last executing test programs:

10m13.739135835s ago: executing program 1 (id=766):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd26, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x4840)

10m13.575198832s ago: executing program 1 (id=768):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882)
ioctl$EVIOCSABS20(r0, 0x40044591, 0x0)
close(0x3)

10m13.385231072s ago: executing program 1 (id=770):
syz_open_dev$usbmon(&(0x7f0000000040), 0x80000001, 0x82002)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0)

10m13.141480337s ago: executing program 1 (id=772):
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfd, 0x1e6, &(0x7f0000000880)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})

10m12.735174729s ago: executing program 1 (id=775):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10m12.220882051s ago: executing program 1 (id=776):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x13, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x10000000}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000540)='GPL\x00', 0x1, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x3}, 0x94)

10m11.561396419s ago: executing program 32 (id=776):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x13, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x10000000}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000540)='GPL\x00', 0x1, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x3}, 0x94)

9m54.339672999s ago: executing program 2 (id=910):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108)

9m54.170441226s ago: executing program 2 (id=913):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x40, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x40}}, 0x0)

9m53.996605604s ago: executing program 2 (id=915):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000000800088004"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

9m53.803437955s ago: executing program 2 (id=917):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000a40)="7ec84f73", 0x4}], 0x1}}], 0x1, 0x0)

9m53.610350694s ago: executing program 2 (id=920):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file2\x00', 0x109141, 0xd6)

9m53.391749297s ago: executing program 2 (id=921):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="09ab6c8a", 0x4)

9m44.157018806s ago: executing program 3 (id=982):
setuid(0xee01)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0)

9m43.964691235s ago: executing program 3 (id=984):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0xfffffffffffffd43, 0x3, 0xfffffffb}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x2000400c)

9m43.750498038s ago: executing program 3 (id=986):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x50, 0x37, 0xfc, 0x2}, {0x28, 0x6, 0xef, 0xfffff010}, {0x6, 0x6, 0x98, 0x1057c}]}, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

9m43.539614249s ago: executing program 3 (id=988):
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000440)='./file0\x00', 0x4000, &(0x7f0000000480)={[{@force}, {}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp855'}}]}, 0x2, 0x5fd, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc\x00', 0x1a8)
mount(0x0, &(0x7f0000000b00)='./proc\x00', &(0x7f0000000b40)='proc\x00', 0x0, 0x0)

9m43.209158643s ago: executing program 3 (id=990):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f00000001c0)=0x800000, 0x48)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0)

9m42.833360612s ago: executing program 3 (id=993):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = dup(r0)
getpeername$packet(r1, 0x0, 0x0)

9m42.326759214s ago: executing program 33 (id=993):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = dup(r0)
getpeername$packet(r1, 0x0, 0x0)

9m38.124127586s ago: executing program 34 (id=921):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="09ab6c8a", 0x4)

8m37.304278326s ago: executing program 0 (id=1418):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

8m37.049830522s ago: executing program 0 (id=1421):
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48)

8m36.863379591s ago: executing program 0 (id=1424):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r0, &(0x7f0000000200)="2e000000010002", 0x7)

8m36.630891186s ago: executing program 0 (id=1427):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000280)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@minixdf}]}, 0x1, 0x45b, &(0x7f0000000b40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

8m36.137403996s ago: executing program 0 (id=1429):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)={[{}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'iso8859-6'}}]}, 0x1, 0x5f0, &(0x7f0000000bc0)="$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")
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))

8m35.158936957s ago: executing program 0 (id=1436):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x8001, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x89, 0x2, 0x6, 0x7f, 0xfffffffa, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x6, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x15, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x4, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x80, 0xfffffffd, 0x1ef, 0x5, 0x28, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x0, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0xb, 0x34, 0x800003, 0x200, 0x83, 0xffffffff, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x2, 0x1, 0xa, 0xb3e, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

8m34.385714216s ago: executing program 35 (id=1436):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x8001, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x89, 0x2, 0x6, 0x7f, 0xfffffffa, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x6, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x15, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x4, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x80, 0xfffffffd, 0x1ef, 0x5, 0x28, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x0, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0xb, 0x34, 0x800003, 0x200, 0x83, 0xffffffff, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x2, 0x1, 0xa, 0xb3e, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6m53.960340427s ago: executing program 7 (id=1921):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0)
write$tcp_mem(r0, &(0x7f0000000340)={0x9f, 0x20, 0x6c64, 0x20, 0x1}, 0x48)

6m53.44427058s ago: executing program 7 (id=1922):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f0000000140)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c001e4b1b856a89cff64f18d20158be1bcf2233ab5f9459937c60b513c1"], 0x1, 0x444c, &(0x7f000000cd40)="$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")
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
io_setup(0x200, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0}])

6m49.881548006s ago: executing program 7 (id=1934):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000005002000000000000c001f00", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)

6m48.336229656s ago: executing program 7 (id=1941):
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564)

6m47.602558381s ago: executing program 7 (id=1947):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file1\x00', 0x2, 0x3)

6m47.041492688s ago: executing program 7 (id=1950):
mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/ioports\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001bc0)={0x2020}, 0x2020)

6m31.94572137s ago: executing program 36 (id=1950):
mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/ioports\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001bc0)={0x2020}, 0x2020)

6m22.505680811s ago: executing program 5 (id=2050):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff010011d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcebc7586186fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35eff00006b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba17a647a171c2fc73a8c7541c7ffaafba62195fce77382ae962f30d4a377d760040975a44aa73a4e687d06f96f0987b980f6f883534dfc71ace539eeeb08cff54e0e05d5e0563660a3664c67d0eb9cdf4eab93ab4bf1972a2acc5c5d43dc2f2b66d7493c390d042d896a1ad772f6d4c2cf38ba0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0x2}], 0x1}, 0x20000000)

6m22.045568718s ago: executing program 5 (id=2052):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc})

6m21.682105665s ago: executing program 5 (id=2055):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x1, 0x19f, &(0x7f0000000480)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x800, 0x0, 0x0, 0x8, 0x3, 0xfffa}, 0x20)

6m21.230398332s ago: executing program 5 (id=2059):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8)

6m20.964484489s ago: executing program 5 (id=2061):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x14, 0x709, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0, 0x0)
lseek(r0, 0xd, 0x1)
getdents64(r0, 0x0, 0x22)

6m16.007031048s ago: executing program 5 (id=2073):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000001c0)={0x17c04, r0, 0x5000, 0x24000007, 0x2, 0x7})

6m15.177827873s ago: executing program 37 (id=2073):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000001c0)={0x17c04, r0, 0x5000, 0x24000007, 0x2, 0x7})

11.023444527s ago: executing program 4 (id=4380):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000002c0)={[{@commit={'commit', 0x3d, 0xdfd}}, {@space_cache_v2}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1a22a}}, {@flushoncommit}, {@datacow}, {@max_inline={'max_inline', 0x3d, [0x78, 0x31, 0x31]}}, {@nodiscard}]}, 0x1, 0x510a, &(0x7f000000d000)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000002a680)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x7351, 0x8001)
write$FUSE_GETXATTR(r0, &(0x7f000002a6c0)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x18)

8.226152965s ago: executing program 4 (id=4388):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0, 0x80000})
ioctl$DMA_BUF_SET_NAME_A(r2, 0xc0086202, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')

7.810774028s ago: executing program 4 (id=4391):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="bcea"])
r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000400)={0x51, 0xa0, 0x5608, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x5b, 0x0, 0x7, 0x8, 0x2, {0x4, 0x7, 0x400, 0xfffa}, 0x0, 0x0}})

4.319355666s ago: executing program 4 (id=4406):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x6b)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93", 0x3}], 0x1)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x3, 0x7, 0x6f, @time={0x6, 0xce}, {0xc, 0x1}, {0xd, 0x9}, @connect={{0x7, 0x6a}, {0x6, 0x40}}}], 0x1c)

3.980901841s ago: executing program 9 (id=4411):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x91, 0x30, 0x7a, 0x40, 0x5ac, 0x8501, 0xdd83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf, 0x1, 0x10, 0x0, "", [{{0x9, 0x4, 0xa, 0x8, 0x1, 0xe, 0x1, 0x0, 0x5, [], [{{0x9, 0x5, 0xb, 0x4, 0x20, 0x40, 0x84, 0x4}}]}}]}}]}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0)

2.799927753s ago: executing program 8 (id=4421):
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

2.496246214s ago: executing program 8 (id=4422):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000020000000800000005000000", @ANYRES32, @ANYBLOB="0000000000000000b65a0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r1}, 0xc)

2.180689516s ago: executing program 9 (id=4424):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="189772100048f5c56a6aeb00ffffffff0bd87cc6fcc9b76b0300000000000000", 0x20}], 0x1, 0x0, 0x0, 0x400c094}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=ANY=[@ANYBLOB="100028"], 0x10, 0x20040000}}], 0x2, 0x20000000)

2.165814308s ago: executing program 8 (id=4425):
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RREADDIR(r1, 0x0, 0xeffd)
vmsplice(r0, &(0x7f00000102c0)=[{&(0x7f0000010080)='v', 0x1}], 0x1, 0x1)
write$P9_RWRITE(r1, &(0x7f0000010300)={0xb, 0x77, 0x4, 0x3}, 0xb)

1.906493154s ago: executing program 6 (id=4426):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r1=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "b146baff07590d3233de69d03e92affcf2e7d89bff09de8ecb00200000100c00", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r2})

1.842431651s ago: executing program 9 (id=4427):
syz_mount_image$ext4(&(0x7f00000023c0)='ext4\x00', &(0x7f0000002400)='./file0\x00', 0x800714, &(0x7f0000002440), 0xf7, 0x485, &(0x7f0000002840)="$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")
r0 = syz_open_dev$sg(&(0x7f00000007c0), 0x0, 0x8401)
r1 = syz_open_procfs(0x0, &(0x7f0000000800)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000840)='.\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1.811667604s ago: executing program 8 (id=4428):
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000030000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0)

1.611465765s ago: executing program 6 (id=4429):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977720a89"], 0xa)

1.475778939s ago: executing program 8 (id=4430):
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0xa00006, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})

1.288440827s ago: executing program 4 (id=4431):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='r', 0x1)

1.234970773s ago: executing program 6 (id=4432):
r0 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

1.107596166s ago: executing program 8 (id=4433):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x70000, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})

1.023180795s ago: executing program 9 (id=4434):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffd, @val={0x8c, 0x18, {0x0, "24e5ea3c21c3", @long="5601f5f04ef706287517224b9d6d386c"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x0)

931.685684ms ago: executing program 6 (id=4435):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)=@x86={0x0, 0xfe, 0x2, 0x0, 0xffffffff, 0x2, 0xa4, 0xd4, 0x2, 0x1, 0x0, 0x40, 0x0, 0x20d9, 0x9, 0x0, 0x27, 0xb0, 0x5, '\x00', 0x1, 0x4})

494.418109ms ago: executing program 9 (id=4436):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x10000, 0x0, 0x0)

371.027442ms ago: executing program 6 (id=4437):
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0)

217.965758ms ago: executing program 4 (id=4438):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)

210.196109ms ago: executing program 9 (id=4439):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0)
write(r0, &(0x7f0000001000)='1', 0x1)

0s ago: executing program 6 (id=4440):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x6b)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93", 0x3}], 0x1)
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x3, 0x7, 0x6f, @time={0x6, 0xce}, {0xc, 0x1}, {0xd, 0x9}, @connect={{0x7, 0x6a}, {0x6, 0x40}}}], 0x1c)

kernel console output (not intermixed with test programs):

