last executing test programs:

9m37.934245412s ago: executing program 32 (id=149):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

8m47.324835071s ago: executing program 33 (id=530):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6e2, 0x20480)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffff80000001)

7m10.170903034s ago: executing program 0 (id=1418):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/reboot/type\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='kbd', 0x3)

7m10.104971731s ago: executing program 0 (id=1419):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000300)=@arm64_ccsidr={0x6020000000110009, 0x0})

7m9.911079301s ago: executing program 0 (id=1428):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x40)
fstat(r0, &(0x7f00000003c0))

7m8.136442422s ago: executing program 0 (id=1437):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdd}}, {@nojournal_checksum}, {@acl}, {@errors_remount}]}, 0x1, 0x4d4, &(0x7f0000000a00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

7m6.79225248s ago: executing program 0 (id=1440):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000004480)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000280)="67dc54", 0x3}, {&(0x7f00000012c0)="cffb49f576683c8ef10077a23e031e73b341700afce7fa0aec2370", 0x1b}], 0x2, 0x0, 0x0, 0x8010}], 0x1, 0x0)

7m6.070817234s ago: executing program 0 (id=1445):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

7m5.654522527s ago: executing program 34 (id=1445):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

5m59.644028212s ago: executing program 5 (id=1985):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bdab, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x2, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0)

5m59.530898784s ago: executing program 5 (id=1987):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5m59.450779212s ago: executing program 5 (id=1988):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)

5m59.213618636s ago: executing program 5 (id=1990):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3)

5m58.628720336s ago: executing program 5 (id=1996):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)='C', 0x1}], 0x1}}], 0x1, 0x20000810)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001700)={0x0, 0x2, 0x10, 0x5f, 0x5}, &(0x7f0000000040)=0x18)

5m58.00432356s ago: executing program 5 (id=2001):
r0 = fsopen(&(0x7f0000001940)='tracefs\x00', 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

5m57.537797978s ago: executing program 35 (id=2001):
r0 = fsopen(&(0x7f0000001940)='tracefs\x00', 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

5m8.232200954s ago: executing program 1 (id=2370):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)

5m7.68330631s ago: executing program 7 (id=2373):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)

5m7.663286112s ago: executing program 1 (id=2374):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a})
write$sndseq(r0, &(0x7f0000000240)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000280)={0x0, 0xffffffff, 0x7ff, {0x6, 0x8000}, 0xd5, 0xa14})

5m7.432356446s ago: executing program 7 (id=2375):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r0, &(0x7f0000000240), 0xe)

5m7.275013222s ago: executing program 1 (id=2376):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="257c0107052464e90abff632728b895cc285485bdc130027efff1892b264510595bf058f8718749408", 0x29}], 0x1, 0x0, 0x0, 0xc48d0}, 0x4004000)
recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f00000008c0)=""/103, 0x67}, 0xfffffffc}], 0x1, 0x12260, 0x0)

5m7.187352631s ago: executing program 1 (id=2378):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3)

5m6.740100757s ago: executing program 7 (id=2381):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000280)=[{0x0, 0x210, 0x0, 0x0}, {0x3, 0xd611, 0x95, &(0x7f00000002c0)="75bd733862ce052511c59b49072256720abd1814738bd46962e0133f4a6aca72363e86a604ed6df1ed40d414313d2f37be59b3f7e738e2e44a42a3d18c97d4cc401929382e66d6999d7067183cad8b7e743c5481d5ed2c4c5db8605722027193048d67d33c2276af3f5d0a72f1367fba948c446ce0cb621b79349e63e6fffa95d072454f9964921c426b4e8d86655adb724a9ef784"}, {0x29d, 0x1000, 0x0, 0x0}], 0x3})

5m6.656343595s ago: executing program 1 (id=2382):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x9, 0xefcc, 0x7f7, 0x3, "3596030afe0006a7446d67a000", 0x10000, 0xc})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

5m5.92019896s ago: executing program 1 (id=2387):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

5m5.291591615s ago: executing program 36 (id=2387):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

5m4.761500799s ago: executing program 7 (id=2391):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3)

5m3.950128432s ago: executing program 7 (id=2392):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m3.036341465s ago: executing program 7 (id=2395):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00fb1d0aaef4b769fc3fb5aa3decb84c4cd8249e036321a59d9937a73dda6d93546aefa51e4a8115f9e83b20b0ccd486a700e2fbd9ab1af29aa30f2907"], 0x1, 0x5d3, &(0x7f00000006c0)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), &(0x7f00000008c0)="41e1d5d061f06e71ebe4b8344ba4eb4f569fdad107a01b694046e7e110e08ba1e0801e2b6e27edba41fdc5c967e7c64803330b538f48c63422317f60b97be25da1c70b6b224881b94ba14fc9170e9f2d50", 0x51, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50)

5m2.180598473s ago: executing program 37 (id=2395):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00fb1d0aaef4b769fc3fb5aa3decb84c4cd8249e036321a59d9937a73dda6d93546aefa51e4a8115f9e83b20b0ccd486a700e2fbd9ab1af29aa30f2907"], 0x1, 0x5d3, &(0x7f00000006c0)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), &(0x7f00000008c0)="41e1d5d061f06e71ebe4b8344ba4eb4f569fdad107a01b694046e7e110e08ba1e0801e2b6e27edba41fdc5c967e7c64803330b538f48c63422317f60b97be25da1c70b6b224881b94ba14fc9170e9f2d50", 0x51, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50)

4m41.866021823s ago: executing program 8 (id=2431):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5320c000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msgsnd(0x0, 0x0, 0x1fa, 0x800)

4m40.90533539s ago: executing program 8 (id=2433):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/hid_cougar/parameters/g6_is_space\x00', 0x2, 0x0)
write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x54, 0x37, 0x2, {0x2, 0x1, 0x4, 0xffffffffffffffff, 0x6, 'sysfs\x00'}}, 0x24)

4m40.600871872s ago: executing program 8 (id=2436):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x8000, &(0x7f0000000340), 0x5, 0xbd1, &(0x7f0000000380)="$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")
r0 = creat(&(0x7f0000000f80)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000001080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000010c0)=[&(0x7f0000001100)={0x25, 0xe7030003, 0x9, 0x1, 0x0, r0, 0x0}])

4m39.681982416s ago: executing program 8 (id=2447):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3)

4m38.783052758s ago: executing program 8 (id=2441):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2}, 0xc)

4m37.994725339s ago: executing program 8 (id=2444):
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23)
syz_emit_ethernet(0x12, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private=0xa010102}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0)

4m37.289139261s ago: executing program 38 (id=2444):
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23)
syz_emit_ethernet(0x12, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private=0xa010102}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0)

2m7.906828849s ago: executing program 9 (id=3452):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000100), 0x1, 0x255, &(0x7f00000005c0)="$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")
mq_open(&(0x7f0000000000)='.+\x00', 0x80, 0x40, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

2m7.481326023s ago: executing program 9 (id=3455):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca458f0f2e584421bc2541407c3498de2c8afc31232034c834cdc4586231d4cd77cc6c6ad"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010)

2m7.137762868s ago: executing program 9 (id=3457):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'ip6gretap0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000004c0)={@remote, r1}, 0x14)

2m6.92231468s ago: executing program 9 (id=3459):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

2m5.94646541s ago: executing program 9 (id=3466):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f902f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x560, 0x0, 0x7}]}}}}}}}}, 0x0)

2m5.288481957s ago: executing program 9 (id=3472):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x53d}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)

2m4.735034654s ago: executing program 39 (id=3472):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x53d}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)

3.250527937s ago: executing program 2 (id=4279):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)

2.74142043s ago: executing program 2 (id=4282):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r0, &(0x7f0000000540)='enable_event', 0xc)

2.524949771s ago: executing program 2 (id=4285):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
rt_sigpending(0x0, 0x0)

2.397487565s ago: executing program 4 (id=4286):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setresuid(0x0, 0xee00, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x14, r1, 0x1, 0xffffffff}, 0x14}}, 0x20000000)

2.14454946s ago: executing program 4 (id=4288):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x0, &(0x7f0000000180)}, 0x10)
writev(r0, &(0x7f00000003c0), 0x100000000000022d)

1.971530798s ago: executing program 4 (id=4289):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000eaf7850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000007b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.820654013s ago: executing program 4 (id=4290):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='bRequestType=\'', 0xe)

1.820091553s ago: executing program 6 (id=4292):
r0 = syz_io_uring_setup(0x100, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0, &(0x7f00000003c0)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x800, @loopback}})
io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0)

1.66428348s ago: executing program 4 (id=4294):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "bb816b042173741536294ff1c75ce8ceae059731e556e9113a012c2c55725b6e", "5dd34372f72c87808aa2a926970ae62b5ee5c5e03f57dc9e3f2f293fec81b652bb1b59f7610ab12f021dfc4630cd98b7", "9a823dfca8302b718d944f12f5153bbec487abc29bedf0848f395b6e", {"6c765b35fb54c04ba4863b23673732c8", "35ff817dd150b8cb78e059246384bde1"}}}}}}}, 0x0)

1.643096211s ago: executing program 6 (id=4295):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xd, 0x80c5, "090008000100fb06c4"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

1.488362527s ago: executing program 4 (id=4297):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,checkpoint=disable,flush_merge,fault_injection=00000000000000001262,acl,noacl,compress_cache,heap,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c006973636172645f756e6974497365676d656e742c6661756c745f747970653d303030303e3030303030303030303030303030b88a00"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103042, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0})

1.422154624s ago: executing program 6 (id=4298):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000240)={0xa, 0x4e29, 0x2, @private0}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000b00)='\n', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x8}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000002c0)='*', 0x1}], 0x1}}], 0x2, 0x440088d4)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xf3d6, 0x10}, &(0x7f0000000100)=0xc)

1.375598209s ago: executing program 3 (id=4299):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa)

1.184540269s ago: executing program 3 (id=4300):
mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)="00000000090a0000000000000012010000000013bc2b620000000000000001", 0x1f)

1.183881638s ago: executing program 6 (id=4308):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000080), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

1.113267886s ago: executing program 2 (id=4301):
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0)

1.031689054s ago: executing program 3 (id=4302):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000440)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c756d61736b3d30303030303030303030303030303030303030303030372c636f6465706167653d3836302c756e695f786c6174653d302c726f6469722c73686f72746e616d653d77696e6e742c6e66733d7374616c655f72772c696f636861727365743d6b6f69382d722c666c7573682c6e6f6e756d7461696c3d302c00824ebbdddfe8db285caa5e4953b5c37599d1227f078942a9ed4c41"], 0x81, 0x2ae, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000400)=""/213, 0xd5)

