wait_io+0x11/0xd0
[  671.352352][   T29]  __wait_on_bit+0x9f/0x2c0
[  671.357605][   T29]  ? bit_wait+0xd0/0xd0
[  671.361830][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  671.368070][   T29]  ? bit_wait+0xd0/0xd0
[  671.372287][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  671.377156][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  671.382257][   T29]  ? bit_waitqueue+0x30/0x30
[  671.386917][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  671.392414][   T29]  do_get_write_access+0x5c9/0xe00
[  671.397603][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  671.403717][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  671.410002][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  671.416394][   T29]  ? __might_sleep+0xe0/0xe0
[  671.421810][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  671.427707][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  671.433840][   T29]  ext4_dirty_inode+0xcb/0x110
[  671.438655][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  671.444672][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  671.449773][   T29]  file_update_time+0x187/0x1a0
[  671.457897][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  671.463794][   T29]  ? filemap_fault+0x103c/0x1540
[  671.468985][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  671.476568][   T29]  ? pte_alloc_one+0x3b6/0x540
[  671.481842][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  671.490100][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  671.496194][   T29]  do_page_mkwrite+0x153/0x3f0
[  671.501043][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  671.507414][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  671.512611][   T29]  ? numa_migrate_prep+0x350/0x350
[  671.518765][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  671.525173][   T29]  do_user_addr_fault+0x736/0x12d0
[  671.530490][   T29]  exc_page_fault+0x64/0x100
[  671.535157][   T29]  asm_exc_page_fault+0x26/0x30
[  671.540280][   T29] RIP: 0033:0x7ffa9cc72889
[  671.544871][   T29] RSP: 002b:00007fffe5b96620 EFLAGS: 00010202
[  671.551132][   T29] RAX: 0000001b34c24000 RBX: 0000000000000000 RCX: 00000000005ffde8
[  671.559401][   T29] RDX: 0000001b34c23ffc RSI: 00000000005ffde8 RDI: 00007ffa9db55700
[  671.567636][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffa9d012000
[  671.575889][   T29] R10: 00007ffa9db55700 R11: 0000000000000000 R12: 0000000000000000
[  671.588585][   T29] R13: 000000000000c986 R14: ffffffff81322060 R15: 00007ffa9db55720
[  671.600037][   T29]  ? fpregs_assert_state_consistent+0xb0/0xe0
[  671.606413][   T29]  </TASK>
[  671.617210][   T29] INFO: task syz.2.3681:16068 blocked for more than 144 seconds.
[  671.627391][   T29]       Not tainted syzkaller #0
[  671.632408][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  671.641262][   T29] task:syz.2.3681      state:D stack:27560 pid:16068 ppid:5776   flags:0x00004004
[  671.651577][   T29] Call Trace:
[  671.655136][   T29]  <TASK>
[  671.658122][   T29]  __schedule+0x15ae/0x4660
[  671.662708][   T29]  ? mark_lock+0x94/0x320
[  671.669878][   T29]  ? asan.module_dtor+0x20/0x20
[  671.674783][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  671.680306][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  671.686282][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  671.692599][   T29]  schedule+0xbd/0x170
[  671.696759][   T29]  io_schedule+0x80/0xd0
[  671.701318][   T29]  bit_wait_io+0x11/0xd0
[  671.705660][   T29]  __wait_on_bit+0x9f/0x2c0
[  671.711110][   T29]  ? bit_wait+0xd0/0xd0
[  671.715399][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  671.721500][   T29]  ? bit_wait+0xd0/0xd0
[  671.725723][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  671.730820][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  671.735940][   T29]  ? bit_waitqueue+0x30/0x30
[  671.740826][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  671.746280][   T29]  do_get_write_access+0x5c9/0xe00
[  671.751846][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  671.757885][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  671.764297][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  671.770488][   T29]  ? __might_sleep+0xe0/0xe0
[  671.775228][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  671.780845][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  671.786519][   T29]  ext4_dirty_inode+0xcb/0x110
[  671.791337][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  671.797327][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  671.803455][   T29]  file_update_time+0x187/0x1a0
[  671.808551][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  671.813625][   T29]  ? filemap_fault+0x103c/0x1540
[  671.818707][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  671.824481][   T29]  ? pte_alloc_one+0x3b6/0x540
[  671.830057][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  671.836509][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  671.841610][   T29]  do_page_mkwrite+0x153/0x3f0
[  671.846459][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  671.852253][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  671.857302][   T29]  ? numa_migrate_prep+0x350/0x350
[  671.862595][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  671.867962][   T29]  do_user_addr_fault+0x736/0x12d0
[  671.873480][   T29]  exc_page_fault+0x64/0x100
[  671.878223][   T29]  ? clear_bhb_loop+0x40/0x90
[  671.883603][   T29]  asm_exc_page_fault+0x26/0x30
[  671.888632][   T29] RIP: 0033:0x7f318266bb23
[  671.893313][   T29] RSP: 002b:00007fff93855440 EFLAGS: 00010246
[  671.899445][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d764000
[  671.907597][   T29] RDX: 0000001b2d724000 RSI: 0000000000400000 RDI: 00007f31829e2708
[  671.916911][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  671.925013][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  671.934296][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff938556d0
[  671.942362][   T29]  </TASK>
[  671.946637][   T29] INFO: task syz.5.3682:16069 blocked for more than 144 seconds.