[    T8] em28xx 10-1:0.0: Disconnecting em28xx
[  612.511784][ T8574] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  612.630222][ T8108] em28xx 10-1:0.0: Registering input extension
[  612.700107][    T8] em28xx 10-1:0.0: Closing input extension
[  612.984967][    T8] em28xx 10-1:0.0: Freeing device
[  613.930815][T15979] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.556536][   T57] usb 9-1: new low-speed USB device number 10 using dummy_hcd
[  614.710145][T15981] loop6: detected capacity change from 0 to 32768
[  614.753626][   T57] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  614.785550][T15981] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  614.808899][   T57] usb 9-1: config 0 has no interface number 0
[  614.868365][   T57] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  614.952309][   T57] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  615.021678][   T57] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  615.055644][T15997] dvmrp8: entered allmulticast mode
[  615.067687][   T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.165666][   T57] usb 9-1: config 0 descriptor??
[  615.197077][T15988] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  615.251792][   T57] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  615.365745][ T8574] ocfs2: Unmounting device (7,6) on (node local)
[  615.515189][    C0] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  615.527643][   T57] usb 9-1: USB disconnect, device number 10
[  615.773837][T16001] IPv6: NLM_F_CREATE should be specified when creating new route
[  615.800684][T16001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  615.808770][T16001] IPv6: NLM_F_CREATE should be set when creating new route
[  615.816065][T16001] IPv6: NLM_F_CREATE should be set when creating new route
[  615.823347][T16001] IPv6: NLM_F_CREATE should be set when creating new route
[  615.865332][T16001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  616.497536][T16020] loop8: detected capacity change from 0 to 512
[  616.543205][T16020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  616.594781][T16020] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  616.636319][    T8] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  616.673566][T16020] EXT4-fs error (device loop8): ext4_do_update_inode:5294: inode #2: comm syz.8.3341: corrupted inode contents
[  616.714058][T16020] EXT4-fs error (device loop8): ext4_dirty_inode:6188: inode #2: comm syz.8.3341: mark_inode_dirty error
[  616.791627][T16020] EXT4-fs error (device loop8): ext4_do_update_inode:5294: inode #2: comm syz.8.3341: corrupted inode contents
[  616.826416][    T8] usb 10-1: Using ep0 maxpacket: 8
[  616.840455][    T8] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  616.873662][    T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  616.913841][T16024] EXT4-fs error (device loop8): ext4_do_update_inode:5294: inode #2: comm syz.8.3341: corrupted inode contents
[  616.938946][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  616.986160][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  617.010153][T16024] EXT4-fs error (device loop8): ext4_dirty_inode:6188: inode #2: comm syz.8.3341: mark_inode_dirty error
[  617.055349][    T8] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  617.080541][T16024] EXT4-fs error (device loop8): ext4_do_update_inode:5294: inode #2: comm syz.8.3341: corrupted inode contents
[  617.105442][T16031] loop6: detected capacity change from 0 to 128
[  617.113371][    T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  617.153055][T16024] EXT4-fs error (device loop8): __ext4_ext_dirty:208: inode #2: comm syz.8.3341: mark_inode_dirty error
[  617.179200][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.198793][T16031] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  617.288847][T16031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  617.410388][T12130] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.462240][    T8] usb 10-1: GET_CAPABILITIES returned 0
[  617.515049][    T8] usbtmc 10-1:16.0: can't read capabilities
[  617.708593][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.717828][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.727010][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.736172][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.745335][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.770067][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.779296][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.788451][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.797599][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.806775][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.820509][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.829732][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.838967][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.848197][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.857843][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.867031][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  617.894815][    T8] usb 10-1: USB disconnect, device number 10
[  618.121626][T16033] loop4: detected capacity change from 0 to 32768
[  618.147908][T16033] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  618.188098][T16033] JBD2: Ignoring recovery information on journal
[  618.274019][T16033] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  618.463062][ T7842] ocfs2: Unmounting device (7,4) on (node local)
[  618.634262][T16042] IPv6: NLM_F_CREATE should be specified when creating new route
[  618.669155][T16042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  618.676468][T16042] IPv6: NLM_F_CREATE should be set when creating new route
[  618.683783][T16042] IPv6: NLM_F_CREATE should be set when creating new route
[  618.691065][T16042] IPv6: NLM_F_CREATE should be set when creating new route
[  618.783866][T16042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  619.547854][T16056] program syz.6.3355 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  619.801252][T16060] loop6: detected capacity change from 0 to 512
[  619.953205][T16060] EXT4-fs (loop6): orphan cleanup on readonly fs
[  619.996198][T16060] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.3358: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  620.079269][T16060] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.3358: ea_inode dec ref err=-117
[  620.129069][T16060] EXT4-fs (loop6): 1 orphan inode deleted
[  620.179746][T16060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  620.209845][T16051] loop8: detected capacity change from 0 to 32768
[  620.377890][T16051] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  620.512431][ T8574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.934253][T12130] ocfs2: Unmounting device (7,8) on (node local)
[  621.199088][T16077] dvmrp8: entered allmulticast mode
[  621.693327][T16088] loop4: detected capacity change from 0 to 164
[  622.823151][T16121] ������: renamed from vlan0 (while UP)
[  623.217352][T16131] loop8: detected capacity change from 0 to 1024
[  623.279366][T16131] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  623.342900][T16131] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  623.432951][T16131] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: comm syz.8.3386: lblock 0 mapped to illegal pblock 0 (length 6)
[  623.483337][T16142] loop9: detected capacity change from 0 to 256
[  623.529382][T16142] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  623.551826][T16131] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  623.565682][T16139] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  623.627871][T16131] EXT4-fs (loop8): This should not happen!! Data will be lost
[  623.627871][T16131] 
[  623.692966][T16146] syz.9.3389: attempt to access beyond end of device
[  623.692966][T16146] loop9: rw=0, sector=276823735, nr_sectors = 1 limit=256
[  623.709065][T16143] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3386: lblock 0 mapped to illegal pblock 0 (length 4)
[  623.797510][T16143] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3386: lblock 0 mapped to illegal pblock 0 (length 4)
[  623.872977][T16143] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3386: lblock 0 mapped to illegal pblock 0 (length 4)
[  623.953146][T16143] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3386: lblock 0 mapped to illegal pblock 0 (length 4)
[  624.009229][T16143] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3386: lblock 0 mapped to illegal pblock 0 (length 4)
[  624.063462][T16143] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #15: comm syz.8.3386: lblock 0 mapped to illegal pblock 0 (length 4)
[  624.258142][ T1145] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8)
[  624.361823][ T1145] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  624.379239][T16156] dvmrp8: entered allmulticast mode
[  624.411522][ T1145] EXT4-fs (loop8): This should not happen!! Data will be lost
[  624.411522][ T1145] 
[  624.470476][T16161] loop9: detected capacity change from 0 to 512
[  624.500290][T12130] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  624.525960][T16161] EXT4-fs (loop9): Test dummy encryption mode enabled
[  624.581129][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  624.588195][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  624.605478][T16161] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  624.704370][T16161] EXT4-fs (loop9): 1 truncate cleaned up
[  624.736565][T16161] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  624.913439][T16169] jffs2: notice: (16169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  625.011776][T12358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.499421][T16183] ������: renamed from vlan0 (while UP)
[  625.869016][T16195] ������: renamed from vlan0 (while UP)
[  626.258303][T16206] loop4: detected capacity change from 0 to 1024
[  626.280112][T16209] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3417'.
[  626.531589][ T1130] hfsplus: b-tree write err: -5, ino 3
[  626.980994][T16226] netlink: 'syz.8.3426': attribute type 5 has an invalid length.
[  627.254753][T16233] jffs2: notice: (16233) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  627.856995][T16242] loop8: detected capacity change from 0 to 256
[  627.919341][T16242] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  627.931794][T16244] loop9: detected capacity change from 0 to 1024
[  627.973400][T16244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  628.044636][T16242] syz.8.3434: attempt to access beyond end of device
[  628.044636][T16242] loop8: rw=0, sector=276823735, nr_sectors = 1 limit=256
[  628.071855][T16244] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  628.200722][T16244] EXT4-fs error (device loop9): ext4_map_blocks:720: inode #15: comm syz.9.3433: lblock 0 mapped to illegal pblock 0 (length 6)
[  628.284543][T16244] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  628.370451][T16244] EXT4-fs (loop9): This should not happen!! Data will be lost
[  628.370451][T16244] 
[  628.422091][T16249] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3433: lblock 0 mapped to illegal pblock 0 (length 4)
[  628.499858][T16253] loop6: detected capacity change from 0 to 512
[  628.521886][T16249] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3433: lblock 0 mapped to illegal pblock 0 (length 4)
[  628.537744][T16251] loop8: detected capacity change from 0 to 4096
[  628.574578][T16253] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.3437: corrupted in-inode xattr: invalid ea_ino
[  628.604511][T16249] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #15: comm syz.9.3433: lblock 0 mapped to illegal pblock 0 (length 4)
[  628.679953][T16251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  628.712822][T16253] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.3437: couldn't read orphan inode 15 (err -117)
[  628.803720][T16253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  628.993478][ T1130] EXT4-fs error (device loop9): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8)
[  629.085405][ T1130] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  629.128504][ T8574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.145399][ T1130] EXT4-fs (loop9): This should not happen!! Data will be lost
[  629.145399][ T1130] 
[  629.201301][T12358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  629.251718][T12130] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.556766][T16269] jffs2: notice: (16269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  630.204850][T12539] wiimote 0005:057E:0306.001F: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0
[  630.317694][T12539] wiimote 0005:057E:0306.001F: New device registered
[  630.412256][T16287] wiimote 0005:057E:0306.001F: Device removed
[  630.473489][T16290] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3452'.
[  630.578868][T16288] fido_id[16288]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  631.403007][T16294] loop8: detected capacity change from 0 to 32768
[  631.444649][T16294] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  631.463036][    T8] wiimote 0005:057E:0306.001F: detected device: Nintendo Wii Remote (Gen 1)
[  631.681590][    T8] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001F/input/input37
[  631.729004][T16294] XFS (loop8): Ending clean mount
[  631.777002][T16294] XFS (loop8): Quotacheck needed: Please wait.
[  631.789387][T16296] loop4: detected capacity change from 0 to 32768
[  631.894728][    T8] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001F/input/input38
[  632.008449][T16294] XFS (loop8): Quotacheck: Done.
[  632.048365][    T8] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001F/input/input36
[  632.237156][T12130] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  638.685101][T16315] binder: 16314:16315 ioctl c018620c 200000000240 returned -1
[  638.726358][T16321] jffs2: notice: (16321) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  639.701941][T16341] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3463'.
[  641.133967][T16346] loop8: detected capacity change from 0 to 32768
[  641.181336][T16346] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.3469 (16346)
[  641.324084][T16346] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  641.405119][T16346] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  641.468069][T16346] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  641.538029][T16346] BTRFS info (device loop8): use zstd compression, level 3
[  641.599939][T16346] BTRFS info (device loop8): using free space tree
[  641.931571][T16346] BTRFS info (device loop8): enabling ssd optimizations
[  642.002758][T16346] BTRFS info (device loop8): auto enabling async discard
[  642.145936][T16386] i2c i2c-0: Invalid 7-bit I2C address 0x00
[  642.375277][   T28] audit: type=1800 audit(1793768051.624:169): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3469" name="file1" dev="loop8" ino=260 res=0 errno=0
[  642.588729][T12130] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  645.286380][T16425] loop8: detected capacity change from 0 to 256
[  645.388332][T16425] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  645.404849][T16427] input: syz1 as /devices/virtual/input/input39
[  645.835635][T16439] i2c i2c-0: new_device: Can't parse I2C address
[  646.134864][T16444] loop9: detected capacity change from 0 to 4096
[  646.361534][T16444] overlayfs: upper fs does not support tmpfile.
[  646.419996][T16444] overlayfs: workdir/#11 already exists
[  646.483234][T12539] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  646.693222][T12539] usb 9-1: Using ep0 maxpacket: 32
[  646.719268][T12539] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  646.757033][T12539] usb 9-1: config 0 has no interface number 0
[  646.814523][T12539] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.861993][T16455] loop4: detected capacity change from 0 to 256
[  646.885302][T12539] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  646.943723][T12539] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  646.964273][T16455] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  646.996469][T12539] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.046816][T12539] usb 9-1: config 0 descriptor??
[  647.697670][T12539] uclogic 0003:28BD:0094.0020: pen parameters not found
[  647.742927][T12539] uclogic 0003:28BD:0094.0020: interface is invalid, ignoring
[  647.756520][T16471] loop4: detected capacity change from 0 to 512
[  647.807032][T12539] usb 9-1: USB disconnect, device number 11
[  647.835147][T16471] EXT4-fs: Ignoring removed mblk_io_submit option
[  647.903935][T16471] EXT4-fs (loop4): orphan cleanup on readonly fs
[  647.956725][T16471] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  648.039189][T16471] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3514: attempt to clear invalid blocks 2 len 1
[  648.109894][T16471] EXT4-fs (loop4): Remounting filesystem read-only
[  648.146763][T16471] EXT4-fs (loop4): 1 truncate cleaned up
[  648.178063][T16471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  648.440434][T16471] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  648.605863][ T7842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.341965][T16504] loop6: detected capacity change from 0 to 128
[  649.374221][T16505] loop8: detected capacity change from 0 to 164