972.04757ms ago: executing program 6 (id=4303):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES8], 0x1, 0x2cb, &(0x7f0000000200)="$eJzs3U+LG2UYAPBnNskkrYfNwZMIDtiDp9L26iWLbKGYk7IH9aCL3YJsgtDCglUMnrx68egnEARvfgkvgh9A8AN4s4fKK5PMkKSZyTbQtP75/Q6zT+Z9n3eed2aymyXkzUevTs/vFnHvqy9+i8Egi4NRjOJRFsM4iFpKKcXS6JsAAP7NHqUUf6SFp0wZlZssIgb7LQ0A2JOd//7/uPeSAIA9e/e9998+Go+P3ymKQdyefn1xUv5nX/5ctB/di09iEmdxIw7j8eK9gPrVQrm9nVKadYvSsHdtOrs4KTOnH/5cjX803/61+gpjPf/O+PhmsRDL/FlZx9Xq+KkfZ3ErDuPlhuPfGR/fasiPkzzeeH2l/utxGL98HJ/GJO7Oi1jmf3mzKN5K3/75+QdleWV+Nrs46c/7LaXOc70wAAAAAAAAAAAAAAAAAAAAAAD8p12v1s7pRzGMa9NyV7X+Tudx+aAXRW24vj7PIj+rB3pifaBZiu9S6ncjxsc3iqJIVcdlfjde6Ub3xcwaAAAAAAAAAAAAAAAAAAAA/lkefPbw/HQyObvfEPx6NaKlqSWoVwOoP9Z/SVanrWm0sue1eHh+2m8fcKXpoAq3HDQ6dZ8sYut0oturRx7udBJ2D6601fz9D7sOOLi8T2/b+Xk2QX13nZ9m0dinH/WeQX1Nf1rtk8dTHitva0qX334rQd7YdLjz3POX5sFsS5/IthX25u+LM1ftyZ6cRT4/q43pvZXVOJrvjeZr0fZM2ZDNn9b5s/vlAwAAAAAAAAAAAAAAAAAArFl+6Hej6crao81v6j9I/b2WBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPzfL7/9uCzmafWZW8JasO8rj/4AVPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//YUpdcQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000140)=""/187, 0xbb)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

669.555191ms ago: executing program 3 (id=4304):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890)

581.46261ms ago: executing program 6 (id=4305):
r0 = syz_usb_connect(0x5, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="4001370000"], 0x0, 0x0})

376.539321ms ago: executing program 3 (id=4306):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000400)="593a63e7", 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x3c}, 0x8)
sendto$inet6(r0, &(0x7f0000001100)="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", 0x59d, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c)

279.007111ms ago: executing program 3 (id=4307):
mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000002340)='./debug\x00', &(0x7f0000002380)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000023c0)='./debug/page_tables/kernel\x00', 0x0, 0x0)
read(r0, &(0x7f0000003d80)=""/4096, 0x1000)

278.099631ms ago: executing program 2 (id=4309):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x4e22, @loopback}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}})

0s ago: executing program 2 (id=4310):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001f00)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000001f40)="11c9064268e9", 0x6}], 0x2}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

kernel console output (not intermixed with test programs):