[  671.959183][   T29]       Not tainted syzkaller #0
[  671.964161][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  671.973031][   T29] task:syz.5.3682      state:D stack:27560 pid:16069 ppid:10116  flags:0x00004004
[  671.982343][   T29] Call Trace:
[  671.986052][   T29]  <TASK>
[  671.989039][   T29]  __schedule+0x15ae/0x4660
[  671.993629][   T29]  ? mark_lock+0x94/0x320
[  671.999119][   T29]  ? asan.module_dtor+0x20/0x20
[  672.004044][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  672.009226][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  672.015176][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  672.021188][   T29]  schedule+0xbd/0x170
[  672.025390][   T29]  io_schedule+0x80/0xd0
[  672.029760][   T29]  bit_wait_io+0x11/0xd0
[  672.034067][   T29]  __wait_on_bit+0x9f/0x2c0
[  672.038632][   T29]  ? bit_wait+0xd0/0xd0
[  672.042930][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  672.048444][   T29]  ? bit_wait+0xd0/0xd0
[  672.052784][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  672.057616][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  672.062841][   T29]  ? bit_waitqueue+0x30/0x30
[  672.067491][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  672.074110][   T29]  do_get_write_access+0x5c9/0xe00
[  672.079321][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  672.086044][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  672.092284][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  672.100899][   T29]  ? __might_sleep+0xe0/0xe0
[  672.105954][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  672.111570][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  672.117334][   T29]  ext4_dirty_inode+0xcb/0x110
[  672.122287][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  672.128220][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  672.133944][   T29]  file_update_time+0x187/0x1a0
[  672.138996][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  672.144110][   T29]  ? filemap_fault+0x103c/0x1540
[  672.149296][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  672.155392][   T29]  ? pte_alloc_one+0x3b6/0x540
[  672.160277][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  672.166679][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  672.171861][   T29]  do_page_mkwrite+0x153/0x3f0
[  672.176979][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  672.182275][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  672.187303][   T29]  ? numa_migrate_prep+0x350/0x350
[  672.194010][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  672.199604][   T29]  do_user_addr_fault+0x736/0x12d0
[  672.205289][   T29]  exc_page_fault+0x64/0x100
[  672.210234][   T29]  ? clear_bhb_loop+0x40/0x90
[  672.215466][   T29]  asm_exc_page_fault+0x26/0x30
[  672.222065][   T29] RIP: 0033:0x7f61b366bb23
[  672.226819][   T29] RSP: 002b:00007ffe7b31e390 EFLAGS: 00010246
[  672.233593][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33c64000
[  672.242223][   T29] RDX: 0000001b33c24000 RSI: 0000000000400000 RDI: 00007f61b39e2708
[  672.250786][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  672.259143][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  672.267523][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe7b31e620
[  672.285523][   T29]  </TASK>
[  672.288646][   T29] 
[  672.288646][   T29] Showing all locks held in the system:
[  672.300975][   T29] 1 lock held by khungtaskd/29:
[  672.305895][   T29]  #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  672.326098][   T29] 6 locks held by kworker/u4:5/1000:
[  672.331576][   T29]  #0: ffff88801ee66d38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  672.347509][   T29]  #1: ffffc90004637d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  672.378669][   T29]  #2: ffff888032a9a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  672.391783][   T29]  #3: ffff888032a9cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  672.402484][   T29]  #4: ffff888032a9e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  672.419029][   T29]  #5: ffff8880309bc888 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90
[  672.429075][   T29] 2 locks held by klogd/5128:
[  672.433809][   T29]  #0: ffff8880b8d3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[  672.451232][   T29]  #1: ffff8880b8d28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660
[  672.465982][   T29] 2 locks held by getty/5532:
[  672.477019][   T29]  #0: ffff88814cb8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  672.495306][   T29]  #1: ffffc900032862f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  672.508100][   T29] 3 locks held by syz-executor/5762:
[  672.518085][   T29]  #0: ffff88802fa9baa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  672.530068][   T29]  #1: ffff888032a9a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  672.547158][   T29]  #2: ffff888032a9e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  672.558217][   T29] 3 locks held by kworker/1:5/5843:
[  672.571215][   T29] 3 locks held by syz.6.3680/16066:
[  672.577667][   T29]  #0: ffff88807b0ec420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  672.592347][   T29]  #1: ffff888032a9a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  672.602489][   T29]  #2: ffff888032a9e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  672.620440][   T29] 3 locks held by syz.2.3681/16068:
[  672.625716][   T29]  #0: ffff888032df27a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  672.635837][   T29]  #1: ffff888032a9a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  672.646048][   T29]  #2: ffff888032a9e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  672.656084][   T29] 3 locks held by syz.5.3682/16069:
[  672.661563][   T29]  #0: ffff88807b0ef3a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  672.681162][   T29]  #1: ffff888032a9a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  672.691086][   T29]  #2: ffff888032a9e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  672.702645][   T29] 
[  672.705037][   T29] =============================================
[  672.705037][   T29] 
[  672.713808][   T29] NMI backtrace for cpu 0
[  672.718178][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  672.725523][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  672.735629][   T29] Call Trace:
[  672.738970][   T29]  <TASK>
[  672.741960][   T29]  dump_stack_lvl+0x18c/0x250
[  672.746881][   T29]  ? __wake_up_klogd+0xd9/0x100
[  672.751811][   T29]  ? show_regs_print_info+0x20/0x20
[  672.757243][   T29]  ? load_image+0x420/0x420
[  672.761830][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  672.766832][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  672.773044][   T29]  ? load_image+0x420/0x420
[  672.777690][   T29]  ? wq_watchdog_touch+0xef/0x170
[  672.782862][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  672.789012][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  672.795048][   T29]  watchdog+0xf59/0xfa0
[  672.799978][   T29]  ? watchdog+0x1e1/0xfa0
[  672.804911][   T29]  kthread+0x2fa/0x390
[  672.809042][   T29]  ? hungtask_pm_notify+0x50/0x50
[  672.814127][   T29]  ? kthread_blkcg+0xd0/0xd0
[  672.818771][   T29]  ret_from_fork+0x48/0x80
[  672.823248][   T29]  ? kthread_blkcg+0xd0/0xd0
[  672.827893][   T29]  ret_from_fork_asm+0x11/0x20
[  672.832772][   T29]  </TASK>
[  672.837087][   T29] Sending NMI from CPU 0 to CPUs 1:
[  672.842582][    C1] NMI backtrace for cpu 1
[  672.842593][    C1] CPU: 1 PID: 5128 Comm: klogd Not tainted syzkaller #0
[  672.842610][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  672.842621][    C1] RIP: 0010:arch_stack_walk+0x115/0x190
[  672.842647][    C1] Code: ff ff 4c 89 e6 4c 89 fa e8 b8 bf 08 00 44 8b bd 78 ff ff ff 31 ff 44 89 fe e8 b7 71 54 00 45 85 ff 74 46 4c 8d bd 78 ff ff ff <4c> 89 ff e8 73 8f 08 00 49 89 c4 31 ff 48 89 c6 e8 26 72 54 00 4d
[  672.842662][    C1] RSP: 0018:ffffc900032bf468 EFLAGS: 00000293
[  672.842678][    C1] RAX: ffffffff813322f2 RBX: ffffc900032bf520 RCX: ffff88807d853c00
[  672.842691][    C1] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  672.842702][    C1] RBP: ffffc900032bf4f0 R08: ffff88807d853c00 R09: 0000000000000003
[  672.842714][    C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8a92c375
[  672.842746][    C1] R13: 00000000ffffffff R14: ffffffff81762b60 R15: ffffc900032bf468
[  672.842759][    C1] FS:  00007f70d25b6c80(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  672.842774][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  672.842792][    C1] CR2: 000055dc01856168 CR3: 000000007df53000 CR4: 00000000003506e0
[  672.842808][    C1] Call Trace:
[  672.842814][    C1]  <TASK>
[  672.842824][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  672.842860][    C1]  stack_trace_save+0xaa/0x100
[  672.842884][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  672.842908][    C1]  ? kasan_set_track+0x5f/0x70