[  649.382774][T16504] EXT4-fs: Ignoring removed i_version option
[  649.469885][T16504] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  649.578297][T16504] ext4 filesystem being mounted at /670/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  649.828598][ T8574] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  650.213959][T16497] loop4: detected capacity change from 0 to 32768
[  650.283937][T16497] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.3524 (16497)
[  650.449223][T16497] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  650.518677][T16514] loop8: detected capacity change from 0 to 128
[  650.543705][T16497] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  650.622456][T16514] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  650.648102][T16497] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  650.743217][T16514] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  650.755668][T16497] BTRFS info (device loop4): use zstd compression, level 3
[  650.818125][T16497] BTRFS info (device loop4): using free space tree
[  651.059700][T12130] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  651.105960][T16497] BTRFS info (device loop4): enabling ssd optimizations
[  651.172986][T16497] BTRFS info (device loop4): auto enabling async discard
[  651.476278][   T28] audit: type=1800 audit(1793768060.735:170): pid=16497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3524" name="file1" dev="loop4" ino=260 res=0 errno=0
[  651.649699][ T7842] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  651.848660][T16553] netlink: 209592 bytes leftover after parsing attributes in process `syz.9.3544'.
[  651.902299][T16553] netlink: zone id is out of range
[  651.964486][T16553] netlink: zone id is out of range
[  651.981416][T16553] netlink: zone id is out of range
[  652.032442][T16553] netlink: zone id is out of range
[  652.062068][T16553] netlink: zone id is out of range
[  652.099047][T16553] netlink: zone id is out of range
[  652.142114][T16553] netlink: zone id is out of range
[  652.162150][T16553] netlink: zone id is out of range
[  652.204748][T16553] netlink: zone id is out of range
[  652.211249][T16553] netlink: zone id is out of range
[  653.313930][T16584] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3555'.
[  654.278479][T16609] loop9: detected capacity change from 0 to 256
[  654.314313][T16609] FAT-fs (loop9): "posix" option is obsolete, not supported now
[  654.763464][T16618] loop6: detected capacity change from 0 to 128
[  654.842833][T16618] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  654.938391][T16618] ext4 filesystem being mounted at /683/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  655.243360][ T8574] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  655.280748][T16625] block device autoloading is deprecated and will be removed.
[  655.532286][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3575'.
[  655.967870][T16635] loop9: detected capacity change from 0 to 1024
[  656.142372][T16635] hfsplus: bad catalog file entry
[  656.302879][ T2987] hfsplus: b-tree write err: -5, ino 3
[  656.308450][ T2987] hfsplus: bad catalog file entry
[  657.000374][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3584'.
[  657.037718][T16652] loop4: detected capacity change from 0 to 128
[  657.092066][T16652] EXT4-fs: Ignoring removed i_version option
[  657.215114][T16652] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  657.308755][T16652] ext4 filesystem being mounted at /673/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  657.549230][T16660] loop8: detected capacity change from 0 to 1024
[  657.557103][ T7842] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  657.753212][T16660] hfsplus: bad catalog file entry
[  657.897839][   T61] hfsplus: b-tree write err: -5, ino 3
[  657.925228][   T61] hfsplus: bad catalog file entry
[  659.277073][T16697] loop8: detected capacity change from 0 to 4096
[  659.329872][T16697] EXT4-fs: inline encryption not supported
[  659.395638][T16697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  659.442803][T16697] EXT4-fs (loop8): Test dummy encryption mode enabled
[  659.493805][T16697] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  659.535941][T16697] System zones: 0-5
[  659.583121][T16697] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  659.788323][T16702] loop6: detected capacity change from 0 to 256
[  659.832765][T16702] FAT-fs (loop6): "posix" option is obsolete, not supported now
[  659.929777][T12130] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.247700][ T5798] Bluetooth: hci0: command 0x0406 tx timeout
[  660.976959][T16719] loop8: detected capacity change from 0 to 512
[  661.049234][T16719] EXT4-fs (loop8): 1 truncate cleaned up
[  661.092139][T16719] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  661.219825][T16704] loop9: detected capacity change from 0 to 32768
[  661.255079][T16719] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.3615: bg 0: block 465: padding at end of block bitmap is not set
[  661.400861][T16704] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  661.426788][T16719] EXT4-fs (loop8): Remounting filesystem read-only
[  661.476853][T16719] EXT4-fs (loop8): error restoring inline_data for inode -- potential data loss! (inode 15, error -5)
[  661.570758][T16704] XFS (loop9): Ending clean mount
[  661.698759][T12130] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  661.825705][T16704] XFS (loop9): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  662.016522][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3620'.
[  662.176777][T12358] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  662.846282][T16754] loop4: detected capacity change from 0 to 2048
[  662.890856][T16754] NILFS (loop4): invalid segment: Magic number mismatch
[  662.936493][T16754] NILFS (loop4): trying rollback from an earlier position
[  663.028542][T16754] NILFS (loop4): recovery complete
[  663.055909][T16761] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  663.254756][T16754] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  663.266923][T16764] loop6: detected capacity change from 0 to 512
[  663.343576][T16764] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  663.474810][T16764] EXT4-fs (loop6): 1 truncate cleaned up
[  663.519642][T16764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  663.722114][   T28] audit: type=1800 audit(1793768584.980:171): pid=16764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3630" name="file1" dev="loop6" ino=15 res=0 errno=0
[  664.344456][ T8574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  664.839251][T16771] loop9: detected capacity change from 0 to 40427
[  664.883563][T16771] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504)
[  664.890678][T16771] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  664.967011][T16771] F2FS-fs (loop9): build fault injection attr: rate: 2, type: 0x7ffff
[  665.023096][T16771] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x1f8
[  665.080779][T16771] F2FS-fs (loop9): invalid crc value
[  665.122978][T16771] F2FS-fs (loop9): Found nat_bits in checkpoint
[  665.350604][T16771] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  665.400242][T16771] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  665.484850][T16771] F2FS-fs (loop9): Stopped filesystem due to reason: 0
[  665.708062][T16804] loop6: detected capacity change from 0 to 16
[  665.803945][T16804] erofs: (device loop6): mounted with root inode @ nid 36.
[  667.240752][T16828] loop9: detected capacity change from 0 to 256
[  667.250059][T16811] loop8: detected capacity change from 0 to 32768
[  667.335784][T16811] find_entry called with index >= next_index
[  667.376028][T16811] find_entry called with index >= next_index
[  667.406635][T16828] FAT-fs (loop9): Directory bread(block 64) failed
[  667.433806][T16811] find_entry called with index >= next_index
[  667.439839][T16811] find_entry called with index >= next_index
[  667.476528][T16828] FAT-fs (loop9): Directory bread(block 65) failed
[  667.529023][T16828] FAT-fs (loop9): Directory bread(block 66) failed
[  667.541355][T16811] find_entry called with index >= next_index
[  667.576571][T16828] FAT-fs (loop9): Directory bread(block 67) failed
[  667.589870][T16811] add_index: next_index = 0.  Resetting!
[  667.625958][T16828] FAT-fs (loop9): Directory bread(block 68) failed
[  667.637893][T16811] find_entry called with index >= next_index
[  667.671667][T16811] find_entry called with index >= next_index
[  667.680898][T16828] FAT-fs (loop9): Directory bread(block 69) failed
[  667.721272][T16811] find_entry called with index >= next_index
[  667.737795][T16828] FAT-fs (loop9): Directory bread(block 70) failed
[  667.768137][T16828] FAT-fs (loop9): Directory bread(block 71) failed
[  667.779088][T16811] non-latin1 character 0x3ff found in JFS file name
[  667.812830][T16828] FAT-fs (loop9): Directory bread(block 72) failed
[  667.841386][T16811] mount with iocharset=utf8 to access
[  667.861298][T16828] FAT-fs (loop9): Directory bread(block 73) failed
[  668.397407][T16835] net_ratelimit: 9 callbacks suppressed
[  668.397421][T16835] ip_tables: iptables: counters copy to user failed while replacing table
[  668.697092][T16840] loop9: detected capacity change from 0 to 256
[  668.874201][T16844] loop8: detected capacity change from 0 to 1024
[  669.482842][T16859] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3668'.
[  669.659684][T16861] loop8: detected capacity change from 0 to 256
[  669.784828][T16861] FAT-fs (loop8): Directory bread(block 64) failed
[  669.829257][T16861] FAT-fs (loop8): Directory bread(block 65) failed
[  669.876847][T16861] FAT-fs (loop8): Directory bread(block 66) failed
[  669.927263][T16861] FAT-fs (loop8): Directory bread(block 67) failed
[  669.990016][T16861] FAT-fs (loop8): Directory bread(block 68) failed
[  670.038287][T16861] FAT-fs (loop8): Directory bread(block 69) failed
[  670.066582][T16861] FAT-fs (loop8): Directory bread(block 70) failed
[  670.127269][T16861] FAT-fs (loop8): Directory bread(block 71) failed
[  670.154680][T16861] FAT-fs (loop8): Directory bread(block 72) failed
[  670.194766][T16861] FAT-fs (loop8): Directory bread(block 73) failed
[  670.226663][T16872] loop4: detected capacity change from 0 to 512
[  670.514005][T16854] loop9: detected capacity change from 0 to 32768
[  671.431763][T16889] ip_tables: iptables: counters copy to user failed while replacing table
[  671.668338][T16895] loop8: detected capacity change from 0 to 16
[  671.730324][T16895] erofs: (device loop8): mounted with root inode @ nid 36.
[  671.936788][T16898] loop9: detected capacity change from 0 to 512
[  672.525857][T16905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3689'.
[  672.833423][T16911] loop9: detected capacity change from 0 to 512
[  672.866244][T16911] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  672.943772][T16911] EXT4-fs (loop9): 1 truncate cleaned up
[  672.964602][T16911] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  673.010690][T16891] loop4: detected capacity change from 0 to 40427
[  673.065324][T16891] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  673.084895][   T28] audit: type=1800 audit(1793768594.340:172): pid=16911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3691" name="file1" dev="loop9" ino=15 res=0 errno=0
[  673.116777][T16891] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  673.177799][T16891] F2FS-fs (loop4): invalid crc value
[  673.211265][T16891] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  673.294012][T16891] F2FS-fs (loop4): Found nat_bits in checkpoint
[  673.507981][T16891] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  673.515927][T16924] loop8: detected capacity change from 0 to 1024
[  673.552005][T16891] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  673.562345][T16924] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  673.628554][T16924] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  673.678165][T16924] EXT4-fs (loop8): orphan cleanup on readonly fs
[  673.718674][T16924] EXT4-fs error (device loop8): ext4_free_blocks:6699: comm syz.8.3694: Freeing blocks not in datazone - block = 0, count = 4096
[  673.758856][   T28] audit: type=1800 audit(1793768595.020:173): pid=16891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3684" name="file1" dev="loop4" ino=10 res=0 errno=0
[  673.798159][T16924] EXT4-fs (loop8): Remounting filesystem read-only
[  673.813698][T16891] syz.4.3684: attempt to access beyond end of device
[  673.813698][T16891] loop4: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  673.846845][T16924] EXT4-fs (loop8): 1 orphan inode deleted
[  673.862083][T16924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  673.889908][T12358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.020235][ T7842] syz-executor: attempt to access beyond end of device
[  674.020235][ T7842] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  674.070776][T12130] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.182595][ T7842] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  675.545123][T16951] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3707'.
[  676.900302][T16967] loop8: detected capacity change from 0 to 32768
[  677.089789][T16958] loop4: detected capacity change from 0 to 40427
[  677.189357][T16958] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  677.261340][T16958] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  677.269664][T16958] F2FS-fs (loop4): build fault injection attr: rate: 2, type: 0x7ffff
[  677.385459][T16958] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[  677.425542][T16958] F2FS-fs (loop4): invalid crc value
[  677.511238][T16958] F2FS-fs (loop4): Found nat_bits in checkpoint
[  677.861558][T16958] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  677.921589][T16958] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  678.122044][T16958] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  678.347578][T16973] loop9: detected capacity change from 0 to 32768
[  678.403614][T16973] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  678.451790][ T8108] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  678.501933][T16973] XFS (loop9): Ending clean mount
[  678.646945][T12358] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  678.674602][ T8108] usb 9-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  678.695979][ T8108] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.727667][ T8108] usb-storage 9-1:1.0: USB Mass Storage device detected
[  679.419053][ T8108] usb-storage: probe of 9-1:1.0 failed with error -5
[  679.457196][ T8108] usb 9-1: USB disconnect, device number 12
[  680.137555][T17006] loop6: detected capacity change from 0 to 40427
[  680.160320][T17006] F2FS-fs (loop6): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  680.222855][T17006] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  680.288405][T17006] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7
[  680.320281][T17006] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff
[  680.382992][T17006] F2FS-fs (loop6): Image doesn't support compression
[  680.406098][T17006] F2FS-fs (loop6): invalid crc value
[  680.437849][T17006] F2FS-fs (loop6): Found nat_bits in checkpoint
[  680.563833][T17006] F2FS-fs (loop6): Start checkpoint disabled!
[  680.617509][T17006] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  680.647220][T17006] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  680.701191][T17006] F2FS-fs (loop6): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e0/0x390
[  680.972887][ T2987] kworker/u4:12: attempt to access beyond end of device
[  680.972887][ T2987] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  681.000668][T17020] loop9: detected capacity change from 0 to 32768
[  681.024335][ T2987] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  681.057179][T17020] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 9
[  681.094903][ T2987] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  681.367243][T16309] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 9
[  682.598083][T17031] loop8: detected capacity change from 0 to 32768
[  683.179792][T17037] loop4: detected capacity change from 0 to 32768
[  683.218277][T17041] loop6: detected capacity change from 0 to 32768
[  683.315694][T17037] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  683.394289][T17041] JBD2: Ignoring recovery information on journal
[  683.542087][T17037] XFS (loop4): Ending clean mount
[  683.614277][T17041] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  683.715955][T17050] loop9: detected capacity change from 0 to 8192
[  683.842839][T17050] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  683.960555][T17050] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal
[  684.042283][T17050] REISERFS (device loop9): using journaled data mode
[  684.049016][T17050] reiserfs: using flush barriers
[  684.115344][ T7842] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  684.136393][T17041] syz.6.3732 (17041) used greatest stack depth: 17752 bytes left
[  684.191340][T17050] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  684.305582][T17050] REISERFS (device loop9): checking transaction log (loop9)
[  684.367548][T17050] REISERFS (device loop9): Using tea hash to sort names
[  684.406194][T17050] REISERFS warning (device loop9): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  684.473288][ T8574] ocfs2: Unmounting device (7,6) on (node local)