ep0 maxpacket: 16
[  515.806209][T15049] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  515.842158][T15049] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  515.863169][ T5906] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  515.885851][T15049] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.919376][T15049] usb 7-1: Product: syz
[  515.948830][T15049] usb 7-1: Manufacturer: syz
[  515.967081][T15049] usb 7-1: SerialNumber: syz
[  515.985852][T15049] usb 7-1: config 0 descriptor??
[  516.034923][T15049] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  516.069793][T15049] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  516.076946][ T5906] usb 10-1: Using ep0 maxpacket: 32
[  516.108507][ T5906] usb 10-1: unable to get BOS descriptor or descriptor too short
[  516.152892][ T5906] usb 10-1: no configurations
[  516.190079][ T5906] usb 10-1: can't read configurations, error -22
[  516.672638][T15049] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  516.985317][T15049] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  517.029041][T15049] em28xx 7-1:0.0: board has no eeprom
[  517.166793][T15049] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  517.225626][T15049] em28xx 7-1:0.0: dvb set to bulk mode.
[  517.302945][T13451] em28xx 7-1:0.0: Binding DVB extension
[  517.311596][T15049] usb 7-1: USB disconnect, device number 16
[  517.362659][T15049] em28xx 7-1:0.0: Disconnecting em28xx
[  517.542935][T16410] loop2: detected capacity change from 0 to 40427
[  517.593577][T16435] netlink: 436 bytes leftover after parsing attributes in process `syz.3.3201'.
[  517.647134][T13451] em28xx 7-1:0.0: Registering input extension
[  517.662573][T16410] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  517.705059][T16410] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  517.723409][T15049] em28xx 7-1:0.0: Closing input extension
[  517.804185][T16410] F2FS-fs (loop2): invalid crc value
[  517.809535][T16410] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  517.977419][T16443] loop3: detected capacity change from 0 to 128
[  518.004941][T15049] em28xx 7-1:0.0: Freeing device
[  518.015941][T16410] F2FS-fs (loop2): Found nat_bits in checkpoint
[  518.071420][T16443] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  518.235743][T16443] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  518.391462][T16410] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  518.459003][T16410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  518.645918][ T3571] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  518.683619][T16455] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3207'.
[  518.721330][T16410] syz.2.3195: attempt to access beyond end of device
[  518.721330][T16410] loop2: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  519.024911][ T8348] syz-executor: attempt to access beyond end of device
[  519.024911][ T8348] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  519.147621][ T8348] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  519.301193][T16468] bonding: bond0 is being created...
[  519.337074][T16468] bonding: bond0 already exists
[  519.755236][T16474] loop6: detected capacity change from 0 to 256
[  520.259393][T16459] loop3: detected capacity change from 0 to 40427
[  520.346836][T16459] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff
[  520.421027][T16459] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4
[  520.486402][T16459] F2FS-fs (loop3): invalid crc value
[  520.524266][T16459] F2FS-fs (loop3): Found nat_bits in checkpoint
[  520.685072][T16459] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  520.830916][T16499] i2c i2c-0: delete_device: Can't parse I2C address
[  520.846781][T16459] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  521.031706][T16459] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  521.143723][T16459] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x13a/0xbc0
[  521.308455][T16486] loop9: detected capacity change from 0 to 32768
[  521.319684][T13639] syz-executor: attempt to access beyond end of device
[  521.319684][T13639] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  521.417387][T16486] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  521.448800][T13639] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  521.730221][T16486] (syz.9.3217,16486,0):ocfs2_double_lock:1192 ERROR: status = -2
[  521.867062][T16524] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  522.007304][T13308] ocfs2: Unmounting device (7,9) on (node local)
[  523.126973][T16550] loop9: detected capacity change from 0 to 512
[  523.185519][T16550] EXT4-fs: Ignoring removed nomblk_io_submit option
[  523.237316][T16550] EXT4-fs: Ignoring removed mblk_io_submit option
[  523.325694][T16550] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  523.411119][T16550] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2
[  523.469952][T16550] EXT4-fs (loop9): 1 truncate cleaned up
[  523.494940][T16550] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.621744][T16550] EXT4-fs error (device loop9): ext4_map_blocks:610: inode #2: block 4: comm syz.9.3234: lblock 0 mapped to illegal pblock 4 (length 1)
[  523.666714][T16565] program syz.6.3239 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  523.696371][T16550] EXT4-fs (loop9): Remounting filesystem read-only
[  523.849940][T13308] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.869984][T16543] loop3: detected capacity change from 0 to 32768
[  523.929769][T16570] 9pnet_fd: p9_fd_create_unix (16570): problem connecting socket: ./file0: -111
[  523.977586][T16543] JBD2: Ignoring recovery information on journal
[  524.108582][T16543] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  524.272434][T16579] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3244'.
[  524.326603][T16153] Bluetooth: hci0: command 0x0406 tx timeout
[  524.539930][T13639] ocfs2: Unmounting device (7,3) on (node local)
[  525.452091][T16613] tun0: tun_chr_ioctl cmd 1074025675
[  525.494584][T16613] tun0: persist disabled
[  526.055815][T16638] loop2: detected capacity change from 0 to 128
[  526.151233][T16638] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  526.242733][T16638] ext4 filesystem being mounted at /629/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  526.369416][T16638] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes
[  526.558212][ T8348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  526.599665][T16620] loop6: detected capacity change from 0 to 32768
[  526.660686][T16620] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop6 scanned by syz.6.3259 (16620)
[  526.825805][T16620] BTRFS info (device loop6): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  526.883619][T16620] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  526.947646][T16620] BTRFS info (device loop6): using free space tree
[  527.136192][T16620] BTRFS info (device loop6): enabling ssd optimizations
[  527.183449][T16620] BTRFS info (device loop6): auto enabling async discard
[  527.555649][T16640] loop9: detected capacity change from 0 to 40427
[  527.632895][T13473] BTRFS info (device loop6): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  527.645999][T16640] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504)
[  527.652972][T16640] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  527.797344][T16640] F2FS-fs (loop9): invalid crc value
[  527.802793][T16640] F2FS-fs (loop9): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  527.944990][T16041] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop6 scanned by udevd (16041)
[  527.964913][T16640] F2FS-fs (loop9): Found nat_bits in checkpoint
[  528.098209][T16686] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma?
[  528.307292][T16640] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  528.374204][T16640] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  528.641735][T16676] loop2: detected capacity change from 0 to 32768
[  528.664365][T16696] loop3: detected capacity change from 0 to 8
[  528.675163][T16640] syz.9.3267: attempt to access beyond end of device
[  528.675163][T16640] loop9: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  528.781939][T16676] JBD2: Ignoring recovery information on journal
[  528.810178][T16696] SQUASHFS error: Failed to read block 0x26067d: -5
[  528.880010][T16696] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  528.958333][T16696] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  528.995172][T16676] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  529.015433][T13308] syz-executor: attempt to access beyond end of device
[  529.015433][T13308] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  529.168937][T13308] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  529.792832][ T8348] ocfs2: Unmounting device (7,2) on (node local)
[  529.940687][T16716] loop3: detected capacity change from 0 to 4096
[  530.025605][T16716] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  530.132937][T16716] ntfs3: loop3: ino=19, mi_enum_attr
[  530.173412][T16716] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  530.205007][T16716] ntfs3: loop3: ino=1a, mi_enum_attr
[  530.210431][T16716] ntfs3: loop3: ino=1a, mi_enum_attr
[  530.280869][T16716] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  530.400791][T16724] loop2: detected capacity change from 0 to 2048
[  530.527244][T16724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.642170][T16724] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  530.659552][ T5906] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  530.771928][ T8348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.865565][ T5906] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  530.917973][ T5906] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  530.972473][ T5906] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  531.011507][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  531.051051][ T5906] usb 7-1: SerialNumber: syz
[  531.325206][ T5906] usb 7-1: 0:2 : does not exist
[  531.361381][T16746] loop3: detected capacity change from 0 to 2048
[  531.382146][ T5906] usb 7-1: USB disconnect, device number 17
[  531.426022][T16746] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  531.497320][T16041] udevd[16041]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  531.514321][T16746] UDF-fs: Scanning with blocksize 512 failed
[  531.575089][T16746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  532.670917][T16781] loop2: detected capacity change from 0 to 1024
[  533.268808][T16762] loop3: detected capacity change from 0 to 32768
[  533.371803][T16762] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  533.423927][ T5906] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  533.510407][T16770] loop6: detected capacity change from 0 to 40427
[  533.553005][T16762] XFS (loop3): Ending clean mount
[  533.587884][T16770] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  533.644352][ T5906] usb 10-1: Using ep0 maxpacket: 32
[  533.652907][T16770] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  533.703028][ T5906] usb 10-1: config 0 has an invalid interface number: 12 but max is 0
[  533.711384][ T5906] usb 10-1: config 0 has no interface number 0
[  533.730098][T16770] F2FS-fs (loop6): invalid crc value
[  533.811618][T16770] F2FS-fs (loop6): Found nat_bits in checkpoint
[  533.822738][ T5906] usb 10-1: config 0 interface 12 has no altsetting 0
[  533.902819][ T5906] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  533.959939][ T5906] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.014354][T13639] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  534.033217][ T5906] usb 10-1: Product: syz
[  534.037504][ T5906] usb 10-1: Manufacturer: syz
[  534.042189][ T5906] usb 10-1: SerialNumber: syz
[  534.088499][T16770] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  534.122678][ T5906] usb 10-1: config 0 descriptor??
[  534.142221][T16770] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  534.196590][T16817] loop2: detected capacity change from 0 to 128
[  534.281025][T16817] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  534.386503][T16817] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  534.477543][T16817] ext2 filesystem being mounted at /645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  534.509240][    C0] vkms_vblank_simulate: vblank timer overrun
[  534.570967][T13473] syz-executor: attempt to access beyond end of device
[  534.570967][T13473] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  534.622474][T13473] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  534.671332][T16817] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.3312: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  534.961215][ T8348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  535.054742][ T5906] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  535.119347][ T5906] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71
[  535.149697][ T5906] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  535.228670][ T5906] f81534: probe of 10-1:0.12 failed with error -71
[  535.312538][ T5906] usb 10-1: USB disconnect, device number 9
[  535.801200][T16834] loop3: detected capacity change from 0 to 512
[  535.990113][T16842] loop9: detected capacity change from 0 to 1024
[  536.062793][T16834] Quota error (device loop3): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  536.147511][T16834] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  536.180813][T16846] loop6: detected capacity change from 0 to 16
[  536.219778][T16834] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.3311: Failed to acquire dquot type 1
[  536.242845][T16846] erofs: (device loop6): mounted with root inode @ nid 36.
[  536.253283][T16842] hfsplus: request for non-existent node 211 in B*Tree
[  536.260668][T16842] hfsplus: request for non-existent node 211 in B*Tree
[  536.340346][T16834] EXT4-fs error (device loop3): ext4_do_update_inode:5294: inode #16: comm syz.3.3311: corrupted inode contents
[  536.368368][T16846] syz.6.3316: attempt to access beyond end of device
[  536.368368][T16846] loop6: rw=524288, sector=1342177272, nr_sectors = 2560 limit=16
[  536.429013][T16834] EXT4-fs error (device loop3): ext4_dirty_inode:6188: inode #16: comm syz.3.3311: mark_inode_dirty error
[  536.456049][ T3571] hfsplus: b-tree write err: -5, ino 8
[  536.501152][T16834] EXT4-fs error (device loop3): ext4_do_update_inode:5294: inode #16: comm syz.3.3311: corrupted inode contents
[  536.586029][T16834] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #16: comm syz.3.3311: mark_inode_dirty error
[  536.622795][T16829] loop2: detected capacity change from 0 to 40427
[  536.689768][T16829] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  536.700834][T16834] EXT4-fs error (device loop3): ext4_do_update_inode:5294: inode #16: comm syz.3.3311: corrupted inode contents
[  536.744725][T16829] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  536.753012][T16829] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff
[  536.795593][T16834] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  536.809789][T16829] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[  536.862502][T16834] EXT4-fs error (device loop3): ext4_do_update_inode:5294: inode #16: comm syz.3.3311: corrupted inode contents
[  536.889512][T16829] F2FS-fs (loop2): invalid crc value
[  536.927748][T16858] loop9: detected capacity change from 0 to 256
[  536.958967][T16834] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.3311: mark_inode_dirty error
[  537.011355][T16829] F2FS-fs (loop2): Found nat_bits in checkpoint
[  537.050360][T16834] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  537.170108][T16834] EXT4-fs (loop3): 1 truncate cleaned up