[  672.842928][    C1]  ? kasan_set_track+0x4e/0x70
[  672.842947][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  672.842966][    C1]  ? slab_post_alloc_hook+0x6a/0x4d0
[  672.842983][    C1]  kasan_set_track+0x4e/0x70
[  672.843003][    C1]  ? kasan_set_track+0x4e/0x70
[  672.843021][    C1]  ? __kasan_kmalloc+0x8f/0xa0
[  672.843041][    C1]  ? __kmalloc_node_track_caller+0xb4/0x230
[  672.843068][    C1]  ? kmalloc_reserve+0x116/0x240
[  672.843197][    C1]  ? __alloc_skb+0x138/0x2c0
[  672.843217][    C1]  ? alloc_skb_with_frags+0xcd/0x7a0
[  672.843235][    C1]  ? sock_alloc_send_pskb+0x883/0x9a0
[  672.843253][    C1]  ? unix_dgram_sendmsg+0x5a9/0x16e0
[  672.843302][    C1]  ? __sys_sendto+0x4a9/0x6b0
[  672.843355][    C1]  ? __x64_sys_sendto+0xde/0xf0
[  672.843381][    C1]  ? do_syscall_64+0x55/0xb0
[  672.843422][    C1]  __kasan_kmalloc+0x8f/0xa0
[  672.843444][    C1]  ? __alloc_skb+0x138/0x2c0
[  672.843465][    C1]  __kmalloc_node_track_caller+0xb4/0x230
[  672.843491][    C1]  ? rcu_is_watching+0x15/0xb0
[  672.843515][    C1]  ? __alloc_skb+0x138/0x2c0
[  672.843536][    C1]  kmalloc_reserve+0x116/0x240
[  672.843561][    C1]  __alloc_skb+0x138/0x2c0
[  672.843585][    C1]  alloc_skb_with_frags+0xcd/0x7a0
[  672.843607][    C1]  ? aa_label_sk_perm+0x500/0x6a0
[  672.843646][    C1]  sock_alloc_send_pskb+0x883/0x9a0
[  672.843676][    C1]  ? sock_kzfree_s+0x50/0x50
[  672.843693][    C1]  ? do_raw_spin_lock+0x11f/0x2b0
[  672.843718][    C1]  ? __rwlock_init+0x150/0x150
[  672.843742][    C1]  ? do_raw_spin_unlock+0x121/0x230
[  672.843768][    C1]  unix_dgram_sendmsg+0x5a9/0x16e0
[  672.843807][    C1]  ? aa_af_perm+0x330/0x330
[  672.843834][    C1]  ? unix_dgram_poll+0x680/0x680
[  672.843858][    C1]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  672.843880][    C1]  ? apparmor_socket_sendmsg+0x8e/0x330
[  672.843901][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  672.843930][    C1]  ? security_socket_sendmsg+0x80/0xa0
[  672.843955][    C1]  __sys_sendto+0x4a9/0x6b0
[  672.843979][    C1]  ? __ia32_sys_getpeername+0x90/0x90
[  672.844015][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  672.844038][    C1]  ? lock_chain_count+0x20/0x20
[  672.844061][    C1]  __x64_sys_sendto+0xde/0xf0
[  672.844086][    C1]  do_syscall_64+0x55/0xb0
[  672.844100][    C1]  ? clear_bhb_loop+0x40/0x90
[  672.844117][    C1]  ? clear_bhb_loop+0x40/0x90
[  672.844135][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  672.844162][    C1] RIP: 0033:0x7f70d2706407
[  672.844176][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  672.844190][    C1] RSP: 002b:00007ffd828cdd70 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  672.844207][    C1] RAX: ffffffffffffffda RBX: 00007f70d25b6c80 RCX: 00007f70d2706407
[  672.844220][    C1] RDX: 000000000000003d RSI: 00007ffd828cdeb0 RDI: 0000000000000003
[  672.844232][    C1] RBP: 00007ffd828ce2e0 R08: 0000000000000000 R09: 0000000000000000
[  672.844242][    C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd828ce2f8
[  672.844254][    C1] R13: 00007ffd828cdeb0 R14: 0000000000000022 R15: 00007ffd828cdeb0
[  672.844275][    C1]  </TASK>
[  672.852887][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  672.852927][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  672.852984][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  672.853023][   T29] Call Trace:
[  672.853047][   T29]  <TASK>
[  672.853070][   T29]  dump_stack_lvl+0x18c/0x250
[  672.853155][   T29]  ? show_regs_print_info+0x20/0x20
[  672.853210][   T29]  ? load_image+0x420/0x420
[  672.853332][   T29]  panic+0x2ca/0x720
[  672.853465][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  672.853539][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  672.853614][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  672.853707][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  672.853783][   T29]  watchdog+0xf98/0xfa0
[  672.853859][   T29]  ? watchdog+0x1e1/0xfa0
[  672.853973][   T29]  kthread+0x2fa/0x390
[  672.854044][   T29]  ? hungtask_pm_notify+0x50/0x50
[  672.854121][   T29]  ? kthread_blkcg+0xd0/0xd0
[  672.854183][   T29]  ret_from_fork+0x48/0x80
[  672.854248][   T29]  ? kthread_blkcg+0xd0/0xd0
[  672.854321][   T29]  ret_from_fork_asm+0x11/0x20
[  672.854434][   T29]  </TASK>
[  672.856782][   T29] Kernel Offset: disabled
[  673.418117][   T29] Rebooting in 86400 seconds..