[  684.481605][T17050] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage.
[  685.315437][T17079] vivid-008: disconnect
[  685.344957][T17078] vivid-008: reconnect
[  685.906648][T17092] loop8: detected capacity change from 0 to 2048
[  686.016906][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  686.023498][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  686.060788][T17092]  loop8: p1 p2 < > p3 < p5 p6 > p4
[  686.078558][T17092] loop8: partition table partially beyond EOD, truncated
[  686.101128][   T28] audit: type=1326 audit(1793768607.350:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.6.3760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27079fb19 code=0x7ffc0000
[  686.193705][T17092] loop8: p1 size 196608 extends beyond EOD, truncated
[  686.239569][   T28] audit: type=1326 audit(1793768607.360:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.6.3760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27079fb19 code=0x7ffc0000
[  686.269096][T17092] loop8: p2 start 4278190080 is beyond EOD, truncated
[  686.294427][T17092] loop8: p4 size 8192 extends beyond EOD, truncated
[  686.337356][T17092] loop8: p5 size 196608 extends beyond EOD, truncated
[  686.386701][T17092] loop8: p6 size 8192 extends beyond EOD, truncated
[  686.394196][   T28] audit: type=1326 audit(1793768607.410:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.6.3760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe27079fb19 code=0x7ffc0000
[  686.615617][   T28] audit: type=1326 audit(1793768607.410:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.6.3760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27079fb19 code=0x7ffc0000
[  686.875929][   T28] audit: type=1326 audit(1793768607.410:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.6.3760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27079fb19 code=0x7ffc0000
[  687.067224][   T28] audit: type=1326 audit(1793768607.410:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.6.3760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe27079fb19 code=0x7ffc0000
[  687.222690][T17119] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  687.274895][   T28] audit: type=1326 audit(1793768607.410:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.6.3760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27079fb19 code=0x7ffc0000
[  687.316905][T17123] iommufd_mock iommufd_mock2: Adding to iommu group 1
[  687.446154][   T28] audit: type=1326 audit(1793768607.420:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.6.3760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fe27079fb19 code=0x7ffc0000
[  687.586005][   T28] audit: type=1326 audit(1793768607.420:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17097 comm="syz.6.3760" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27079fb19 code=0x7ffc0000
[  687.975502][   T28] audit: type=1326 audit(1793768609.240:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17130 comm="syz.4.3771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  688.348279][T17115] loop8: detected capacity change from 0 to 40427
[  688.370898][T17124] loop9: detected capacity change from 0 to 32768
[  688.446636][T17124] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 9
[  688.458327][T17115] F2FS-fs (loop8): invalid crc value
[  688.476423][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3773'.
[  688.506714][T17115] F2FS-fs (loop8): Found nat_bits in checkpoint
[  688.765237][T17110] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 9
[  688.787697][T17115] F2FS-fs (loop8): Start checkpoint disabled!
[  688.926306][T17115] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  689.570536][ T1130] kworker/u4:6: attempt to access beyond end of device
[  689.570536][ T1130] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  689.647272][ T1130] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  691.098795][T17179] binder: BINDER_SET_CONTEXT_MGR already set
[  691.139458][T17159] loop4: detected capacity change from 0 to 32768
[  691.148386][T17179] binder: 17178:17179 ioctl 4018620d 200000004a80 returned -16
[  691.215786][T17159] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  691.378684][T17159] XFS (loop4): Ending clean mount
[  691.734373][ T7842] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  692.065130][T17208] loop6: detected capacity change from 0 to 164
[  693.053755][T17221] loop8: detected capacity change from 0 to 128
[  693.110876][T17221] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  693.245824][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  693.245837][   T28] audit: type=1800 audit(1793768614.510:187): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3807" name="file1" dev="loop8" ino=94 res=0 errno=0
[  694.030997][T17235] loop4: detected capacity change from 0 to 128
[  694.605809][ T5798] Bluetooth: hci2: unexpected event for opcode 0x041b
[  695.037651][T17264] loop9: detected capacity change from 0 to 2048
[  695.177094][T17264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  695.292701][   T28] audit: type=1800 audit(1793768616.550:188): pid=17264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3823" name="file2" dev="loop9" ino=16 res=0 errno=0
[  695.472202][T12358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  695.493797][T17273] bond0: entered promiscuous mode
[  695.525112][T17273] bond_slave_0: entered promiscuous mode
[  695.567004][T17273] bond_slave_1: entered promiscuous mode
[  695.628206][T17273] batadv0: entered promiscuous mode
[  695.691427][T17273] 8021q: adding VLAN 0 to HW filter on device hsr1
[  695.715690][T17248] loop8: detected capacity change from 0 to 40427
[  695.759160][T17248] F2FS-fs (loop8): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  695.774637][T17273] bond0: left promiscuous mode
[  695.803991][T17273] bond_slave_0: left promiscuous mode
[  695.834210][T17248] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  695.845299][T17273] bond_slave_1: left promiscuous mode
[  695.884380][T17248] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x35f7
[  695.937329][T17248] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff
[  695.956204][T17273] batadv0: left promiscuous mode
[  695.985867][T17248] F2FS-fs (loop8): Image doesn't support compression
[  696.048518][T17248] F2FS-fs (loop8): invalid crc value
[  696.116027][T17248] F2FS-fs (loop8): Found nat_bits in checkpoint
[  696.310288][T17287] loop6: detected capacity change from 0 to 256
[  696.355676][T17248] F2FS-fs (loop8): Start checkpoint disabled!
[  696.396130][T17287] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  696.488544][T17248] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  696.509604][T17248] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  696.661783][T17248] F2FS-fs (loop8): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e0/0x390
[  696.912066][ T1145] kworker/u4:7: attempt to access beyond end of device
[  696.912066][ T1145] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  696.971261][ T1145] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  696.978196][ T1145] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  697.817886][T17312] Bluetooth: MGMT ver 1.22
[  698.227103][T17321] loop4: detected capacity change from 0 to 256
[  698.267353][T17321] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  698.381374][    T8] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  698.487634][T17329] netlink: 'syz.6.3850': attribute type 5 has an invalid length.
[  698.594927][    T8] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  698.645855][    T8] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  698.689624][    T8] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  698.728130][    T8] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  698.768470][    T8] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  698.813470][    T8] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[  698.857475][    T8] usb 9-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  698.921570][    T8] usb 9-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e
[  698.930678][    T8] usb 9-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3
[  698.945368][T17338] ptp: physical clock is free running
[  698.978860][    T8] usb 9-1: Product: syz
[  698.996116][    T8] usb 9-1: Manufacturer: syz
[  699.010970][    T8] usb 9-1: SerialNumber: syz
[  699.039312][T17317] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  699.062899][T17317] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  699.102109][T17317] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  699.126232][T17317] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  699.163390][    T8] keyspan 9-1:1.0: Keyspan 1 port adapter converter detected
[  699.209151][    T8] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84
[  699.234855][T17343] loop4: detected capacity change from 0 to 164
[  699.258498][    T8] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 82
[  699.310087][    T8] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2
[  699.389983][    T8] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  699.480525][    T8] usb 9-1: USB disconnect, device number 13
[  699.568797][    T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  699.674003][    T8] keyspan 9-1:1.0: device disconnected
[  699.768506][T17347] loop9: detected capacity change from 0 to 128
[  699.845581][T17347] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  699.907970][T17347] hpfs: filesystem error: improperly stopped
[  699.921290][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  699.929412][ T5798] Bluetooth: hci0: command 0x0406 tx timeout
[  699.956578][T17347] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  699.990296][T17347] hpfs: You really don't want any checks? You are crazy...
[  700.030302][T17347] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  700.082172][T17347] hpfs: code page support is disabled
[  700.101958][T17347] hpfs: hpfs_map_4sectors(): unaligned read
[  700.108002][T17347] hpfs: hpfs_map_4sectors(): unaligned read
[  700.162325][T17347] hpfs: filesystem error: unable to find root dir
[  700.169940][   T28] audit: type=1326 audit(1793768621.430:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  700.298415][ T5798] Bluetooth: hci4: unexpected event for opcode 0x041b
[  700.334973][   T28] audit: type=1326 audit(1793768621.460:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  700.378336][T17347] hpfs: hpfs_map_4sectors(): unaligned read
[  700.488237][   T28] audit: type=1326 audit(1793768621.460:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  700.637045][   T28] audit: type=1326 audit(1793768621.460:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  700.695023][T17362] loop9: detected capacity change from 0 to 1024
[  700.772654][T17362] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  700.791677][   T28] audit: type=1326 audit(1793768621.460:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  700.936351][T17362] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  700.983329][   T28] audit: type=1326 audit(1793768621.460:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  701.051279][T17362] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  701.138801][   T28] audit: type=1326 audit(1793768621.470:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  701.190903][T17362] EXT4-fs error (device loop9): ext4_map_blocks:720: inode #15: block 3: comm syz.9.3864: lblock 3 mapped to illegal pblock 3 (length 3)
[  701.276427][   T28] audit: type=1326 audit(1793768621.470:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  701.330917][T17362] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  701.392030][T17362] EXT4-fs (loop9): This should not happen!! Data will be lost
[  701.392030][T17362] 
[  701.422151][   T28] audit: type=1326 audit(1793768621.470:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  701.571226][   T28] audit: type=1326 audit(1793768621.470:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17350 comm="syz.4.3860" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  701.696480][ T2987] EXT4-fs error (device loop9): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8)
[  701.765258][ T2987] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  701.830275][ T2987] EXT4-fs (loop9): This should not happen!! Data will be lost
[  701.830275][ T2987] 
[  701.919213][T12358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  703.888682][T17402] ������: renamed from vlan0 (while UP)
[  704.182040][    T8] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  704.259967][T17413] ptp: physical clock is free running
[  704.405138][    T8] usb 10-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  704.434014][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.506621][    T8] usb-storage 10-1:1.0: USB Mass Storage device detected
[  705.209808][    T8] usb-storage: probe of 10-1:1.0 failed with error -5
[  705.322827][    T8] usb 10-1: USB disconnect, device number 11
[  705.886023][T17442] loop8: detected capacity change from 0 to 256
[  705.970270][T17442] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  707.656056][T17491] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  707.721852][T17491] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  709.206811][T17512] loop8: detected capacity change from 0 to 131072
[  709.256092][T17512] F2FS-fs (loop8): Segment count (31) mismatch with total segments from devices (0)
[  709.265926][T17512] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  709.294397][T17515] loop6: detected capacity change from 0 to 64
[  709.326332][T17512] F2FS-fs (loop8): invalid crc value
[  709.365717][T17512] F2FS-fs (loop8): Found nat_bits in checkpoint
[  709.434794][T17512] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  709.442278][T17512] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  709.553518][T17512] F2FS-fs (loop8): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36
[  711.411769][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3944'.
[  711.708073][T17560] loop8: detected capacity change from 0 to 256
[  711.768385][T17560] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  711.853502][T17562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3946'.
[  711.919385][T17562] sch_fq: defrate 0 ignored.
[  712.133300][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3948'.
[  712.173229][T17564] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.198615][T17564] bridge0: entered allmulticast mode
[  712.633275][T17577] loop8: detected capacity change from 0 to 128
[  712.675177][T17579] loop9: detected capacity change from 0 to 16
[  712.692198][T17577] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  712.725244][T17579] erofs: (device loop9): mounted with root inode @ nid 36.
[  712.773325][T17577] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  712.799811][T17579] syz.9.3955: attempt to access beyond end of device
[  712.799811][T17579] loop9: rw=0, sector=8, nr_sectors = 32 limit=16
[  712.988421][T12130] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  713.242995][T17590] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3957'.
[  713.572053][T17598] program syz.8.3963 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  714.211405][   T57] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  714.241300][    T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  714.410227][   T57] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  714.436230][   T57] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  714.456849][    T8] usb 10-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  714.470864][   T57] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  714.487414][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.538744][    T8] usb-storage 10-1:1.0: USB Mass Storage device detected
[  714.558852][   T57] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  714.588045][   T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.617525][   T57] usb 9-1: Product: syz
[  714.633938][   T57] usb 9-1: Manufacturer: syz
[  714.653185][   T57] usb 9-1: SerialNumber: syz
[  714.675667][T17609] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  714.699818][   T57] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  714.747770][   T57] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  714.779168][   T57] usbserial_generic 9-1:1.0: generic converter detected
[  714.799523][   T57] usb 9-1: generic converter now attached to ttyUSB0
[  714.950058][    T8] scsi host1: usb-storage 10-1:1.0
[  714.988237][T17624] loop4: detected capacity change from 0 to 128
[  715.018419][    T8] usb 10-1: USB disconnect, device number 12
[  715.116685][   T57] usb 9-1: USB disconnect, device number 14
[  715.173147][   T57] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  715.226586][   T57] usbserial_generic 9-1:1.0: device disconnected
[  715.427543][T17628] loop4: detected capacity change from 0 to 512
[  715.465205][T17628] EXT4-fs: Ignoring removed nobh option
[  716.395855][T17645] loop4: detected capacity change from 0 to 2048
[  716.533410][T17648] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  716.587031][T17633] loop9: detected capacity change from 0 to 32768
[  716.672917][T17633] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.3978 (17633)