[  537.207796][T16834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  537.318331][T16829] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  537.328660][T16834] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.387049][T16829] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  537.467051][T16870] loop9: detected capacity change from 0 to 512
[  537.585834][T16834] Quota error (device loop3): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  537.633870][T16870] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  537.678684][T16829] syz.2.3314: attempt to access beyond end of device
[  537.678684][T16829] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  537.703908][T16834] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  537.739784][T16870] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  537.764247][T16834] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.3311: Failed to acquire dquot type 1
[  537.914543][ T8348] syz-executor: attempt to access beyond end of device
[  537.914543][ T8348] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  537.981808][T13639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.027480][ T8348] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  538.041492][T16870] Quota error (device loop9): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  538.133360][T16870] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  538.197457][T16884] kAFS: bad VL server IP address
[  538.202667][T16870] EXT4-fs error (device loop9): ext4_acquire_dquot:6949: comm syz.9.3321: Failed to acquire dquot type 0
[  538.528484][T13308] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  539.496779][T16913] loop9: detected capacity change from 0 to 64
[  539.528473][T16915] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3334'.
[  539.554005][T16913] hfs: unable to locate alternate MDB
[  539.590621][T16915] vlan1: entered allmulticast mode
[  539.604098][T16913] hfs: continuing without an alternate MDB
[  539.634980][T16915] veth0_vlan: entered allmulticast mode
[  539.937012][T16920] device-mapper: ioctl: Invalid ioctl structure: name mp, dev 30
[  539.979570][T16923] loop9: detected capacity change from 0 to 256
[  540.218717][T16929] loop2: detected capacity change from 0 to 16
[  540.300172][T16929] erofs: (device loop2): mounted with root inode @ nid 36.
[  540.392489][T16929] erofs: (device loop2): z_erofs_readahead: readahead error at folio 87 @ nid 36
[  540.473309][T16929] erofs: (device loop2): z_erofs_readahead: readahead error at folio 86 @ nid 36
[  540.545674][T16929] syz.2.3338: attempt to access beyond end of device
[  540.545674][T16929] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[  540.653657][T16929] syz.2.3338: attempt to access beyond end of device
[  540.653657][T16929] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  540.677466][T16941] program syz.9.3342 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  540.980798][   T28] audit: type=1326 audit(1792739660.234:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  541.148322][   T28] audit: type=1326 audit(1792739660.274:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  541.323165][   T28] audit: type=1326 audit(1792739660.284:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  541.347161][    C0] vkms_vblank_simulate: vblank timer overrun
[  541.555559][   T28] audit: type=1326 audit(1792739660.284:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  541.579876][    C0] vkms_vblank_simulate: vblank timer overrun
[  541.716382][T16972] loop6: detected capacity change from 0 to 2048
[  541.784058][T16972] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  541.795479][   T28] audit: type=1326 audit(1792739660.284:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  541.920963][T16972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  542.012676][   T28] audit: type=1326 audit(1792739660.284:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  542.175981][   T28] audit: type=1326 audit(1792739660.284:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  542.200080][    C0] vkms_vblank_simulate: vblank timer overrun
[  542.273815][T16989] netem: incorrect ge model size
[  542.317212][T16989] netem: change failed
[  542.408946][   T28] audit: type=1326 audit(1792739660.284:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  542.433027][    C0] vkms_vblank_simulate: vblank timer overrun
[  542.599034][   T28] audit: type=1326 audit(1792739660.284:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  542.627683][T17001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'.
[  542.727114][T17001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'.
[  542.802042][   T28] audit: type=1326 audit(1792739660.284:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16949 comm="syz.9.3345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  543.107758][   T28] audit: type=1326 audit(1792739662.364:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17005 comm="syz.9.3367" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237df9f559 code=0x7ffc0000
[  543.131854][    C0] vkms_vblank_simulate: vblank timer overrun
[  543.306622][T17021] loop9: detected capacity change from 0 to 524287998
[  543.591704][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3375'.
[  543.644952][T17031] loop2: detected capacity change from 0 to 64
[  543.760647][T17031] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  543.823390][T17033] loop9: detected capacity change from 0 to 1024
[  543.944491][T17031] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  544.563261][ T5882] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  544.745342][    T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  544.784754][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  544.825576][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  544.885017][ T5882] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  544.920339][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.952471][ T5882] usb 4-1: Product: syz
[  544.959350][    T8] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  544.991329][ T5882] usb 4-1: Manufacturer: syz
[  545.002056][    T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  545.031588][ T5882] usb 4-1: SerialNumber: syz
[  545.041724][    T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  545.130190][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  545.174547][    T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  545.221450][    T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  545.270188][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  545.305992][ T5882] usb 4-1: 0:2 : does not exist
[  545.337178][    T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  545.353282][ T5882] usb 4-1: unit 9 not found!
[  545.383592][    T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  545.395930][ T5882] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4)
[  545.439909][ T5882] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4)
[  545.465100][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  545.505012][ T5882] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4)
[  545.512964][    T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  545.562022][    T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  545.584251][ T5882] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4)
[  545.625825][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  545.644818][ T5882] usb 4-1: 4:0: cannot get min/max values for control 10 (id 4)
[  545.665215][    T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  545.729289][    T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  545.765300][ T5882] usb 4-1: USB disconnect, device number 12
[  545.818862][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  545.848064][T16041] udevd[16041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  545.906534][    T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  545.960738][    T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  546.051376][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  546.086598][    T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  546.136008][    T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  546.172580][T17088] loop9: detected capacity change from 0 to 256
[  546.209980][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  546.230139][T17088] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  546.296136][    T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  546.343190][    T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  546.987983][T17094] loop3: detected capacity change from 0 to 131072
[  547.029026][T17094] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[  547.037698][T17094] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  547.078192][T17094] F2FS-fs (loop3): invalid crc value
[  547.087976][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  547.119779][T17094] F2FS-fs (loop3): Found nat_bits in checkpoint
[  547.174572][T17094] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  547.181688][T17094] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  547.206285][    T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  547.271881][    T8] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  547.335002][    T8] usb 3-1: Product: syz
[  547.339203][    T8] usb 3-1: Manufacturer: syz
[  547.412127][    T8] usb 3-1: SerialNumber: syz
[  547.436618][T17102] loop9: detected capacity change from 0 to 256
[  547.474181][    T8] usb 3-1: config 0 descriptor??
[  547.526564][    T8] usb 3-1: can't set config #0, error -71
[  547.540654][T17102] exfat: Deprecated parameter 'namecase'
[  547.608017][    T8] usb 3-1: USB disconnect, device number 22
[  547.632968][T17102] exfat: Deprecated parameter 'utf8'
[  547.738703][T17102] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  548.057546][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3398'.
[  548.158385][T17110] gretap0: entered promiscuous mode
[  548.206623][T17110] macsec1: entered promiscuous mode
[  548.236793][T17110] macsec1: entered allmulticast mode
[  548.271181][T17110] gretap0: entered allmulticast mode
[  548.307749][T17110] gretap0: left allmulticast mode
[  548.322591][T17110] gretap0: left promiscuous mode
[  548.538866][T17114] netlink: 'syz.9.3399': attribute type 2 has an invalid length.
[  548.574470][T17114] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3399'.
[  548.878333][T17120] loop9: detected capacity change from 0 to 2048
[  548.970797][T17120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  549.284133][T17130] loop2: detected capacity change from 0 to 8
[  549.415280][T17130] SQUASHFS error: Unable to read directory block [249:9]
[  549.850303][T17146] Line length is too long: Should be less than 4094
[  550.373232][T17165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input39
[  551.522051][T17207] sctp: [Deprecated]: syz.9.3427 (pid 17207) Use of int in max_burst socket option.
[  551.522051][T17207] Use struct sctp_assoc_value instead
[  551.947155][T17199] loop2: detected capacity change from 0 to 32768
[  552.001389][T17199] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3424 (17199)
[  552.088680][T17199] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  552.162644][T17199] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  552.206038][T17199] BTRFS info (device loop2): enabling auto defrag
[  552.249775][T17199] BTRFS info (device loop2): force clearing of disk cache
[  552.296706][T17199] BTRFS info (device loop2): ignoring data csums
[  552.353334][T17199] BTRFS info (device loop2): turning on async discard
[  552.360172][T17199] BTRFS info (device loop2): setting nodatacow, compression disabled
[  552.427719][T17199] BTRFS info (device loop2): turning off async discard
[  552.466614][T17199] BTRFS info (device loop2): disabling free space tree
[  552.680943][T17216] loop3: detected capacity change from 0 to 32768
[  552.723479][    T8] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  552.764039][T17199] BTRFS error (device loop2: state EMC): ignoredatacsums must be used with ro mount option
[  552.795235][T17216] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.3431 (17216)
[  552.881723][T17216] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  552.937641][    T8] usb 10-1: Using ep0 maxpacket: 32
[  552.966078][T17216] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  552.993769][    T8] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  553.013304][ T8348] BTRFS info (device loop2: state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  553.052877][T17216] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  553.068158][    T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.105461][T17216] BTRFS info (device loop3): use zstd compression, level 3
[  553.160601][    T8] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  553.183118][T17216] BTRFS info (device loop3): using free space tree
[  553.243740][    T8] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  553.333188][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.389632][    T8] usb 10-1: config 0 descriptor??
[  553.420175][T17267] loop6: detected capacity change from 0 to 512
[  553.543228][T17216] BTRFS info (device loop3): enabling ssd optimizations
[  553.609275][T17216] BTRFS info (device loop3): auto enabling async discard
[  553.936582][    T8] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x1
[  554.007003][    T8] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x2
[  554.039275][T17277] loop6: detected capacity change from 0 to 8
[  554.190311][T13639] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  554.328190][    T8] hid-led: probe of 0003:0FC5:B080.0019 failed with error -71
[  554.433492][    T8] usb 10-1: USB disconnect, device number 10
[  555.319610][T17297] loop9: detected capacity change from 0 to 512
[  555.472989][T17299] loop6: detected capacity change from 0 to 512
[  556.202973][T17291] loop3: detected capacity change from 0 to 40427
[  556.264109][T17291] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  556.271094][T17291] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  556.326543][T17311] loop9: detected capacity change from 0 to 2048
[  556.372626][T17291] F2FS-fs (loop3): invalid crc value
[  556.412298][T17291] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  556.424435][T17311] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  556.528685][T17311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  556.539489][T17291] F2FS-fs (loop3): Found nat_bits in checkpoint
[  556.628523][T17311] overlayfs: upper fs needs to support d_type.
[  556.704199][T17311] overlayfs: cleanup of 'work/#28' failed (-2)
[  556.743156][T17291] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  556.756281][T17311] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  556.783943][T17291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  556.813018][T17311] overlayfs: failed to set xattr on upper
[  556.848969][T17311] overlayfs: ...falling back to redirect_dir=nofollow.
[  556.886930][T17311] overlayfs: ...falling back to metacopy=off.
[  556.914611][T17311] overlayfs: ...falling back to index=off.
[  556.947497][T17311] overlayfs: ...falling back to uuid=null.
[  557.070556][T13639] syz-executor: attempt to access beyond end of device
[  557.070556][T13639] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  557.099817][T13308] UDF-fs: error (device loop9): udf_read_inode: (ino 1347) failed !bh
[  557.149675][T13308] UDF-fs: error (device loop9): udf_read_inode: (ino 1347) failed !bh
[  557.158584][T13639] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  557.271647][T17327] loop6: detected capacity change from 0 to 1024
[  557.547218][T13308] bond0: (slave syz_tun): Releasing backup interface