[  716.790718][T17633] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  716.855889][T17633] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  716.902655][T17648] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  716.936147][T17633] BTRFS info (device loop9): using free space tree
[  716.967634][T17648] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  717.078069][T17648] Remounting filesystem read-only
[  717.096083][T17633] BTRFS info (device loop9): enabling ssd optimizations
[  717.125790][T17633] BTRFS info (device loop9): auto enabling async discard
[  717.230832][ T7842] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  717.279763][ T7842] NILFS (loop4): discard dirty page: offset=0, ino=15
[  717.329504][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  717.379672][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  717.441430][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  717.489510][ T7842] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  717.548726][ T7842] NILFS (loop4): discard dirty page: offset=4096, ino=15
[  717.621730][ T7842] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  717.685832][ T7842] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  717.755462][ T7842] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  717.789981][T12358] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  717.818623][ T7842] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  717.862467][T17676] batadv0: entered promiscuous mode
[  717.910673][ T7842] NILFS (loop4): discard dirty page: offset=0, ino=6
[  717.924888][T17676] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  717.975461][ T7842] NILFS (loop4): discard dirty page: offset=0, ino=5
[  718.042331][T17676] 8021q: adding VLAN 0 to HW filter on device hsr1
[  718.062032][ T7842] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  718.069373][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  718.125834][T17676] batadv0: left promiscuous mode
[  718.213375][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  718.213387][   T28] audit: type=1400 audit(1793768895.477:207): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=17680 comm="syz.8.3991" name="unknown" offset=28
[  718.247777][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  718.325487][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  718.433477][ T7842] NILFS (loop4): discard dirty page: offset=0, ino=4
[  718.501365][ T7842] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  718.582536][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  718.674322][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  718.775374][T17689] loop6: detected capacity change from 0 to 128
[  718.782636][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  718.868881][ T7842] NILFS (loop4): discard dirty page: offset=0, ino=3
[  718.934089][T17689] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  718.961259][ T7842] NILFS (loop4): discard dirty page: offset=229376, ino=3
[  718.968444][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  719.055902][T17689] ext4 filesystem being mounted at /804/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  719.151148][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  719.160065][ T7842] NILFS (loop4): discard dirty block: blocknr=50, size=1024
[  719.306772][ T8574] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  719.321471][ T7842] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  719.553117][T17700] syzkaller0: tun_chr_ioctl cmd 1074025694
[  719.888346][T17708] loop9: detected capacity change from 0 to 8
[  719.901724][T17709] netlink: 'syz.8.4002': attribute type 3 has an invalid length.
[  719.952269][T17708] SQUASHFS error: lzo decompression failed, data probably corrupt
[  719.971239][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4002'.
[  720.004434][T17708] SQUASHFS error: Failed to read block 0x144: -5
[  720.010823][T17708] SQUASHFS error: Unable to read metadata cache entry [142]
[  720.092075][T17708] SQUASHFS error: Unable to read inode 0x11f
[  720.316126][T17716] loop8: detected capacity change from 0 to 1024
[  720.364745][T17716] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  720.379251][T17714] loop6: detected capacity change from 0 to 4096
[  720.441222][T17714] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512).
[  720.495553][T17716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  720.606208][T17716] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  720.759632][T17716] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: block 3: comm syz.8.4006: lblock 3 mapped to illegal pblock 3 (length 3)
[  720.860531][T17714] ntfs3: loop6: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[  720.937893][T17716] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  721.005519][T17716] EXT4-fs (loop8): This should not happen!! Data will be lost
[  721.005519][T17716] 
[  721.151881][   T50] ntfs3: loop6: ino=1e, failed to parse mft record
[  721.271913][ T2987] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8)
[  721.330310][ T2987] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  721.390783][ T2987] EXT4-fs (loop8): This should not happen!! Data will be lost
[  721.390783][ T2987] 
[  721.458772][T12130] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  721.722390][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4014'.
[  721.770597][T17745] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.804744][T17745] bridge0: entered allmulticast mode
[  722.720297][T17739] loop9: detected capacity change from 0 to 40427
[  722.793148][T17739] F2FS-fs (loop9): Invalid SB checksum offset: 0
[  722.826297][T17739] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  722.874784][T17739] F2FS-fs (loop9): invalid crc value
[  722.881243][ T8108] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  723.124151][ T8108] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.166863][ T8108] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[  723.246988][ T8108] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  723.303436][T17739] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[  723.310621][T17739] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  723.331164][ T8108] usb 5-1: config 0 interface 0 has no altsetting 0
[  723.369040][ T8108] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  723.406309][ T8108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.448587][T17759] loop8: detected capacity change from 0 to 32768
[  723.467121][ T8108] usb 5-1: config 0 descriptor??
[  723.496060][T17762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  723.508894][   T28] audit: type=1807 audit(1793768900.767:208): UNKNOWN=�Iasure res=0
[  723.553137][T17767] ima: policy update failed
[  723.570415][T17759] JBD2: Ignoring recovery information on journal
[  723.596169][   T28] audit: type=1802 audit(1793768900.797:209): pid=17768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.4025" res=0 errno=0
[  723.733964][   T28] audit: type=1802 audit(1793768900.877:210): pid=17767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.4025" res=0 errno=0
[  723.789103][T17759] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  723.850318][T12358] syz-executor: attempt to access beyond end of device
[  723.850318][T12358] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  723.960873][T12358] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  724.128322][ T8108] input: HID 0079:0006 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0079:0006.0021/input/input40
[  724.302819][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4028'.
[  724.386518][T17777] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.394179][T17777] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.505635][T17777] bridge0: entered allmulticast mode
[  724.557341][ T8108] dragonrise 0003:0079:0006.0021: input,hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.4-1/input0
[  724.665983][ T8108] dragonrise 0003:0079:0006.0021: implement() called with too large value 243 (n: 1)! (kworker/0:4)
[  724.744971][T12130] ocfs2: Unmounting device (7,8) on (node local)
[  724.776369][ T8108] dragonrise 0003:0079:0006.0021: Force Feedback for DragonRise Inc. game controllers by Richard Walmsley <richwalm@gmail.com>
[  724.961366][ T8108] usb 5-1: USB disconnect, device number 11
[  724.993297][T17778] fido_id[17778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0079:0006.0021/report_descriptor': No such device
[  725.046039][T17780] loop6: detected capacity change from 0 to 512
[  725.236808][T17780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  725.607923][ T8574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  726.451343][ T8108] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  726.651694][ T8108] usb 9-1: Using ep0 maxpacket: 8
[  726.671864][ T8108] usb 9-1: unable to get BOS descriptor or descriptor too short
[  726.710750][ T8108] usb 9-1: config 86 has an invalid interface number: 78 but max is 0
[  726.740708][ T8108] usb 9-1: config 86 has no interface number 0
[  726.781264][ T8108] usb 9-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024
[  726.841313][ T8108] usb 9-1: config 86 interface 78 altsetting 128 endpoint 0x5 has invalid wMaxPacketSize 0
[  726.886644][ T8108] usb 9-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 0
[  726.910538][T17823] loop6: detected capacity change from 0 to 256
[  726.932874][ T8108] usb 9-1: config 86 interface 78 has no altsetting 0
[  726.998881][ T8108] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d
[  727.050387][ T8108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.100152][ T8108] usb 9-1: Product: syz
[  727.132650][ T8108] usb 9-1: Manufacturer: syz
[  727.164948][ T8108] usb 9-1: SerialNumber: syz
[  727.217282][T17806] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  727.495654][ T8108] kvaser_usb 9-1:86.78: Cannot get software info, error -90
[  727.541330][ T8108] kvaser_usb: probe of 9-1:86.78 failed with error -90
[  727.594209][ T8108] usb 9-1: USB disconnect, device number 15
[  727.878632][T17835] pimreg: tun_chr_ioctl cmd 1074025677
[  727.905476][T17835] pimreg: linktype set to 774
[  728.380878][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4059'.
[  728.573122][T17855] loop4: detected capacity change from 0 to 512
[  728.639358][T17855] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.4062: inode has both inline data and extents flags
[  728.728418][T17855] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.4062: couldn't read orphan inode 15 (err -117)
[  728.788967][T17855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  728.951299][    T8] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  728.973649][T17862] loop8: detected capacity change from 0 to 4096
[  729.058176][ T7842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  729.079786][T17863] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  729.161219][    T8] usb 10-1: Using ep0 maxpacket: 8
[  729.199873][    T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  729.293789][    T8] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  729.374131][    T8] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  729.427771][T17850] loop6: detected capacity change from 0 to 32768
[  729.446358][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.493723][T17850] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  729.506801][    T8] usb 10-1: config 0 descriptor??
[  729.708460][T16309] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  729.738245][T12539] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  729.835674][T17870] loop6: detected capacity change from 0 to 256
[  729.941401][T12539] usb 5-1: Using ep0 maxpacket: 8
[  729.960580][T12539] usb 5-1: unable to get BOS descriptor or descriptor too short
[  729.987418][    T8] lenovo 0003:17EF:6047.0022: unknown main item tag 0x0
[  730.027832][T12539] usb 5-1: config 86 has an invalid interface number: 78 but max is 0
[  730.059525][    T8] lenovo 0003:17EF:6047.0022: unknown main item tag 0x0
[  730.091213][T12539] usb 5-1: config 86 has no interface number 0
[  730.098211][T12539] usb 5-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024
[  730.119812][    T8] lenovo 0003:17EF:6047.0022: unknown main item tag 0x0
[  730.169883][    T8] lenovo 0003:17EF:6047.0022: unknown main item tag 0x0
[  730.198633][T12539] usb 5-1: config 86 interface 78 altsetting 128 endpoint 0x5 has invalid wMaxPacketSize 0
[  730.221370][    T8] lenovo 0003:17EF:6047.0022: unknown main item tag 0x0
[  730.228379][    T8] lenovo 0003:17EF:6047.0022: unknown main item tag 0x0
[  730.273525][T12539] usb 5-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 0
[  730.313974][    T8] lenovo 0003:17EF:6047.0022: unknown main item tag 0x0
[  730.348133][T12539] usb 5-1: config 86 interface 78 has no altsetting 0
[  730.379756][    T8] lenovo 0003:17EF:6047.0022: unknown main item tag 0x0
[  730.437024][T12539] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d
[  730.458050][    T8] lenovo 0003:17EF:6047.0022: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0
[  730.500531][T12539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.552832][T12539] usb 5-1: Product: syz
[  730.590058][T12539] usb 5-1: Manufacturer: syz
[  730.644194][T12539] usb 5-1: SerialNumber: syz
[  730.707978][T17865] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  730.746858][    T8] lenovo 0003:17EF:6047.0022: Failed to switch middle button: -71
[  730.794188][    T8] lenovo 0003:17EF:6047.0022: Fn-lock setting failed: -71
[  730.854186][    T8] lenovo 0003:17EF:6047.0022: Sensitivity setting failed: -71
[  730.915770][    T8] usb 10-1: USB disconnect, device number 13
[  731.092746][T12539] kvaser_usb 5-1:86.78: Cannot get software info, error -90
[  731.100099][T12539] kvaser_usb: probe of 5-1:86.78 failed with error -90
[  731.188587][T12539] usb 5-1: USB disconnect, device number 12
[  731.620365][T17893] loop9: detected capacity change from 0 to 512
[  731.689643][T17893] FAT-fs (loop9): Directory bread(block 2080) failed
[  731.746515][T17893] FAT-fs (loop9): Directory bread(block 2081) failed
[  731.793348][T17893] FAT-fs (loop9): Directory bread(block 2082) failed
[  731.835639][T17893] FAT-fs (loop9): Directory bread(block 2083) failed
[  731.868127][T17893] FAT-fs (loop9): Directory bread(block 2084) failed
[  731.918621][T17893] FAT-fs (loop9): Directory bread(block 2085) failed
[  731.954701][T17893] FAT-fs (loop9): Directory bread(block 2086) failed
[  731.989014][T17883] loop6: detected capacity change from 0 to 40427
[  732.006225][T17893] FAT-fs (loop9): Directory bread(block 2087) failed
[  732.062510][T17883] F2FS-fs (loop6): Wrong segment_count / block_count (31 > 0)
[  732.070073][T17883] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  732.113727][T17893] FAT-fs (loop9): Directory bread(block 2080) failed
[  732.158294][T17893] FAT-fs (loop9): Directory bread(block 2081) failed
[  732.175115][T17883] F2FS-fs (loop6): invalid crc value
[  732.221784][T17883] F2FS-fs (loop6): Found nat_bits in checkpoint
[  732.486639][T17883] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  732.530968][T17883] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  732.761496][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4083'.
[  732.822917][ T8574] syz-executor: attempt to access beyond end of device
[  732.822917][ T8574] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  732.898211][ T8574] F2FS-fs (loop6): Remounting filesystem read-only
[  733.189618][T17916] program syz.8.4087 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  733.477632][T17926] loop9: detected capacity change from 0 to 8
[  733.607358][T17928] loop4: detected capacity change from 0 to 1024
[  733.737429][T17928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  734.136360][T17934] loop8: detected capacity change from 0 to 1024
[  734.187506][T17934] EXT4-fs: Ignoring removed bh option
[  734.249244][T17934] EXT4-fs: Ignoring removed bh option
[  734.311887][T17934] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  734.421705][T17934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  734.519165][T17934] EXT4-fs error (device loop8): empty_inline_dir:1884: inode #12: block 7: comm syz.8.4095: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  734.608147][   T28] audit: type=1400 audit(1793768911.867:211): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=17947 comm="syz.4.4099" name="/" offset=59
[  734.680171][T17934] EXT4-fs (loop8): Remounting filesystem read-only
[  734.724392][T17934] EXT4-fs warning (device loop8): empty_inline_dir:1891: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  734.896008][T12130] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.908128][T17954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4102'.
[  735.298530][T17962] loop6: detected capacity change from 0 to 512
[  735.378698][T17962] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  735.483452][T17962] EXT4-fs (loop6): 1 truncate cleaned up
[  735.526126][T17962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  735.566374][T17967] loop8: detected capacity change from 0 to 1024
[  735.791603][    T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  735.949449][ T8574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  736.032737][    T8] usb 5-1: Using ep0 maxpacket: 32
[  736.091449][    T8] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  736.135620][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.183169][T17971] scsi_strcpy_devinfo: model string 'mo�劌r�����r��del' is too long
[  736.199941][    T8] usb 5-1: Product: syz
[  736.218605][    T8] usb 5-1: Manufacturer: syz
[  736.248024][    T8] usb 5-1: SerialNumber: syz
[  736.274042][    T8] usb 5-1: config 0 descriptor??
[  736.299164][T17975] loop8: detected capacity change from 0 to 256
[  736.558450][T17979] dyndbg: bad flag-op e, at start of eM�wOITÝR�ூv���
[  736.600482][T17979] dyndbg: flags parse failed
[  736.973238][    T8] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  737.022689][    T8] peak_usb 5-1:0.0 can0: sending command failure: -22
[  737.062263][    T8] peak_usb 5-1:0.0 can0: sending command failure: -22
[  737.081347][T12539] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[  737.284323][T12539] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  737.332190][    T8] peak_usb: probe of 5-1:0.0 failed with error -22
[  737.351286][T12539] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  737.417370][    T8] usb 5-1: USB disconnect, device number 13
[  737.443779][T12539] usb 10-1: config 0 interface 0 has no altsetting 0
[  737.501743][T12539] usb 10-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00
[  737.570565][T12539] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.622970][T12539] usb 10-1: config 0 descriptor??
[  737.629317][T17983] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  737.755100][T17990] vivid-000: disconnect
[  737.786245][T17989] vivid-000: reconnect
[  738.151622][T12539] input: HID 04b3:3108 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:04B3:3108.0023/input/input41
[  738.213941][T18000] loop9: detected capacity change from 0 to 7
[  738.270837][T18000] Dev loop9: unable to read RDB block 7
[  738.295094][T18000]  loop9: unable to read partition table
[  738.368926][T18000] loop9: partition table beyond EOD, truncated
[  738.419986][T18000] loop_reread_partitions: partition scan of loop9 (��) failed (rc=-5)
[  738.430490][T12539] lenovo 0003:04B3:3108.0023: input,hidraw0: USB HID v0.04 Joystick [HID 04b3:3108] on usb-dummy_hcd.9-1/input0
[  738.447097][T17999] loop6: detected capacity change from 0 to 8192
[  738.576954][T12539] usb 10-1: USB disconnect, device number 14
[  738.621851][T17999] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  738.756829][T17999] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  738.852635][T17999] REISERFS (device loop6): using ordered data mode
[  738.859232][T17999] reiserfs: using flush barriers
[  738.929296][T18005] fido_id[18005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  738.959031][T17999] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  739.045080][T17999] REISERFS (device loop6): checking transaction log (loop6)
[  739.497053][T17999] REISERFS (device loop6): Using tea hash to sort names
[  739.538329][T17999] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  739.987965][T18027] loop4: detected capacity change from 0 to 4096
[  740.070456][T12539] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  740.116577][T18027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  740.265182][T18027] Quota error (device loop4): do_check_range: Getting block 3472883715 out of range 1-5
[  740.338345][T18027] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  740.361830][T12539] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  740.390147][T18027] EXT4-fs error (device loop4): ext4_acquire_dquot:6958: comm syz.4.4132: Failed to acquire dquot type 0
[  740.508880][ T7842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.871626][T18030] ceph: No mds server is up or the cluster is laggy
[  740.908768][T12539] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  741.539449][T18055] loop4: detected capacity change from 0 to 4096
[  741.554284][T18058] loop8: detected capacity change from 0 to 512
[  741.585468][T18058] EXT4-fs: Ignoring removed nobh option
[  741.648953][T18058] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  741.674360][T18055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  741.725416][T18058] EXT4-fs (loop8): 1 truncate cleaned up
[  741.749678][T18058] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  741.988104][   T28] audit: type=1800 audit(1793768919.247:212): pid=18048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4139" name="file1" dev="loop4" ino=15 res=0 errno=0
[  742.206592][T12130] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.525875][ T7842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  743.384161][T18081] loop9: detected capacity change from 0 to 256
[  744.019832][T18092] netlink: 209592 bytes leftover after parsing attributes in process `syz.6.4157'.
[  744.630785][T18077] loop4: detected capacity change from 0 to 32768
[  744.765044][T18077] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  745.138085][T18077] XFS (loop4): Ending clean mount
[  745.183584][T18077] XFS (loop4): Quotacheck needed: Please wait.
[  745.432406][T18077] XFS (loop4): Quotacheck: Done.
[  745.605673][T18128] loop9: detected capacity change from 0 to 2048
[  745.731345][T18129] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  746.021714][ T7842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  746.680074][T18149] loop8: detected capacity change from 0 to 16
[  746.745719][T18149] erofs: (device loop8): mounted with root inode @ nid 36.
[  747.406390][T18162] nvme_fcloop: unknown parameter or missing value 'wwn'
[  747.453374][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  747.459862][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  747.531347][T18166] rnbd_client L127: Can't parse path h: -93
[  748.412725][T18188] tun0: tun_chr_ioctl cmd 1074025677
[  748.418256][T18188] tun0: linktype set to 776
[  748.449548][T18193] loop4: detected capacity change from 0 to 512
[  748.474672][T18194] loop8: detected capacity change from 0 to 164
[  748.504708][T18193] EXT4-fs: Ignoring removed oldalloc option
[  748.604054][T18193] EXT4-fs: Ignoring removed i_version option
[  748.672155][T18193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  748.808217][T18193] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4198: invalid indirect mapped block 4294967295 (level 1)
[  748.961389][T18193] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4198: invalid indirect mapped block 4294967295 (level 1)
[  749.057486][T18193] EXT4-fs (loop4): 2 truncates cleaned up
[  749.083114][T18193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  749.256119][T18193] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.4.4198: path /805/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0
[  749.492974][ T7842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  749.528160][   T28] audit: type=1800 audit(1793768926.777:213): pid=18216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4209" name="features" dev="configfs" ino=47908 res=0 errno=0
[  749.548674][    C0] vkms_vblank_simulate: vblank timer overrun
[  750.447084][T18221] loop8: detected capacity change from 0 to 131072
[  750.491881][T18221] F2FS-fs (loop8): Wrong secs_per_zone / total_sections (512, 24)
[  750.499806][T18221] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  750.508143][T18221] F2FS-fs (loop8): Test dummy encryption mode enabled
[  750.516355][T18221] F2FS-fs (loop8): invalid crc value
[  750.554223][T18221] F2FS-fs (loop8): Found nat_bits in checkpoint
[  750.608589][T18221] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  750.629392][T18221] F2FS-fs (loop8): Start checkpoint disabled!
[  750.655622][T18221] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  750.663214][T18221] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  750.845369][T18230] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  751.509541][T18243] loop4: detected capacity change from 0 to 2048
[  751.628182][T18251] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  752.803062][T18265] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)'
[  752.851468][T12539] usb 9-1: new low-speed USB device number 16 using dummy_hcd
[  752.973050][ T8108] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  753.085936][T12539] usb 9-1: unable to get BOS descriptor or descriptor too short
[  753.118585][T12539] usb 9-1: config 8 has an invalid interface number: 109 but max is 0
[  753.147838][T12539] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  753.188687][T12539] usb 9-1: config 8 has no interface number 0
[  753.196042][ T8108] usb 5-1: Using ep0 maxpacket: 16
[  753.225188][T12539] usb 9-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  753.236509][ T8108] usb 5-1: config 0 has an invalid interface number: 98 but max is 0
[  753.265020][ T8108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  753.291239][T12539] usb 9-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  753.321729][ T8108] usb 5-1: config 0 has no interface number 0
[  753.337852][T12539] usb 9-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  753.359223][ T8108] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  753.398160][T12539] usb 9-1: string descriptor 0 read error: -22
[  753.411960][ T8108] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  753.433833][T12539] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[  753.465217][ T8108] usb 5-1: config 0 interface 98 has no altsetting 0
[  753.474705][T12539] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.496271][T18273] kAFS: Invalid Command on /proc/fs/afs/cells file
[  753.513544][ T8108] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  753.534551][T12539] metro_usb 9-1:8.109: Metrologic USB to Serial converter detected
[  753.560765][ T8108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.599557][ T8108] usb 5-1: Product: syz
[  753.620230][T12539] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  753.639598][ T8108] usb 5-1: Manufacturer: syz
[  753.665320][ T8108] usb 5-1: SerialNumber: syz
[  753.708301][ T8108] usb 5-1: config 0 descriptor??
[  753.759887][T18263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  753.802697][T18263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  753.877050][T18261] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90
[  753.949063][   T57] usb 9-1: USB disconnect, device number 16
[  753.990145][   T57] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  754.038113][   T57] metro_usb 9-1:8.109: device disconnected
[  754.092839][T18263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  754.137455][T18263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  754.796388][ T8108] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  754.848917][ T8108] asix: probe of 5-1:0.98 failed with error -71
[  754.909134][ T8108] usb 5-1: USB disconnect, device number 14
[  756.140345][T18312] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  756.189491][   T28] audit: type=1326 audit(1793768933.447:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  756.309754][   T28] audit: type=1326 audit(1793768933.477:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  756.333910][    C0] vkms_vblank_simulate: vblank timer overrun
[  756.349636][T18316] loop8: detected capacity change from 0 to 4096
[  756.408499][T18316] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512).
[  756.498077][T18316] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  756.507582][   T28] audit: type=1326 audit(1793768933.477:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  756.531895][    C0] vkms_vblank_simulate: vblank timer overrun
[  756.693605][   T28] audit: type=1326 audit(1793768933.487:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  756.717757][    C0] vkms_vblank_simulate: vblank timer overrun
[  756.845234][T18329] loop7: detected capacity change from 0 to 7
[  756.891181][    C0] blk_print_req_error: 72 callbacks suppressed
[  756.891195][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  756.906777][    C0] buffer_io_error: 138 callbacks suppressed
[  756.906792][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  756.965074][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  756.974308][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  756.982676][   T28] audit: type=1326 audit(1793768933.487:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  757.011987][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  757.021586][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  757.032074][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  757.041363][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  757.056367][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  757.065678][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  757.074492][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  757.083791][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  757.099124][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  757.108420][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  757.116457][T18329] ldm_validate_partition_table(): Disk read failed.
[  757.150583][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  757.159884][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  757.168674][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  757.177956][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  757.188147][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  757.197374][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  757.209519][T18329] Dev loop7: unable to read RDB block 0
[  757.248405][T18329]  loop7: unable to read partition table
[  757.277854][T18329] loop7: partition table beyond EOD, truncated
[  757.311545][   T28] audit: type=1326 audit(1793768933.487:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  757.335641][    C0] vkms_vblank_simulate: vblank timer overrun
[  757.359866][T18327] loop4: detected capacity change from 0 to 8192
[  757.370047][T18329] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  757.571633][   T28] audit: type=1326 audit(1793768933.487:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  757.801854][   T28] audit: type=1326 audit(1793768933.487:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  757.975247][T18341] loop6: detected capacity change from 0 to 512
[  758.012351][   T28] audit: type=1326 audit(1793768933.497:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  758.036473][    C0] vkms_vblank_simulate: vblank timer overrun
[  758.172555][T18341] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.4259: iget: bad i_size value: 38620345925642
[  758.253291][   T28] audit: type=1326 audit(1793768933.497:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.4.4248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  758.296393][T18345] loop8: detected capacity change from 0 to 4096
[  758.311791][T18341] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4259: couldn't read orphan inode 15 (err -117)
[  758.388495][T18345] NILFS (loop8): invalid segment: Checksum error in segment payload
[  758.409004][T18341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  758.450195][T18345] NILFS (loop8): trying rollback from an earlier position
[  758.517509][T18345] NILFS (loop8): recovery complete
[  758.574510][T18351] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  758.750686][ T2987] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm kworker/u4:12: bg 0: block 5: invalid block bitmap
[  758.858183][T18356] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 4096
[  758.876062][ T2987] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  758.948202][ T2987] EXT4-fs (loop6): This should not happen!! Data will be lost
[  758.948202][ T2987] 
[  758.987142][T18356] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=12)
[  759.028623][ T2987] EXT4-fs (loop6): Total free blocks count 0
[  759.045515][ T2987] EXT4-fs (loop6): Free/Dirty block details
[  759.077521][ T2987] EXT4-fs (loop6): free_blocks=0
[  759.103953][ T2987] EXT4-fs (loop6): dirty_blocks=1
[  759.109044][ T2987] EXT4-fs (loop6): Block reservation details
[  759.132046][T18356] Remounting filesystem read-only
[  759.137214][T18356] NILFS (loop8): error -5 cleaning segments
[  759.162782][ T2987] EXT4-fs (loop6): i_reserved_data_blocks=1
[  759.178144][T18356] NILFS (loop8): error -30 cleaning segments
[  759.197028][ T8574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.402622][T12130] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  759.434622][T12130] NILFS (loop8): discard dirty page: offset=0, ino=12
[  759.461714][T12130] NILFS (loop8): discard dirty block: blocknr=0, size=1024
[  759.511383][T12130] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  759.520371][T12130] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  759.621210][T12130] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  759.648358][T12130] NILFS (loop8): discard dirty page: offset=0, ino=2
[  759.670444][T12130] NILFS (loop8): discard dirty block: blocknr=5, size=1024
[  759.714874][T12130] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  759.759466][T12130] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  759.810389][T12130] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  759.853861][T12130] NILFS (loop8): discard dirty page: offset=0, ino=6
[  759.885154][T12130] NILFS (loop8): discard dirty page: offset=0, ino=5
[  759.918389][T12130] NILFS (loop8): discard dirty block: blocknr=11, size=1024