[  557.977917][   T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.300221][   T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.432668][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3474'.
[  558.596675][   T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.928552][   T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.954364][T17357] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  559.474299][T16153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  559.491423][T16153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  559.501052][T16153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  559.519902][T17367] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  559.528853][T17367] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  559.557401][T17367] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  560.004457][T17355] loop3: detected capacity change from 0 to 32768
[  560.066008][T17355] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  560.231488][T17355] XFS (loop3): Ending clean mount
[  560.703382][T13639] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  561.063266][ T5882] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  561.237859][T17365] rxe_eth0 speed is unknown, defaulting to 1000
[  561.310145][ T5882] usb 3-1: Using ep0 maxpacket: 8
[  561.347756][ T5882] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  561.375713][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.423119][ T5882] usb 3-1: Product: syz
[  561.439378][ T5882] usb 3-1: Manufacturer: syz
[  561.457197][T17405] loop3: detected capacity change from 0 to 1024
[  561.488250][ T5882] usb 3-1: SerialNumber: syz
[  561.506766][T17405] EXT4-fs: inline encryption not supported
[  561.545813][ T5882] usb 3-1: config 0 descriptor??
[  561.590940][ T5882] gspca_main: se401-2.14.0 probing 047d:5003
[  561.606896][T17405] EXT4-fs (loop3): invalid inodes per group: 204800
[  561.606896][T17405] 
[  562.256756][T17407] loop6: detected capacity change from 0 to 131072
[  562.280294][T17367] Bluetooth: hci2: command tx timeout
[  562.299254][T17407] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945)
[  562.307887][T17407] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  562.320943][T17407] F2FS-fs (loop6): invalid crc value
[  562.360908][T17407] F2FS-fs (loop6): Found nat_bits in checkpoint
[  562.435131][T17407] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  562.442244][T17407] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  562.645145][T17407] F2FS-fs (loop6): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix.
[  562.755921][ T5882] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40
[  563.098869][ T5882] usb 3-1: USB disconnect, device number 23
[  563.209591][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  563.216377][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  563.230634][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL
[  563.713255][    T8] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  563.913244][    T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  563.952782][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.037479][    T8] usb 4-1: config 0 descriptor??
[  564.074094][    T8] cp210x 4-1:0.0: cp210x converter detected
[  564.336753][T17367] Bluetooth: hci2: command tx timeout
[  564.550824][T17365] chnl_net:caif_netlink_parms(): no params data found
[  564.656903][    T8] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  564.731263][    T8] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  564.780096][    T8] usb 4-1: cp210x converter now attached to ttyUSB0
[  564.876762][    T8] usb 4-1: USB disconnect, device number 13
[  564.883382][   T11] hsr_slave_0: left promiscuous mode
[  564.944612][    T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  564.952948][    T8] cp210x 4-1:0.0: device disconnected
[  565.016949][   T11] hsr_slave_1: left promiscuous mode
[  565.060263][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  565.089380][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.121881][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.158633][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.202338][   T11] bridge_slave_1: left allmulticast mode
[  565.221691][   T11] bridge_slave_1: left promiscuous mode
[  565.250883][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.317288][   T11] bridge_slave_0: left allmulticast mode
[  565.336403][   T11] bridge_slave_0: left promiscuous mode
[  565.367917][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.548929][   T11] veth1_macvtap: left promiscuous mode
[  565.564482][   T11] veth0_macvtap: left promiscuous mode
[  565.610645][   T11] veth1_vlan: left promiscuous mode
[  565.629732][   T11] veth0_vlan: left promiscuous mode
[  566.306629][T17473] loop2: detected capacity change from 0 to 164
[  566.407077][T17367] Bluetooth: hci2: command tx timeout
[  567.317726][T17487] loop6: detected capacity change from 0 to 512
[  567.464547][T17487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e098, mo2=0002]
[  567.562796][T17487] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  567.661708][T17487] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  567.736247][T17487] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3514: Corrupt directory, running e2fsck is recommended
[  567.883949][T17487] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  567.952187][T17487] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.3514: corrupted in-inode xattr: e_name out of bounds
[  568.108693][T17487] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.3514: couldn't read orphan inode 15 (err -117)
[  568.176344][T17487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.421313][T17487] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  568.440497][T17496] loop3: detected capacity change from 0 to 32768
[  568.475489][T17487] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  568.502950][T17367] Bluetooth: hci2: command tx timeout
[  568.525856][T17496] JBD2: Ignoring recovery information on journal
[  568.604769][T17487] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3514: Corrupt directory, running e2fsck is recommended
[  568.641345][T17496] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  568.891521][T13473] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.090037][T13639] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature 
[  569.137648][   T11] team0 (unregistering): Port device team_slave_1 removed
[  569.167533][T13639] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  569.213867][T13639] OCFS2: File system is now read-only.
[  569.227689][T13639] (syz-executor,13639,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[  569.268934][T13639] (syz-executor,13639,0):_ocfs2_free_clusters:2605 ERROR: status = -30
[  569.306901][T13639] (syz-executor,13639,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30
[  569.336270][T13639] (syz-executor,13639,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30
[  569.356321][T13639] (syz-executor,13639,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30
[  569.436122][T13639] ocfs2: Unmounting device (7,3) on (node local)
[  569.447174][   T11] team0 (unregistering): Port device team_slave_0 removed
[  569.764613][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.009820][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.050353][T17511] loop6: detected capacity change from 0 to 1024
[  570.326837][T17515] loop3: detected capacity change from 0 to 256
[  570.394065][T17515] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  571.294038][    T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  571.499496][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  571.516327][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  571.540938][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  571.598016][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  571.616865][T17517] loop6: detected capacity change from 0 to 32768
[  571.625227][    T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  571.655805][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.673996][    T8] usb 4-1: Product: syz
[  571.701869][    T8] usb 4-1: Manufacturer: syz
[  571.752051][    T8] usb 4-1: SerialNumber: syz
[  571.776664][    T8] usb 4-1: config 0 descriptor??
[  571.885370][T17517] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  571.976522][T17517] JBD2: Ignoring recovery information on journal
[  572.049097][    T8] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  572.198589][T17517] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  572.209584][   T11] bond0 (unregistering): Released all slaves
[  572.310188][T17524] usb 4-1: Couldn't submit interrupt_out_urb -90
[  572.352998][T15049] usb 4-1: USB disconnect, device number 14
[  572.804808][T17365] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.849429][T17365] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.909050][T17365] bridge_slave_0: entered allmulticast mode
[  572.944370][T17365] bridge_slave_0: entered promiscuous mode
[  573.003807][T17365] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.062864][T17365] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.127760][T17365] bridge_slave_1: entered allmulticast mode
[  573.157306][T17365] bridge_slave_1: entered promiscuous mode
[  573.335435][T17365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  573.395385][T17538] loop3: detected capacity change from 0 to 8192
[  573.438275][T17365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.468408][T17538] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  573.528767][   T11] IPVS: stop unused estimator thread 0...
[  573.581694][T17538] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  573.652990][T17538] REISERFS (device loop3): using ordered data mode
[  573.663442][T17538] reiserfs: using flush barriers
[  573.722349][T17547] loop2: detected capacity change from 0 to 1024
[  573.731884][T17538] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  573.808150][T13473] ocfs2: Unmounting device (7,6) on (node local)
[  573.865084][T17365] team0: Port device team_slave_0 added
[  573.871652][T17547] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  573.887707][T17538] REISERFS (device loop3): checking transaction log (loop3)
[  573.944318][T17365] team0: Port device team_slave_1 added
[  573.984213][T17547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  574.006456][T17538] REISERFS (device loop3): Using r5 hash to sort names
[  574.065425][T17538] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  574.095964][T17547] ext4 filesystem being mounted at /697/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  574.129746][T17365] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.163271][T17538] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  574.183106][T17365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.208998][    C0] vkms_vblank_simulate: vblank timer overrun
[  574.290098][T17547] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.3535: lblock 3 mapped to illegal pblock 3 (length 3)
[  574.357212][T17547] EXT4-fs (loop2): Remounting filesystem read-only
[  574.373923][T17365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.450225][T17365] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.486910][T17365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.513590][    C0] vkms_vblank_simulate: vblank timer overrun
[  574.538125][T17558] loop6: detected capacity change from 0 to 764
[  574.558741][ T8348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  574.706412][T17365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  574.860177][T17561] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  574.944705][T17561] iommufd_mock iommufd_mock2: Adding to iommu group 1
[  575.132847][T17365] hsr_slave_0: entered promiscuous mode
[  575.210619][T17365] hsr_slave_1: entered promiscuous mode
[  575.242738][T17365] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  575.275626][T17365] Cannot create hsr debugfs directory
[  575.319047][T17577] syzkaller1: tun_chr_ioctl cmd 1074025677
[  575.355424][T17577] syzkaller1: linktype set to 768
[  575.873638][T17591] ima: policy update failed
[  575.925595][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  575.925607][   T28] audit: type=1802 audit(1792739695.174:182): pid=17591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3548" res=0 errno=0
[  576.471699][T17614] syzkaller1: tun_chr_ioctl cmd 1074025677
[  576.521034][T17614] syzkaller1: linktype set to 768
[  576.666590][T17624] kAFS: bad VL server IP address
[  577.042146][T17634] input: syz1 as /devices/virtual/input/input41
[  577.281950][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3561'.
[  577.323250][ T5882] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  577.562625][ T5882] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  577.609570][ T5882] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  577.652524][ T5882] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  577.712252][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.755717][T17635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  577.776299][ T5882] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  578.073968][T13451] usb 3-1: USB disconnect, device number 24
[  578.359855][T17365] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  578.425396][T17365] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  578.513715][T17365] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  578.691506][T17365] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  579.121639][T17365] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.202169][T17365] 8021q: adding VLAN 0 to HW filter on device team0
[  579.294159][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.301281][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.350322][T17674] loop2: detected capacity change from 0 to 256
[  579.386281][T17676] loop3: detected capacity change from 0 to 1024
[  579.414452][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.421591][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.517370][T17676] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  579.644689][T17676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  579.778439][T17676] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  579.945606][T17676] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.3570: lblock 3 mapped to illegal pblock 3 (length 3)
[  580.097166][T17676] EXT4-fs (loop3): Remounting filesystem read-only
[  580.411110][T13639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  580.560755][T17365] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.704070][ T5882] kernel write not supported for file /snd/seq (pid: 5882 comm: kworker/0:4)
[  581.819288][T17365] veth0_vlan: entered promiscuous mode
[  581.909903][T17365] veth1_vlan: entered promiscuous mode
[  582.020359][T17365] veth0_macvtap: entered promiscuous mode
[  582.117537][T17365] veth1_macvtap: entered promiscuous mode
[  582.181006][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  582.218258][T17748] loop3: detected capacity change from 0 to 512
[  582.276437][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.314993][T17748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e098, mo2=0002]
[  582.365554][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  582.398601][T17748] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  582.444170][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.481566][T17754] binder: 17753:17754 ioctl c018620c 200000000000 returned -22
[  582.497757][T17748] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  582.515158][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  582.549103][T17748] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3587: Corrupt directory, running e2fsck is recommended