[  759.970614][T12130] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  760.013320][T12130] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  760.055281][T12130] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  760.104100][T12130] NILFS (loop8): discard dirty page: offset=0, ino=3
[  760.441947][T18386] loop8: detected capacity change from 0 to 1024
[  760.861938][T18391] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4280'.
[  761.180191][T18397] loop9: detected capacity change from 0 to 512
[  761.267760][T18397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  761.374790][T18397] EXT4-fs warning (device loop9): ext4_group_add:1742: No reserved GDT blocks, can't resize
[  761.491713][   T57] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  761.499664][T12358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  761.721467][   T57] usb 5-1: config 93 has too many interfaces: 125, using maximum allowed: 32
[  761.754394][   T57] usb 5-1: config 93 has 1 interface, different from the descriptor's value: 125
[  761.807085][   T57] usb 5-1: config 93 has no interface number 0
[  761.837493][   T57] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  761.875159][   T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.922937][   T57] usb 5-1: Product: syz
[  761.946162][   T57] usb 5-1: Manufacturer: syz
[  761.964924][T18413] loop9: detected capacity change from 0 to 256
[  761.984687][   T57] usb 5-1: SerialNumber: syz
[  762.064139][T18413] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  762.174777][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  762.174789][   T28] audit: type=1800 audit(1793768939.437:227): pid=18413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4289" name="file1" dev="loop9" ino=1048887 res=0 errno=0
[  762.253534][T18415] loop8: detected capacity change from 0 to 64
[  762.266079][T18413] FAT-fs (loop9): error, corrupted file size (i_pos 196, 2048)
[  762.301400][   T57] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  762.338139][T18413] FAT-fs (loop9): Filesystem has been set read-only
[  762.377464][T18395] loop6: detected capacity change from 0 to 40427
[  762.386668][   T57] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  762.457848][T18395] F2FS-fs (loop6): invalid crc value
[  762.471406][   T57] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  762.509457][T18395] F2FS-fs (loop6): Found nat_bits in checkpoint
[  762.547872][   T57] usb 5-1: media controller created
[  762.686591][   T57] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  762.883520][T18395] F2FS-fs (loop6): Start checkpoint disabled!
[  762.916276][   T57] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  763.055413][T18395] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  763.205142][   T57] usb 5-1: USB disconnect, device number 15
[  763.279531][T18426] loop8: detected capacity change from 0 to 1024
[  763.308225][T18395] F2FS-fs (loop6): Skipping Checkpoint. Checkpoints currently disabled.
[  763.864053][   T12] kworker/u4:1: attempt to access beyond end of device
[  763.864053][   T12] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  763.947182][   T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  763.999372][   T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  764.083384][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4298'.
[  764.126741][T18440] loop8: detected capacity change from 0 to 512
[  764.171383][T18440] EXT4-fs: Invalid want_extra_isize 206
[  764.591300][   T57] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[  764.821944][   T57] usb 10-1: unable to get BOS descriptor or descriptor too short
[  764.858463][   T57] usb 10-1: not running at top speed; connect to a high speed hub
[  764.897090][   T57] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  764.921846][   T57] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  764.983845][   T57] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  765.031854][   T57] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  765.094159][   T57] usb 10-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[  765.125839][   T57] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.168845][   T57] usb 10-1: Product: syz
[  765.193265][   T57] usb 10-1: Manufacturer: syz
[  765.221286][   T57] usb 10-1: SerialNumber: syz
[  765.549728][   T57] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  765.604387][   T57] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  765.898782][   T57] usb 10-1: USB disconnect, device number 15
[  766.197457][T18449] loop4: detected capacity change from 0 to 32768
[  766.300540][T18449] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  766.383371][T18449] JBD2: Ignoring recovery information on journal
[  766.526312][T18449] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  767.200876][T18492] loop9: detected capacity change from 0 to 8
[  767.332239][ T7842] ocfs2: Unmounting device (7,4) on (node local)
[  768.044689][T18509] tipc: New replicast peer: 255.255.255.255
[  768.078139][T18509] tipc: Enabled bearer <udp:syz2>, priority 10
[  768.128630][T18509] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001
[  768.160955][T14621] Bluetooth: hci4: unexpected event for opcode 0x0419
[  768.340417][   T28] audit: type=1326 audit(1793768945.597:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  768.364567][    C0] vkms_vblank_simulate: vblank timer overrun
[  768.453286][   T28] audit: type=1326 audit(1793768945.637:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  768.555910][   T28] audit: type=1326 audit(1793768945.637:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  768.580180][    C0] vkms_vblank_simulate: vblank timer overrun
[  768.629898][T18524] rxe_eth0 speed is unknown, defaulting to 1000
[  768.663637][   T28] audit: type=1326 audit(1793768945.637:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  768.791169][   T28] audit: type=1326 audit(1793768945.637:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  768.815225][    C0] vkms_vblank_simulate: vblank timer overrun
[  768.891551][T18529] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4336'.
[  768.919571][   T28] audit: type=1326 audit(1793768945.637:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  769.039475][   T28] audit: type=1326 audit(1793768945.637:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  769.063625][    C0] vkms_vblank_simulate: vblank timer overrun
[  769.086027][    T8] tipc: Node number set to 1593835523
[  769.181409][   T28] audit: type=1326 audit(1793768945.637:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  769.304573][   T28] audit: type=1326 audit(1793768945.637:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  769.447574][T18539] loop6: detected capacity change from 0 to 128
[  769.457121][   T28] audit: type=1326 audit(1793768945.647:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18516 comm="syz.4.4331" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fb24819fb19 code=0x7ffc0000
[  769.481165][    C0] vkms_vblank_simulate: vblank timer overrun
[  769.921132][T14621] Bluetooth: hci0: command 0x0406 tx timeout
[  770.785799][T18569] loop8: detected capacity change from 0 to 2048
[  771.067949][T18574] ip_tables: iptables: counters copy to user failed while replacing table
[  771.855206][T18567] loop4: detected capacity change from 0 to 32768
[  772.173473][T14621] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  772.185446][T14621] Bluetooth: hci4: Injecting HCI hardware error event
[  772.197888][ T5798] Bluetooth: hci4: hardware error 0x00
[  772.507714][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4366'.
[  772.554885][T18583] loop6: detected capacity change from 0 to 32768
[  772.826023][T18606] ea_get: invalid extended attribute
[  772.887016][T18606] ffff88805c46a830: 04 00 00 00                                      ....
[  772.908055][T18605] loop9: detected capacity change from 0 to 4096
[  772.976359][T18608] loop8: detected capacity change from 0 to 1024
[  773.017454][T18605] NILFS (loop9): invalid segment: Checksum error in segment payload
[  773.123177][T18605] NILFS (loop9): trying rollback from an earlier position
[  773.269096][T18605] NILFS (loop9): recovery complete
[  773.376395][T18610] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  773.539541][T18605] NILFS (loop9): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  773.867355][T18610] NILFS (loop9): nilfs_direct_assign (ino=3): invalid pointer: 0
[  773.897664][T18615] loop6: detected capacity change from 0 to 256
[  773.914701][T18610] NILFS error (device loop9): nilfs_bmap_assign: broken bmap (inode number=3)
[  773.970596][T18615] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  774.027789][T18610] Remounting filesystem read-only
[  774.053140][   T11] NILFS (loop9): discard dirty page: offset=0, ino=3
[  774.059892][   T11] NILFS (loop9): discard dirty page: offset=131072, ino=3
[  774.136226][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  774.181213][T18618] udc dummy_udc.0: soft-connect without a gadget driver
[  774.203524][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  774.241621][ T5798] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  774.279326][   T11] NILFS (loop9): discard dirty block: blocknr=0, size=1024
[  774.319425][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  774.376612][   T11] NILFS (loop9): discard dirty page: offset=0, ino=12
[  774.415682][   T11] NILFS (loop9): discard dirty block: blocknr=0, size=1024
[  774.474029][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  774.518368][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  774.551898][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  774.595321][T18625] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4376'.
[  774.608684][   T11] NILFS (loop9): discard dirty page: offset=0, ino=2
[  774.636341][   T11] NILFS (loop9): discard dirty block: blocknr=5, size=1024
[  774.684686][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  774.734934][   T61] tipc: Subscription rejected, illegal request
[  774.752387][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  774.815752][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  774.844360][   T11] NILFS (loop9): discard dirty page: offset=0, ino=5
[  774.880525][   T11] NILFS (loop9): discard dirty block: blocknr=11, size=1024
[  775.640461][T18632] loop6: detected capacity change from 0 to 131072
[  775.677519][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  775.690228][T18632] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945)
[  775.699275][T18632] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  775.729990][T18632] F2FS-fs (loop6): invalid crc value
[  775.757322][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  775.787771][T18632] F2FS-fs (loop6): Found nat_bits in checkpoint
[  775.859766][T18632] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  775.868134][T18632] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  775.888125][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  775.955476][   T11] NILFS (loop9): discard dirty page: offset=0, ino=4
[  775.987611][T18632] F2FS-fs (loop6): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix
[  776.015784][   T11] NILFS (loop9): discard dirty block: blocknr=10, size=1024
[  776.081454][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  776.124354][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  776.191256][   T11] NILFS (loop9): discard dirty block: blocknr=18446744073709551615, size=1024
[  776.244091][T12358] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer
[  776.304255][T12358] NILFS (loop9): discard dirty page: offset=0, ino=6
[  776.668113][T18645] loop6: detected capacity change from 0 to 256
[  776.735918][T18645] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  776.816084][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  776.816096][   T28] audit: type=1800 audit(1793768954.077:257): pid=18645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4382" name="file1" dev="loop6" ino=1048905 res=0 errno=0
[  776.900820][T18645] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2048)
[  776.940616][T18645] FAT-fs (loop6): Filesystem has been set read-only
[  777.295767][T18638] loop4: detected capacity change from 0 to 32768
[  777.359013][T18638] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  777.865002][T16309] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  778.163376][T18664] netem: change failed
[  778.472007][T18667] loop6: detected capacity change from 0 to 4096
[  778.480523][T18670] page:ffffea00015f8200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e08
[  778.545369][T18670] head:ffffea00015f8200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  778.591183][T12539] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  778.623314][T18670] memcg:ffff88802af6f601
[  778.627654][T18670] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  778.660658][T18673] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  778.724628][T18670] page_type: 0xffffffff()
[  778.760558][T18670] raw: 00fff00000000840 ffff888018c4f3c0 0000000000000000 dead000000000001
[  778.807127][T18675] loop8: detected capacity change from 0 to 128
[  778.821645][T12539] usb 5-1: Using ep0 maxpacket: 8
[  778.826877][T18670] raw: 0000000000000000 0000000000080008 00000001ffffffff ffff88802af6f601
[  778.855620][T12539] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  778.884444][T18670] page dumped because: unmovable page
[  778.894577][T12539] usb 5-1: config 179 has no interface number 0
[  778.908220][T18675] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  778.932591][T18670] page_owner tracks the page as allocated
[  778.954602][T12539] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  778.974997][T18670] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5788, tgid 5788 (syz-executor), ts 130526815140, free_ts 130436391262
[  778.998031][    C0] vkms_vblank_simulate: vblank timer overrun
[  779.035130][T18675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  779.065184][T12539] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  779.120469][T12539] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  779.199016][T18670]  post_alloc_hook+0x1c1/0x200
[  779.219875][T12539] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  779.278836][T18670]  get_page_from_freelist+0x2181/0x22a0
[  779.311207][T12539] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  779.325315][T18670]  __alloc_pages+0x1f0/0x460
[  779.329993][T18670]  alloc_slab_page+0x5d/0x180
[  779.370579][T18670]  new_slab+0x87/0x2d0
[  779.401250][T12539] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  779.415233][T18670]  ___slab_alloc+0xc5c/0x12f0
[  779.419958][T18670]  __kmem_cache_alloc_node+0x122/0x260
[  779.445849][T12539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.462759][T18670]  __kmalloc_node+0xa6/0x240
[  779.467445][T18670]  kvmalloc_node+0x70/0x180
[  779.513279][T18668] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  779.520611][T18670]  alloc_fdtable+0x106/0x2c0
[  779.554729][T18670]  dup_fd+0x747/0xa20
[  779.589353][T18670]  copy_files+0xaf/0x110
[  779.617069][T18670]  copy_process+0x157d/0x3da0
[  779.636028][T18670]  kernel_clone+0x24b/0x8a0
[  779.640749][T18670]  __x64_sys_clone+0x1b7/0x230
[  779.649200][T18670]  do_syscall_64+0x55/0xb0
[  779.658539][T18670] page last free stack trace:
[  779.666141][T18670]  free_unref_page_prepare+0x7d7/0x8f0
[  779.674415][T18670]  free_unref_page+0x32/0x2e0
[  779.679314][T18670]  __unfreeze_partials+0x1cf/0x210
[  779.687405][T18670]  put_cpu_partial+0x17c/0x250
[  779.695223][T18670]  __slab_free+0x319/0x400
[  779.700729][T18670]  qlist_free_all+0x75/0xd0
[  779.709093][T18670]  kasan_quarantine_reduce+0x143/0x160
[  779.719215][T18670]  __kasan_slab_alloc+0x22/0x80
[  779.733887][T18670]  slab_post_alloc_hook+0x6a/0x4d0
[  779.739316][T18670]  kmem_cache_alloc+0x17e/0x2d0
[  779.749475][T18670]  getname_flags+0xbb/0x500
[  779.759953][T18670]  __x64_sys_symlinkat+0x7c/0xb0
[  779.766521][T18670]  do_syscall_64+0x55/0xb0
[  779.774632][T18670]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  780.381778][   T57] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input42
[  780.883987][   T57] usb 5-1: USB disconnect, device number 16
[  780.889956][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  780.889996][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  781.087939][   T57] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  782.094659][T18714] kvm: user requested TSC rate below hardware speed
[  782.341153][    T8] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  782.562384][    T8] usb 10-1: config 15 has an invalid interface number: 10 but max is 0
[  782.584308][    T8] usb 10-1: config 15 has no interface number 0
[  782.621198][    T8] usb 10-1: config 15 interface 10 has no altsetting 0
[  782.649500][    T8] usb 10-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=dd.83
[  782.684183][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.725878][    T8] usb 10-1: Product: syz
[  782.764704][    T8] usb 10-1: Manufacturer: syz
[  782.769450][    T8] usb 10-1: SerialNumber: syz
[  782.797542][T18706] loop4: detected capacity change from 0 to 32768
[  782.855151][T18706] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.4406 (18706)
[  782.958689][T18706] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  783.063298][    T8] usb 10-1: Found UVC 0.00 device syz (05ac:8501)
[  783.069879][    T8] usb 10-1: No valid video chain found.