[  582.583609][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.626117][T17748] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  582.664308][T17365] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.679133][T17748] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.3587: corrupted in-inode xattr: e_name out of bounds
[  582.725896][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.772449][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.791204][T17748] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.3587: couldn't read orphan inode 15 (err -117)
[  582.828481][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.849756][T17748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  582.882352][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.927622][T17365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  582.966745][T17748] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  582.978550][T17365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.005602][T17365] batman_adv: batadv0: Interface activated: batadv_slave_1
[  583.019357][T17748] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  583.047320][T17759] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3589'.
[  583.064923][T17365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.084635][T17748] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3587: Corrupt directory, running e2fsck is recommended
[  583.109491][T17365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.163497][T17365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.213106][T17365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.247278][T13639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.575939][T13679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.645712][T13679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.653232][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.661071][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.900415][T17762] loop2: detected capacity change from 0 to 32768
[  583.976497][T17762] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  584.012507][T17777] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  584.049050][T17762] JBD2: Ignoring recovery information on journal
[  584.137215][    T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  584.204089][T17762] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  584.373134][    T8] usb 4-1: Using ep0 maxpacket: 32
[  584.434224][    T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  584.478893][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.534978][    T8] usb 4-1: Product: syz
[  584.539177][    T8] usb 4-1: Manufacturer: syz
[  584.572724][T17790] loop4: detected capacity change from 0 to 128
[  584.596062][    T8] usb 4-1: SerialNumber: syz
[  584.637797][    T8] usb 4-1: config 0 descriptor??
[  584.654453][T17790] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  584.736682][T17790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  584.922076][ T8348] ocfs2: Unmounting device (7,2) on (node local)
[  584.964381][T15049] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  585.065450][    T8] airspy 4-1:0.0: Board ID: 00
[  585.070269][    T8] airspy 4-1:0.0: Firmware version: 
[  585.173905][T17799] overlay: filesystem on ./file0 not supported as upperdir
[  585.204122][T15049] usb 7-1: Using ep0 maxpacket: 16
[  585.225883][T15049] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  585.287940][    T8] airspy 4-1:0.0: usb_control_msg() failed -71 request 11
[  585.297946][T15049] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  585.342174][    T8] airspy 4-1:0.0: Registered as swradio24
[  585.368689][T15049] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  585.398284][    T8] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  585.413853][T15049] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.450445][   T28] audit: type=1326 audit(1792739704.704:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  585.474606][    C0] vkms_vblank_simulate: vblank timer overrun
[  585.490849][T15049] usb 7-1: Product: syz
[  585.511829][T15049] usb 7-1: Manufacturer: syz
[  585.526906][    T8] usb 4-1: USB disconnect, device number 15
[  585.549810][T15049] usb 7-1: SerialNumber: syz
[  585.669056][   T28] audit: type=1326 audit(1792739704.704:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  585.693189][    C0] vkms_vblank_simulate: vblank timer overrun
[  585.846117][   T28] audit: type=1326 audit(1792739704.734:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  585.873238][T15049] usb 7-1: 0:2 : does not exist
[  585.920833][T15049] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  586.008793][T15049] usb 7-1: USB disconnect, device number 18
[  586.041401][   T28] audit: type=1326 audit(1792739704.734:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  586.246254][   T28] audit: type=1326 audit(1792739704.734:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  586.290224][T17818] loop3: detected capacity change from 0 to 512
[  586.371904][T17821] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3608'.
[  586.413596][T17818] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  586.460854][   T28] audit: type=1326 audit(1792739704.744:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  586.498097][T17818] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.3607: corrupted in-inode xattr: e_value size too large
[  586.587724][T17818] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.3607: couldn't read orphan inode 15 (err -117)
[  586.646076][   T28] audit: type=1326 audit(1792739704.744:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  586.699776][T17818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  586.728814][T17833] input: syz1 as /devices/virtual/input/input42
[  586.813212][   T28] audit: type=1326 audit(1792739704.744:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  586.957867][T13639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.999742][   T28] audit: type=1326 audit(1792739704.744:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  587.184354][   T28] audit: type=1326 audit(1792739704.744:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17802 comm="syz.4.3604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8c19f559 code=0x7ffc0000
[  587.208640][    C0] vkms_vblank_simulate: vblank timer overrun
[  587.241764][T17846] loop3: detected capacity change from 0 to 128
[  588.152235][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3624'.
[  588.379425][T17872] loop4: detected capacity change from 0 to 512
[  588.473385][T17872] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  588.615367][T17872] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  588.877495][   T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  589.301364][T17874] loop2: detected capacity change from 0 to 32768
[  589.338454][T17874] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  589.420592][T17874] XFS (loop2): Ending clean mount
[  589.441734][T17874] XFS (loop2): Quotacheck needed: Please wait.
[  589.557127][T17874] XFS (loop2): Quotacheck: Done.
[  589.667990][ T8348] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  590.480924][T17937] loop4: detected capacity change from 0 to 4096
[  590.502437][T17940] Bluetooth: hci0: Invalid link key type 149 for 00:00:09:00:00:00
[  590.547511][T17937] EXT4-fs: Ignoring removed i_version option
[  590.584784][T17937] EXT4-fs: Ignoring removed oldalloc option
[  590.673297][T17937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  590.730649][T17937] EXT4-fs (loop4): Test dummy encryption mode enabled
[  590.805253][T17937] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  591.062511][T17948] loop3: detected capacity change from 0 to 8
[  591.525389][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  591.780824][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  591.843222][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.909925][    T9] usb 5-1: Product: syz
[  591.951972][    T9] usb 5-1: Manufacturer: syz
[  591.997236][    T9] usb 5-1: SerialNumber: syz
[  592.066482][T14734] usb 5-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -13
[  592.076340][   T28] audit: type=1800 audit(1792739711.314:193): pid=14734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/0:7" name="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 res=0 errno=0
[  592.183457][T14734] usb 5-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -13
[  592.273145][T14734] usb 5-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw
[  592.414173][T17971] rxe_eth0 speed is unknown, defaulting to 1000
[  592.523913][T17977] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  594.272109][    T9] usb 5-1: USB disconnect, device number 5
[  595.337602][T18046] loop6: detected capacity change from 0 to 16
[  595.400620][T18046] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  596.529048][T18074] loop3: detected capacity change from 0 to 2048
[  596.593856][T18074] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  596.663309][T18080] tun0: tun_chr_ioctl cmd 2147767507
[  596.705244][T18074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  597.159522][   T28] audit: type=1400 audit(1792739716.414:194): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=18084 comm="syz.4.3682" name="foo" offset=35
[  597.495981][T18097] loop3: detected capacity change from 0 to 256
[  597.587131][T18097] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  597.641165][T18098] rxe_eth0 speed is unknown, defaulting to 1000
[  597.824551][T18097] syz.3.3685: attempt to access beyond end of device
[  597.824551][T18097] loop3: rw=524288, sector=440, nr_sectors = 256 limit=256
[  597.873204][ T5882] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  597.989710][T18097] syz.3.3685: attempt to access beyond end of device
[  597.989710][T18097] loop3: rw=524288, sector=696, nr_sectors = 256 limit=256
[  598.091883][T18097] syz.3.3685: attempt to access beyond end of device
[  598.091883][T18097] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[  598.178701][T18097] syz.3.3685: attempt to access beyond end of device
[  598.178701][T18097] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[  598.223352][ T5882] usb 3-1: config 0 has no interfaces?
[  598.283574][T18097] syz.3.3685: attempt to access beyond end of device
[  598.283574][T18097] loop3: rw=0, sector=440, nr_sectors = 8 limit=256
[  598.405840][ T5882] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  598.443111][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.490052][ T5882] usb 3-1: Product: syz
[  598.523227][ T5882] usb 3-1: Manufacturer: syz
[  598.563902][ T5882] usb 3-1: SerialNumber: syz
[  598.602273][ T5882] usb 3-1: config 0 descriptor??
[  598.879717][ T5882] usb 3-1: USB disconnect, device number 25
[  599.573756][T18149] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3700'.
[  599.872759][T18157] loop4: detected capacity change from 0 to 2048
[  599.996096][T18157] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  600.093421][T18157] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  600.180025][T18157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  600.604719][T18176] kAFS: bad VL server IP address
[  601.329855][T18188] loop3: detected capacity change from 0 to 4096
[  601.436983][T18188] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  601.566478][T18188] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  601.666757][T18197] loop4: detected capacity change from 0 to 8
[  601.754224][T18197] squashfs image failed sanity check
[  602.097721][T18209] program syz.3.3718 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  602.152076][T18202] loop2: detected capacity change from 0 to 4096
[  602.288204][T18202] ntfs3: loop2: Failed to load $Extend (-22).
[  602.328937][T18202] ntfs3: loop2: Failed to initialize $Extend.
[  602.621223][T18222] loop3: detected capacity change from 0 to 16
[  602.712770][T18222] erofs: (device loop3): mounted with root inode @ nid 36.
[  602.777177][T18222] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  602.858762][T18227] erofs: (device loop3): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000
[  603.250794][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3731'.
[  603.275512][T18241] loop6: detected capacity change from 0 to 512
[  603.340514][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3733'.
[  603.464226][T18245] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.471824][T18245] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.619230][T18245] bridge0: entered allmulticast mode
[  604.082670][T18257] veth1_macvtap: left promiscuous mode
[  604.126598][T18257] macsec0: entered allmulticast mode
[  604.186091][T18261] veth1_macvtap: entered promiscuous mode
[  604.191887][T18261] veth1_macvtap: entered allmulticast mode
[  604.280398][T18261] macsec0: left allmulticast mode
[  604.317959][T18261] veth1_macvtap: left allmulticast mode
[  604.361170][T18259] bond0: no command found in slaves file - use +ifname or -ifname
[  604.644496][T18277] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3743'.
[  604.897904][T18284] loop4: detected capacity change from 0 to 1024
[  605.124785][T18284] hfsplus: xattr searching failed
[  605.225680][T18284] hfsplus: b-tree write err: -5, ino 3
[  605.451946][ T3493] hfsplus: b-tree write err: -5, ino 3
[  605.783831][T18306] ip_tables: iptables: counters copy to user failed while replacing table
[  606.050102][T18311] input: syz1 as /devices/virtual/input/input43
[  606.698452][T18328] loop4: detected capacity change from 0 to 4096
[  606.739949][T18326] loop3: detected capacity change from 0 to 4096
[  606.820906][T18326] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  606.849087][T18328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.998705][T18326] ntfs3: loop3: ino=19, mi_enum_attr
[  607.052655][T18326] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  607.127979][T18326] ntfs3: loop3: ino=1a, mi_enum_attr
[  607.175038][T18326] ntfs3: loop3: ino=1a, mi_enum_attr
[  607.232483][T18326] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  607.356852][T18326] ntfs3: loop3: ino=5, "/" directory corrupted
[  607.478436][T17365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.501024][T18318] loop2: detected capacity change from 0 to 32768
[  607.765140][T18318] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  608.037731][T18318] XFS (loop2): Ending clean mount
[  608.317768][ T8348] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  608.340146][T18334] loop6: detected capacity change from 0 to 32768
[  608.596268][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3767'.
[  608.845571][T18346] loop3: detected capacity change from 0 to 32768
[  608.972003][T18346] JBD2: Ignoring recovery information on journal
[  609.130247][T18346] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  609.498891][T13639] ocfs2: Unmounting device (7,3) on (node local)
[  610.306196][T18399] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3778'.
[  611.834267][  T790] kernel write not supported for file /1633/oom_adj (pid: 790 comm: kworker/0:2)
[  612.959274][T18477] loop4: detected capacity change from 0 to 131072
[  613.020805][T18477] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24)
[  613.030224][T18477] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  613.038666][T18477] F2FS-fs (loop4): Test dummy encryption mode enabled
[  613.058771][T18477] F2FS-fs (loop4): invalid crc value
[  613.108931][T18477] F2FS-fs (loop4): Found nat_bits in checkpoint
[  613.146315][T18477] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  613.167759][T18477] F2FS-fs (loop4): Start checkpoint disabled!
[  613.203399][T18477] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  613.211365][T18477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  613.643878][ T3493] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  613.775688][T18459] loop3: detected capacity change from 0 to 32768
[  613.868723][T18459] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  614.015370][T18459] XFS (loop3): Ending clean mount
[  614.090486][T18459] XFS (loop3): Quotacheck needed: Please wait.
[  614.305653][T18459] XFS (loop3): Quotacheck: Done.
[  614.449585][T13639] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  614.875819][T18527] program syz.6.3818 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  615.494063][T18548] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  616.157938][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3815'.
[  616.215696][T18566] loop4: detected capacity change from 0 to 512
[  616.339593][T18566] EXT4-fs error (device loop4): __ext4_iget:5117: inode #11: block 1: comm syz.4.3828: invalid block
[  616.415154][T18566] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.3828: couldn't read orphan inode 11 (err -117)
[  616.523992][T18573] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3830'.
[  616.556804][T18566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.769910][T17365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.041492][T18586] loop3: detected capacity change from 0 to 512
[  617.132045][T18586] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  617.160100][T18590] pimreg: tun_chr_ioctl cmd 1074025677
[  617.205232][T18590] pimreg: linktype set to 769
[  617.216979][T18586] EXT4-fs (loop3): 1 truncate cleaned up
[  617.260289][T18586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.446445][T18586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.617558][T18600] usbcore.quirks: string doesn't fit in 127 chars.
[  617.831019][T18609] loop2: detected capacity change from 0 to 1024
[  617.903795][T18612] netem: incorrect ge model size
[  617.935484][T18609] hfsplus: invalid btree flag
[  617.940372][T18609] hfsplus: failed to load catalog file
[  617.963522][T18612] netem: change failed
[  618.084821][T18618] netlink: 'syz.4.3845': attribute type 3 has an invalid length.
[  618.395251][   T28] audit: type=1107 audit(1792739737.644:195): pid=18626 uid=0 auid=4 ses=1 subj=unconfined msg=''
[  618.449349][T18629] loop6: detected capacity change from 0 to 512
[  618.486613][T18629] EXT4-fs: Ignoring removed nobh option
[  618.581109][T18629] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  618.634476][T18629] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61
[  618.717700][T18629] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #13: comm syz.6.3850: inode has both inline data and extents flags
[  618.824069][T18629] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.3850: couldn't read orphan inode 13 (err -117)
[  618.942942][T18629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  618.991927][T18649] loop2: detected capacity change from 0 to 128
[  619.034340][T18629] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  619.086936][T18649] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  619.186015][T18649] ext4 filesystem being mounted at /767/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  619.327680][ T8348] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  619.697490][T13473] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.082984][T18688] loop6: detected capacity change from 0 to 164
[  620.186223][T18691] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  620.271003][T18693] loop4: detected capacity change from 0 to 1024
[  620.330410][T18693] EXT4-fs: Ignoring removed bh option
[  620.409984][T18693] EXT4-fs: Ignoring removed oldalloc option
[  620.475908][T18693] EXT4-fs: Ignoring removed nobh option
[  620.540106][T18693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  620.616340][T18693] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  620.616340][T18693] 
[  620.833330][  T790] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  620.959444][T18708] loop6: detected capacity change from 0 to 64
[  621.070315][  T790] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  621.118455][  T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.181967][  T790] usb 3-1: config 0 descriptor??
[  621.234796][  T790] gspca_main: cpia1-2.14.0 probing 0813:0001
[  621.366812][T18714] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  621.638027][  T790] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  621.646063][T18721] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  621.681778][T18724] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3880'.
[  621.840998][  T790] gspca_cpia1: usb_control_msg 01, error -32
[  621.870921][  T790] gspca_cpia1: usb_control_msg 01, error -71
[  621.919806][  T790] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[  621.983267][  T790] usb 3-1: USB disconnect, device number 26
[  622.232135][T18737] Bluetooth: MGMT ver 1.22
[  622.512201][T18745] loop6: detected capacity change from 0 to 2048
[  622.672711][T18745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.912515][T13473] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.050000][T18758] loop2: detected capacity change from 0 to 8192
[  624.064904][T18754] loop3: detected capacity change from 0 to 40427
[  624.148271][T18754] F2FS-fs (loop3): invalid crc value
[  624.189724][T18754] F2FS-fs (loop3): Found nat_bits in checkpoint
[  624.484806][T18754] F2FS-fs (loop3): Start checkpoint disabled!
[  624.649578][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  624.659417][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  624.670945][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL
[  624.677309][T18754] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  625.125665][T13679] kworker/u4:1: attempt to access beyond end of device
[  625.125665][T13679] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  625.142494][T18818] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3909'.
[  625.201992][T18818] netlink: zone id is out of range
[  625.208458][T13679] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  625.949481][T18836] loop2: detected capacity change from 0 to 2048
[  626.095737][T18836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.366508][ T8348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.786073][T18896] loop3: detected capacity change from 0 to 256
[  627.888324][T18896] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  628.053625][ T3424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.067060][T18899] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  628.171502][T18899] FAT-fs (loop3): Filesystem has been set read-only
[  628.262662][T18899] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  628.368208][ T3424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.692164][ T3424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.086962][ T3424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.255282][   T28] audit: type=1326 audit(1792739748.504:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae619f559 code=0x7ffc0000
[  629.430992][   T28] audit: type=1326 audit(1792739748.534:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae619f559 code=0x7ffc0000
[  629.455132][    C0] vkms_vblank_simulate: vblank timer overrun
[  629.566493][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  629.581053][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  629.618221][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  629.629396][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  629.637754][   T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  629.645339][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  629.742695][   T28] audit: type=1326 audit(1792739748.534:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae619f559 code=0x7ffc0000
[  629.927408][T18941] loop6: detected capacity change from 0 to 1024
[  629.953593][   T28] audit: type=1326 audit(1792739748.544:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae619f559 code=0x7ffc0000
[  629.977695][    C0] vkms_vblank_simulate: vblank timer overrun
[  629.992662][T18928] rxe_eth0 speed is unknown, defaulting to 1000
[  630.062067][T18941] EXT4-fs error (device loop6): __ext4_fill_super:5517: comm syz.6.3945: inode #2: comm syz.6.3945: iget: illegal inode #
[  630.109514][T18942] loop3: detected capacity change from 0 to 4096
[  630.193305][T18941] EXT4-fs (loop6): get root inode failed
[  630.206292][   T28] audit: type=1326 audit(1792739748.544:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7faae619f559 code=0x7ffc0000
[  630.262415][T18941] EXT4-fs (loop6): mount failed
[  630.274737][T18942] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  630.435937][T18942] ntfs3: loop3: ino=19, mi_enum_attr
[  630.464876][   T28] audit: type=1326 audit(1792739748.624:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae619f559 code=0x7ffc0000
[  630.489048][    C0] vkms_vblank_simulate: vblank timer overrun
[  630.508248][T18942] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  630.586940][T18942] ntfs3: loop3: ino=19, mi_enum_attr
[  630.621414][T18942] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  630.754418][   T28] audit: type=1326 audit(1792739748.624:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faae619f2c2 code=0x7ffc0000
[  630.778518][    C0] vkms_vblank_simulate: vblank timer overrun
[  631.033274][   T28] audit: type=1326 audit(1792739748.624:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7faae619f357 code=0x7ffc0000
[  631.057284][    C0] vkms_vblank_simulate: vblank timer overrun
[  631.267639][T18964] loop6: detected capacity change from 0 to 64
[  631.293520][   T28] audit: type=1326 audit(1792739748.624:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faae615c251 code=0x7ffc0000
[  631.483668][   T28] audit: type=1326 audit(1792739748.624:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.6.3941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7faae61a0349 code=0x7ffc0000
[  631.507779][    C0] vkms_vblank_simulate: vblank timer overrun
[  631.764865][   T52] Bluetooth: hci2: command tx timeout
[  632.690708][T18928] chnl_net:caif_netlink_parms(): no params data found
[  633.269080][T18985] loop3: detected capacity change from 0 to 40427
[  633.339499][T18985] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  633.423253][T18985] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  633.468103][T18985] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff
[  633.529515][T18985] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8
[  633.602802][T18985] F2FS-fs (loop3): invalid crc value
[  633.697964][T18985] F2FS-fs (loop3): Found nat_bits in checkpoint
[  633.748127][T18928] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.840481][T18928] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.873316][   T52] Bluetooth: hci2: command tx timeout
[  633.905050][T18928] bridge_slave_0: entered allmulticast mode
[  633.974065][T18928] bridge_slave_0: entered promiscuous mode
[  634.034325][T18985] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  634.080391][ T3424] hsr_slave_0: left promiscuous mode
[  634.094795][T18985] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  634.136801][ T3424] hsr_slave_1: left promiscuous mode
[  634.182059][T18985] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[  634.193236][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  634.200668][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_0
[  634.350964][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  634.414067][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_1
[  634.486865][ T3424] bridge_slave_1: left allmulticast mode
[  634.492563][ T3424] bridge_slave_1: left promiscuous mode
[  634.546730][ T3424] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.709252][ T3424] bridge_slave_0: left allmulticast mode
[  634.743527][ T3424] bridge_slave_0: left promiscuous mode
[  634.749249][ T3424] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.108287][ T3424] veth1_macvtap: left promiscuous mode
[  635.133809][T19057] loop3: detected capacity change from 0 to 128
[  635.157754][ T3424] veth0_macvtap: left promiscuous mode
[  635.187424][ T3424] veth1_vlan: left promiscuous mode
[  635.192771][ T3424] veth0_vlan: left promiscuous mode
[  635.516254][    T8] kernel write not supported for file /input/event2 (pid: 8 comm: kworker/0:0)
[  635.720173][T19068] loop2: detected capacity change from 0 to 1024
[  635.927124][   T52] Bluetooth: hci2: command tx timeout
[  636.556379][T19064] loop3: detected capacity change from 0 to 40427
[  636.606196][T19064] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  636.648619][T19064] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  636.702895][T19064] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff
[  636.783156][T19064] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8
[  636.842938][T19064] F2FS-fs (loop3): invalid crc value
[  636.926450][T19064] F2FS-fs (loop3): Found nat_bits in checkpoint
[  637.163630][T19064] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  637.170735][T19064] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  637.600044][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3988'.
[  638.008406][   T52] Bluetooth: hci2: command tx timeout
[  639.314088][ T3424] team0 (unregistering): Port device team_slave_1 removed
[  639.377027][ T5906] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  639.428262][ T3424] team0 (unregistering): Port device team_slave_0 removed
[  639.510913][ T3424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  639.597241][ T5906] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  639.609921][ T3424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  639.621737][ T5906] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  639.656381][ T5906] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  639.667589][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.697789][T19106] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  639.718240][ T5906] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  640.114496][ T5906] usb 4-1: USB disconnect, device number 16
[  641.087592][ T3424] bond0 (unregistering): Released all slaves
[  641.292044][T18928] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.310200][T18928] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.339356][T18928] bridge_slave_1: entered allmulticast mode
[  641.357945][T18928] bridge_slave_1: entered promiscuous mode
[  641.460936][T18928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  641.551881][T18928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.748673][T18928] team0: Port device team_slave_0 added
[  641.825837][T18928] team0: Port device team_slave_1 added
[  642.012794][T18928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.078128][T18928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.104225][    C0] vkms_vblank_simulate: vblank timer overrun
[  642.253075][T18928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  642.344563][T18928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  642.402055][T18928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.428010][    C0] vkms_vblank_simulate: vblank timer overrun
[  642.560856][T19137] loop6: detected capacity change from 0 to 512
[  642.594030][T18928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  642.650585][T19137] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.4004: corrupted in-inode xattr: invalid ea_ino
[  642.755883][T19137] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4004: couldn't read orphan inode 15 (err -117)
[  642.863217][T19137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  642.994623][T18928] hsr_slave_0: entered promiscuous mode
[  643.030236][T18928] hsr_slave_1: entered promiscuous mode
[  643.077457][T18928] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  643.119000][T18928] Cannot create hsr debugfs directory