[  783.076125][T18706] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  783.129492][T18706] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  783.171308][    T8] usb 10-1: USB disconnect, device number 16
[  783.192704][T18736] loop6: detected capacity change from 0 to 764
[  783.228618][T18706] BTRFS info (device loop4): use zstd compression, level 3
[  783.302040][T18736] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  783.310478][T18706] BTRFS info (device loop4): using free space tree
[  783.548821][T18706] BTRFS info (device loop4): enabling ssd optimizations
[  783.608997][T18706] BTRFS info (device loop4): auto enabling async discard
[  783.864403][   T28] audit: type=1800 audit(1793768961.117:258): pid=18706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4406" name="file1" dev="loop4" ino=260 res=0 errno=0
[  784.249135][T18771] loop9: detected capacity change from 0 to 512
[  784.411362][T18771] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #15: comm syz.9.4427: inode has both inline data and extents flags
[  784.524241][T18771] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.4427: couldn't read orphan inode 15 (err -117)
[  784.614205][T18771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  784.742029][ T7842] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  784.781797][   T57] kernel write not supported for file /sg0 (pid: 57 comm: kworker/0:2)
[  784.942917][T12358] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.746161][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  893.560968][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  893.567986][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P18783/1:b..l P8574/1:b..l
[  893.578076][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=125765, q=92 ncpus=1)
[  893.585844][    C0] task:syz-executor    state:R  running task     stack:21736 pid:8574  ppid:8565   flags:0x00004000
[  893.598924][    C0] Call Trace:
[  893.602312][    C0]  <TASK>
[  893.605275][    C0]  __schedule+0x156f/0x4720
[  893.609915][    C0]  ? __lock_acquire+0x135d/0x7eb0
[  893.614968][    C0]  ? asan.module_dtor+0x20/0x20
[  893.619840][    C0]  ? mark_lock+0x94/0x320
[  893.624185][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  893.630187][    C0]  ? preempt_schedule_irq+0xb4/0x150
[  893.635493][    C0]  preempt_schedule_irq+0xbf/0x150
[  893.640625][    C0]  ? preempt_schedule_notrace+0x110/0x110
[  893.646362][    C0]  ? mark_lock+0x94/0x320
[  893.650731][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  893.656556][    C0]  irqentry_exit+0x67/0x70
[  893.660998][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  893.667003][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x82/0x90
[  893.673871][    C0] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24
[  893.693494][    C0] RSP: 0018:ffffc900032f7330 EFLAGS: 00000293
[  893.699680][    C0] RAX: ffffffff813c00fb RBX: 0000000080000000 RCX: 0000000000000000
[  893.707719][    C0] RDX: ffff88802b8a5a00 RSI: 0000000080000000 RDI: 0000000000000000
[  893.715755][    C0] RBP: 0000000000000001 R08: ffff88802b8a5a00 R09: 0000000000000003
[  893.723846][    C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc900032f7540
[  893.731842][    C0] R13: ffffc900032f7408 R14: ffffc900032f7688 R15: ffffc900032f7418
[  893.739843][    C0]  ? unwind_next_frame+0x1d2b/0x2990
[  893.745160][    C0]  unwind_next_frame+0x1d2b/0x2990
[  893.750305][    C0]  ? save_stack+0x125/0x230
[  893.754828][    C0]  ? save_stack+0x125/0x230
[  893.759348][    C0]  ? stack_trace_save+0x100/0x100
[  893.764431][    C0]  arch_stack_walk+0x144/0x190
[  893.769233][    C0]  ? __reset_page_owner+0x4e/0x190
[  893.774382][    C0]  stack_trace_save+0xaa/0x100
[  893.779174][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  893.784304][    C0]  ? mark_lock+0x94/0x320
[  893.788653][    C0]  save_stack+0x125/0x230
[  893.793010][    C0]  ? __reset_page_owner+0x190/0x190
[  893.798219][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  893.804136][    C0]  ? page_ext_get+0x22/0x2b0
[  893.808758][    C0]  ? page_ext_get+0x1e2/0x2b0
[  893.813450][    C0]  __reset_page_owner+0x4e/0x190
[  893.818399][    C0]  free_unref_page_prepare+0x7d7/0x8f0
[  893.823884][    C0]  free_unref_page+0x32/0x2e0
[  893.828577][    C0]  __unfreeze_partials+0x1cf/0x210
[  893.833703][    C0]  put_cpu_partial+0x17c/0x250
[  893.838487][    C0]  ? put_cpu_partial+0x6e/0x250
[  893.843354][    C0]  __slab_free+0x319/0x400
[  893.847800][    C0]  ? _raw_spin_unlock+0x40/0x40
[  893.852664][    C0]  qlist_free_all+0x75/0xd0
[  893.857191][    C0]  kasan_quarantine_reduce+0x143/0x160
[  893.862665][    C0]  __kasan_kmalloc+0x22/0xa0
[  893.867273][    C0]  ? security_prepare_creds+0x4b/0x130
[  893.872808][    C0]  __kmalloc+0xb7/0x240
[  893.876987][    C0]  security_prepare_creds+0x4b/0x130
[  893.882292][    C0]  prepare_creds+0x427/0x5d0
[  893.886900][    C0]  copy_creds+0x105/0xa70
[  893.891473][    C0]  copy_process+0x973/0x3da0
[  893.896124][    C0]  ? __pidfd_prepare+0x140/0x140
[  893.901100][    C0]  kernel_clone+0x24b/0x8a0
[  893.905626][    C0]  ? create_io_thread+0x190/0x190
[  893.910683][    C0]  ? __might_fault+0xaa/0x120
[  893.915377][    C0]  __x64_sys_clone+0x1b7/0x230
[  893.920178][    C0]  ? __ia32_sys_vfork+0x140/0x140
[  893.925228][    C0]  ? lock_chain_count+0x20/0x20
[  893.930100][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  893.935339][    C0]  do_syscall_64+0x55/0xb0
[  893.939790][    C0]  ? clear_bhb_loop+0x40/0x90
[  893.944487][    C0]  ? clear_bhb_loop+0x40/0x90
[  893.949188][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  893.955103][    C0] RIP: 0033:0x7fe2707c8592
[  893.959533][    C0] RSP: 002b:00007ffdc07dfa10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  893.967958][    C0] RAX: ffffffffffffffda RBX: 00007ffdc07dfa10 RCX: 00007fe2707c8592
[  893.975942][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  893.983922][    C0] RBP: 00007ffdc07dfb9c R08: 0000000000000000 R09: 0000000000000001
[  893.991926][    C0] R10: 0000555587d197d0 R11: 0000000000000246 R12: 0000000000000001
[  893.999914][    C0] R13: 00000000000927c0 R14: 00000000000bfd6d R15: 00007ffdc07dfbf0
[  894.007939][    C0]  </TASK>
[  894.010999][    C0] task:syz.8.4433      state:R  running task     stack:25704 pid:18783 ppid:12130  flags:0x00004002
[  894.021787][    C0] Call Trace:
[  894.025077][    C0]  <TASK>
[  894.028022][    C0]  __schedule+0x156f/0x4720
[  894.032550][    C0]  ? verify_lock_unused+0x140/0x140
[  894.037774][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  894.043948][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  894.049156][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  894.055332][    C0]  ? asan.module_dtor+0x20/0x20
[  894.060200][    C0]  ? lock_acquire+0x208/0x420
[  894.064918][    C0]  ? preempt_schedule+0xc0/0xd0
[  894.069788][    C0]  preempt_schedule_common+0x82/0xc0
[  894.075097][    C0]  preempt_schedule+0xc0/0xd0
[  894.079792][    C0]  ? schedule_preempt_disabled+0x20/0x20
[  894.085443][    C0]  ? __lock_acquire+0x7eb0/0x7eb0
[  894.090487][    C0]  preempt_schedule_thunk+0x1a/0x30
[  894.095752][    C0]  _raw_spin_unlock+0x3a/0x40
[  894.100493][    C0]  follow_page_pte+0x221/0x1ae0
[  894.105382][    C0]  ? pmd_lock+0x60/0x60
[  894.109586][    C0]  __get_user_pages+0x58d/0x1580
[  894.114578][    C0]  ? populate_vma_page_range+0x380/0x380
[  894.120268][    C0]  populate_vma_page_range+0x2c1/0x380
[  894.125776][    C0]  ? fixup_user_fault+0x750/0x750
[  894.130845][    C0]  ? down_read+0x1ac/0x2e0
[  894.135284][    C0]  __mm_populate+0x260/0x390
[  894.139900][    C0]  ? faultin_page_range+0x8a0/0x8a0
[  894.145137][    C0]  ? up_write+0x1be/0x410
[  894.149514][    C0]  vm_mmap_pgoff+0x2da/0x3f0
[  894.154146][    C0]  ? account_locked_vm+0x200/0x200
[  894.159306][    C0]  ? ksys_mmap_pgoff+0xf3/0x720
[  894.164251][    C0]  ? __x64_sys_mmap+0x7a/0x130
[  894.169056][    C0]  do_syscall_64+0x55/0xb0
[  894.173501][    C0]  ? clear_bhb_loop+0x40/0x90
[  894.178201][    C0]  ? clear_bhb_loop+0x40/0x90
[  894.182903][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  894.188848][    C0] RIP: 0033:0x7f9c7439fb19
[  894.193275][    C0] RSP: 002b:00007f9c752c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  894.201703][    C0] RAX: ffffffffffffffda RBX: 00007f9c74625fa0 RCX: 00007f9c7439fb19
[  894.209688][    C0] RDX: 000000000000000e RSI: 0000000000b36000 RDI: 0000200000000000
[  894.217758][    C0] RBP: 00007f9c74437b70 R08: ffffffffffffffff R09: 0000000000003000
[  894.225748][    C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  894.233736][    C0] R13: 00007f9c74626038 R14: 00007f9c74625fa0 R15: 00007ffd7cdeac68
[  894.241752][    C0]  </TASK>
[  894.244783][    C0] rcu: rcu_preempt kthread starved for 7780 jiffies! g125765 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  894.256010][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  894.265999][    C0] rcu: RCU grace-period kthread stack dump:
[  894.271907][    C0] task:rcu_preempt     state:R  running task     stack:27816 pid:17    ppid:2      flags:0x00004000
[  894.282713][    C0] Call Trace:
[  894.286004][    C0]  <TASK>
[  894.288966][    C0]  __schedule+0x156f/0x4720
[  894.293519][    C0]  ? lock_chain_count+0x20/0x20
[  894.298403][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  894.303611][    C0]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  894.309517][    C0]  ? asan.module_dtor+0x20/0x20
[  894.314387][    C0]  ? rcu_is_watching+0x15/0xb0
[  894.319189][    C0]  schedule+0xbd/0x170
[  894.323298][    C0]  schedule_timeout+0x188/0x2d0
[  894.328165][    C0]  ? console_conditional_schedule+0x40/0x40
[  894.334094][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  894.340008][    C0]  ? update_process_times+0x1b0/0x1b0
[  894.345427][    C0]  ? prepare_to_swait_event+0x359/0x3c0
[  894.351018][    C0]  rcu_gp_fqs_loop+0x30d/0x15e0
[  894.355892][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  894.362063][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  894.368078][    C0]  ? __lock_acquire+0x7eb0/0x7eb0
[  894.373137][    C0]  ? rcu_gp_init+0x1530/0x1530
[  894.377913][    C0]  ? rcu_gp_cleanup+0xade/0xc30
[  894.382780][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  894.387991][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  894.393201][    C0]  rcu_gp_kthread+0x9e/0x400
[  894.397806][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  894.402939][    C0]  ? __kthread_parkme+0x71/0x1c0
[  894.407891][    C0]  ? __kthread_parkme+0x15b/0x1c0
[  894.412945][    C0]  kthread+0x2fa/0x390
[  894.417044][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  894.422188][    C0]  ? kthread_blkcg+0xd0/0xd0
[  894.426790][    C0]  ret_from_fork+0x48/0x80
[  894.431248][    C0]  ? kthread_blkcg+0xd0/0xd0
[  894.435853][    C0]  ret_from_fork_asm+0x11/0x20
[  894.440655][    C0]  </TASK>
[  894.443683][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  894.450012][    C0] CPU: 0 PID: 3391 Comm: kworker/R-bat_e Tainted: G S                 syzkaller #0
[  894.459320][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  894.469398][    C0] Workqueue: bat_events batadv_tt_purge
[  894.475073][    C0] RIP: 0010:unwind_next_frame+0x492/0x2990
[  894.480900][    C0] Code: e9 9b 00 00 00 4c 89 ed 4c 89 6c 24 40 4c 8b 74 24 50 48 89 d8 4c 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe <4d> 8d 7c 45 00 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df
[  894.500516][    C0] RSP: 0018:ffffc90000006c38 EFLAGS: 00000206
[  894.506594][    C0] RAX: 0000000000000006 RBX: ffffffff8f9d1b24 RCX: 0000000000000006
[  894.514576][    C0] RDX: ffff88802f133c00 RSI: 000000000000af52 RDI: 000000000000af59
[  894.522556][    C0] RBP: ffffffff8f9d1b0c R08: ffff88802f133c00 R09: 0000000000000003
[  894.530552][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: 000000000000af52
[  894.538535][    C0] R13: ffffffff8f9d1b0c R14: ffffffff81334527 R15: 0000000000000001
[  894.546515][    C0] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  894.555459][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  894.562048][    C0] CR2: 00007ff18ca68e45 CR3: 000000001b290000 CR4: 00000000003506f0
[  894.570031][    C0] Call Trace:
[  894.573323][    C0]  <IRQ>
[  894.576188][    C0]  ? arch_stack_walk+0xf7/0x190
[  894.581055][    C0]  ? arch_stack_walk+0xf8/0x190
[  894.585920][    C0]  __unwind_start+0x5bb/0x730
[  894.590633][    C0]  ? stack_trace_save+0x100/0x100
[  894.595763][    C0]  arch_stack_walk+0xf8/0x190
[  894.600479][    C0]  ? arch_stack_walk+0xf8/0x190
[  894.605346][    C0]  stack_trace_save+0xaa/0x100
[  894.610147][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  894.615292][    C0]  ? stack_trace_save+0xaa/0x100
[  894.620334][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  894.625464][    C0]  kasan_set_track+0x4e/0x70
[  894.630107][    C0]  __kasan_slab_alloc+0x6c/0x80
[  894.634978][    C0]  slab_post_alloc_hook+0x6a/0x4d0
[  894.640128][    C0]  kmem_cache_alloc_node+0x1af/0x320
[  894.645432][    C0]  ? kmalloc_reserve+0x95/0x240
[  894.650346][    C0]  kmalloc_reserve+0x95/0x240
[  894.655043][    C0]  __alloc_skb+0x138/0x2c0
[  894.659473][    C0]  synproxy_send_client_synack+0x170/0xda0
[  894.665368][    C0]  ? synproxy_pernet+0x45/0x270
[  894.670285][    C0]  ? __lock_acquire+0x7eb0/0x7eb0
[  894.675327][    C0]  ? verify_lock_unused+0x140/0x140
[  894.680537][    C0]  ? slab_free_freelist_hook+0x154/0x240
[  894.686184][    C0]  ? synproxy_init_timestamp_cookie+0x2d0/0x2d0
[  894.692436][    C0]  ? synproxy_pernet+0x45/0x270
[  894.697326][    C0]  ? synproxy_pernet+0x45/0x270
[  894.702228][    C0]  nft_synproxy_eval_v4+0x363/0x4e0
[  894.707444][    C0]  ? nft_synproxy_do_eval+0x5d0/0x5d0
[  894.712851][    C0]  ? nf_ip_checksum+0x13c/0x520
[  894.717817][    C0]  nft_synproxy_do_eval+0x386/0x5d0
[  894.723040][    C0]  ? nft_synproxy_validate+0xc0/0xc0
[  894.728403][    C0]  nft_do_chain+0x44b/0x16d0
[  894.733042][    C0]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  894.738983][    C0]  ? nf_nat_packet+0xf0/0xf0
[  894.743770][    C0]  nft_do_chain_inet+0x29b/0x380
[  894.748788][    C0]  ? nft_do_chain_arp+0x110/0x110
[  894.753853][    C0]  ? nf_nat_ipv4_local_in+0x22d/0x5d0
[  894.759242][    C0]  ? nft_do_chain_arp+0x110/0x110
[  894.764300][    C0]  nf_hook_slow+0xb9/0x210
[  894.768769][    C0]  NF_HOOK+0x21d/0x3b0
[  894.772857][    C0]  ? NF_HOOK+0x3b0/0x3b0
[  894.777110][    C0]  ? NF_HOOK+0x9f/0x3b0
[  894.781292][    C0]  ? ip_local_deliver+0x180/0x180
[  894.786335][    C0]  ? NF_HOOK+0x3b0/0x3b0
[  894.790612][    C0]  ? ip_local_deliver+0x10b/0x180
[  894.795672][    C0]  NF_HOOK+0x32d/0x3b0
[  894.799766][    C0]  ? ip_rcv_core+0xd80/0xd80
[  894.804373][    C0]  ? NF_HOOK+0x9f/0x3b0
[  894.808548][    C0]  ? ip_local_deliver+0x180/0x180
[  894.813629][    C0]  ? ip_rcv_core+0xd80/0xd80
[  894.818275][    C0]  ? ip_local_deliver_finish+0x510/0x510
[  894.823987][    C0]  ? ip_local_deliver_finish+0x510/0x510
[  894.829651][    C0]  __netif_receive_skb+0xcc/0x290
[  894.834983][    C0]  ? process_backlog+0x2cf/0x710
[  894.839956][    C0]  process_backlog+0x380/0x710
[  894.844749][    C0]  ? trigger_rx_softirq+0x60/0x60
[  894.849791][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  894.855789][    C0]  ? lock_chain_count+0x20/0x20
[  894.860678][    C0]  __napi_poll+0xbb/0x460
[  894.865030][    C0]  net_rx_action+0x65f/0xcc0
[  894.869644][    C0]  ? net_tx_action+0x950/0x950
[  894.874426][    C0]  ? net_tx_action+0x8ed/0x950
[  894.879207][    C0]  ? net_tx_action+0x5ec/0x950
[  894.883988][    C0]  ? process_backlog+0x710/0x710
[  894.888944][    C0]  ? lock_chain_count+0x20/0x20
[  894.893819][    C0]  handle_softirqs+0x27d/0x820
[  894.898598][    C0]  ? do_softirq+0xfa/0x1a0
[  894.903030][    C0]  ? do_softirq+0x1a0/0x1a0
[  894.907552][    C0]  ? batadv_tt_local_purge+0x2c1/0x340
[  894.913036][    C0]  do_softirq+0xfa/0x1a0
[  894.917294][    C0]  </IRQ>
[  894.920235][    C0]  <TASK>
[  894.923196][    C0]  ? __local_bh_enable_ip+0x1c0/0x1c0
[  894.928584][    C0]  ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0
[  894.934626][    C0]  ? rcu_is_watching+0x15/0xb0
[  894.939454][    C0]  __local_bh_enable_ip+0x184/0x1c0
[  894.944727][    C0]  ? _local_bh_enable+0xa0/0xa0
[  894.949604][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  894.954938][    C0]  ? batadv_tt_local_purge+0x2c1/0x340
[  894.960429][    C0]  batadv_tt_local_purge+0x2c1/0x340
[  894.965762][    C0]  batadv_tt_purge+0x35/0xa20
[  894.970459][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  894.975672][    C0]  ? process_scheduled_works+0x975/0x1600
[  894.981432][    C0]  ? process_scheduled_works+0x975/0x1600
[  894.987172][    C0]  process_scheduled_works+0xa60/0x1600
[  894.992775][    C0]  ? worker_attach_to_pool+0x370/0x370
[  894.998256][    C0]  ? assign_work+0x3ac/0x5d0
[  895.002863][    C0]  rescuer_thread+0x71e/0x1080
[  895.007673][    C0]  ? rescuer_thread+0xbb/0x1080
[  895.012568][    C0]  kthread+0x2fa/0x390
[  895.016668][    C0]  ? install_unbound_pwq+0x480/0x480
[  895.021983][    C0]  ? kthread_blkcg+0xd0/0xd0
[  895.026789][    C0]  ret_from_fork+0x48/0x80
[  895.031250][    C0]  ? kthread_blkcg+0xd0/0xd0
[  895.035893][    C0]  ret_from_fork_asm+0x11/0x20
[  895.040728][    C0]  </TASK>
[  895.044193][    C0] vkms_vblank_simulate: vblank timer overrun