[  643.135097][T13473] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.652848][T19140] loop2: detected capacity change from 0 to 32768
[  643.822981][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  643.822981][T19140] 
[  643.945494][T19140] ERROR: (device loop2): remounting filesystem as read-only
[  644.004184][T19140] xtLookup: xtSearch returned -5
[  644.009187][T19140] free_index: error reading directory table
[  644.069092][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  644.069092][T19140] 
[  644.155851][T19140] xtLookup: xtSearch returned -5
[  644.160829][T19140] free_index: error reading directory table
[  644.225174][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  644.225174][T19140] 
[  644.242246][T19167] loop6: detected capacity change from 0 to 256
[  644.295671][T19140] xtLookup: xtSearch returned -5
[  644.300645][T19140] free_index: error reading directory table
[  644.368835][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  644.368835][T19140] 
[  644.381691][T19167] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000ff2)
[  644.456179][T19167] FAT-fs (loop6): Filesystem has been set read-only
[  644.462897][T19140] xtLookup: xtSearch returned -5
[  644.495542][T19140] free_index: error reading directory table
[  644.539970][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  644.539970][T19140] 
[  644.633199][T19140] xtLookup: xtSearch returned -5
[  644.638199][T19140] free_index: error reading directory table
[  644.648787][T19151] loop3: detected capacity change from 0 to 40427
[  644.701429][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  644.701429][T19140] 
[  644.746530][T19151] F2FS-fs (loop3): invalid crc value
[  644.798632][T19140] xtLookup: xtSearch returned -5
[  644.821344][T19151] F2FS-fs (loop3): Found nat_bits in checkpoint
[  644.845969][T19140] add_index: get/read_metapage failed!
[  644.851471][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  644.851471][T19140] 
[  644.936843][ T5906] wiimote 0005:057E:0306.001A: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  644.980797][T19140] xtLookup: xtSearch returned -5
[  645.008986][ T5906] wiimote 0005:057E:0306.001A: New device registered
[  645.026701][T18928] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  645.033674][T19140] free_index: error reading directory table
[  645.039593][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  645.039593][T19140] 
[  645.094150][T18928] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  645.100964][T19151] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  645.148984][T19140] xtLookup: xtSearch returned -5
[  645.162483][T18928] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  645.183661][T19140] free_index: error reading directory table
[  645.189622][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  645.189622][T19140] 
[  645.213206][ T5882] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  645.234719][T18928] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  645.291522][T13639] syz-executor: attempt to access beyond end of device
[  645.291522][T13639] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  645.313869][T19140] xtLookup: xtSearch returned -5
[  645.331963][T19140] free_index: error reading directory table
[  645.377690][T13639] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  645.442652][T19140] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  645.442652][T19140] 
[  645.454394][T19176] wiimote 0005:057E:0306.001A: Unhandled report 0 size 21
[  645.496475][T19175] wiimote 0005:057E:0306.001A: Device removed
[  645.508292][ T5882] usb 7-1: unable to get BOS descriptor or descriptor too short
[  645.545610][T19140] xtLookup: xtSearch returned -5
[  645.550601][T19140] add_index: get/read_metapage failed!
[  645.571246][T18928] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.583163][ T5882] usb 7-1: unable to read config index 0 descriptor/start: -71
[  645.590762][ T5882] usb 7-1: can't read configurations, error -71
[  645.668594][T18928] 8021q: adding VLAN 0 to HW filter on device team0
[  645.728108][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.735265][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  645.788243][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.795387][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.163333][ T5881] wiimote 0005:057E:0306.001A: detected device: Nintendo Wii Remote (Gen 1)
[  646.409995][ T5881] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.001A/input/input46
[  646.602518][ T5881] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.001A/input/input47
[  646.615194][T18928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  646.689892][ T5881] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.001A/input/input45
[  646.793378][  T790] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  647.017180][  T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  647.046178][  T790] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  647.097514][  T790] usb 3-1: string descriptor 0 read error: -22
[  647.117575][  T790] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  647.173366][  T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.231380][  T790] etas_es58x 3-1:1.0: Starting (null) (null) (Serial Number (null))
[  647.285954][  T790] etas_es58x 3-1:1.0: could not retrieve the product info string
[  647.721275][T18928] veth0_vlan: entered promiscuous mode
[  647.736126][T19198] loop3: detected capacity change from 0 to 32768
[  647.800302][T18928] veth1_vlan: entered promiscuous mode
[  647.823695][T19198] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  647.851492][T19196] etas_es58x 3-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE
[  647.897024][    C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  647.908399][    C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  647.933427][    C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  647.955688][    C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  647.963708][    C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  647.972549][T19196] etas_es58x 3-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE
[  648.035486][T19198] XFS (loop3): Ending clean mount
[  648.087445][T19198] XFS (loop3): Quotacheck needed: Please wait.
[  648.100086][T18928] veth0_macvtap: entered promiscuous mode
[  648.157708][T18928] veth1_macvtap: entered promiscuous mode
[  648.220293][  T790] usb 3-1: USB disconnect, device number 27
[  648.264498][  T790] etas_es58x 3-1:1.0: Disconnecting (null) (null)
[  648.287872][T19198] XFS (loop3): Quotacheck: Done.
[  648.312701][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.360663][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.400269][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.442843][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.475571][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.502349][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.527561][T18928] batman_adv: batadv0: Interface activated: batadv_slave_0
[  648.559317][T13639] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  648.599660][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.648316][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.671100][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.702215][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.728418][T18928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  648.750564][T18928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.775035][T18928] batman_adv: batadv0: Interface activated: batadv_slave_1
[  648.840698][T18928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  648.880290][T18928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  648.913280][T18928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  648.922026][T18928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  649.207744][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.250000][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.287903][ T3424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.320645][ T3424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.680462][T19259] loop2: detected capacity change from 0 to 512
[  649.895390][T19259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.012244][T19259] ext4 filesystem being mounted at /823/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.298130][ T8348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.315931][T19274] scsi_dev_info_list_add_str: bad dev info string 'Q^' '(null)' '(null)'
[  652.452199][T19329] loop2: detected capacity change from 0 to 2048
[  652.579645][T19329] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  652.641375][T19329] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  652.701509][T19334] loop3: detected capacity change from 0 to 512
[  652.734433][T19329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  653.373458][T19353] overlay: filesystem on ./file0 not supported as upperdir
[  653.704267][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4049'.
[  653.728951][T19364] bridge0: entered allmulticast mode
[  653.835770][T13451] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  654.033684][T13451] usb 4-1: Using ep0 maxpacket: 32
[  654.062653][T13451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.121391][T13451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  654.169680][T13451] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  654.234120][T13451] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  654.297754][T13451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.348962][T13451] usb 4-1: config 0 descriptor??
[  654.475363][T19384] kAFS: Invalid Command on /proc/fs/afs/cells file
[  654.751325][T19394] loop2: detected capacity change from 0 to 512
[  654.849616][T13451] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.001B/input/input48
[  655.032063][T13451] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.001B/input/input49
[  655.173665][T19403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'.
[  655.245010][T13451] kye 0003:0458:5011.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  655.261547][T19405] loop6: detected capacity change from 0 to 8
[  655.361427][T13451] usb 4-1: USB disconnect, device number 17
[  655.500251][ T5881] usb 5-1: loading /lib/firmware/htc_9271.fw failed with error -13
[  655.509433][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  655.509444][   T28] audit: type=1800 audit(1792739774.754:226): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/0:3" name="/lib/firmware/htc_9271.fw" dev="sda1" ino=417 res=0 errno=0
[  655.537681][    C0] vkms_vblank_simulate: vblank timer overrun
[  655.550478][T19406] fido_id[19406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  655.595938][ T5881] usb 5-1: Direct firmware load for htc_9271.fw failed with error -13
[  655.643303][ T5881] usb 5-1: Falling back to sysfs fallback for: htc_9271.fw
[  656.366107][T19434] loop4: detected capacity change from 0 to 512
[  656.450052][T19434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  656.519939][T19434] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  656.776790][T18928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.972101][T19448] loop2: detected capacity change from 0 to 512
[  657.008209][T19448] EXT4-fs: Ignoring removed oldalloc option
[  657.089185][T19448] EXT4-fs (loop2): Test dummy encryption mode enabled
[  657.136233][T19448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  657.445767][ T8348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  657.664649][T19473] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4094'.
[  658.690688][T19471] loop2: detected capacity change from 0 to 40427
[  658.723475][T19471] F2FS-fs (loop2): build fault injection attr: rate: 25, type: 0x7ffff
[  658.772619][T19471] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7698c
[  658.817868][T19471] F2FS-fs (loop2): invalid crc value
[  658.833164][T19307] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  658.858989][T19471] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x217/0x970
[  658.920318][T19471] F2FS-fs (loop2): Found nat_bits in checkpoint
[  659.031270][T19471] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  659.062499][T19307] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  659.095370][T19307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  659.164787][T19307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  659.177497][T19510] loop6: detected capacity change from 0 to 1024
[  659.207752][T19471] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  659.231459][T19307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  659.323202][T19307] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  659.352498][T19307] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  659.404062][T19471] F2FS-fs (loop2): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xe1/0x1d0
[  659.420720][T19307] usb 4-1: Product: syz
[  659.451338][T19307] usb 4-1: Manufacturer: syz
[  659.483974][T19307] cdc_wdm 4-1:1.0: skipping garbage
[  659.519370][T19471] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x139/0x910
[  659.545801][T19307] cdc_wdm 4-1:1.0: skipping garbage
[  659.583636][T19307] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  659.599977][T19517] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4112'.
[  659.631254][T19307] cdc_wdm 4-1:1.0: Unknown control protocol
[  659.706279][ T8348] syz-executor: attempt to access beyond end of device
[  659.706279][ T8348] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  659.741923][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  659.748783][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  659.757216][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  659.763834][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  659.771462][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  659.778085][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  659.784570][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  659.791158][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  659.797468][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  659.804053][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  659.812812][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  659.819411][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  659.825964][T19307] usb 4-1: USB disconnect, device number 18
[  659.912066][ T8348] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  661.246231][T19560] loop4: detected capacity change from 0 to 1024
[  661.503129][T14734] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  661.591172][T13451] kernel write not supported for file /82/oom_adj (pid: 13451 comm: kworker/0:5)
[  661.703126][T14734] usb 4-1: Using ep0 maxpacket: 16
[  661.731967][T14734] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  661.775086][T19576] syz_tun: entered allmulticast mode
[  661.782766][T14734] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  661.821454][T19575] syz_tun: left allmulticast mode
[  661.840319][T14734] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  661.863210][T14734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.914974][T14734] usb 4-1: Product: syz
[  661.919171][T14734] usb 4-1: Manufacturer: syz
[  661.956835][T14734] usb 4-1: SerialNumber: syz
[  662.236444][T14734] usb 4-1: 0:2 : does not exist
[  662.287704][T14734] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  662.349443][T14734] usb 4-1: USB disconnect, device number 19
[  662.415865][T16041] udevd[16041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  662.888504][T19582] loop4: detected capacity change from 0 to 32768
[  662.997992][T19582] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  663.189678][T19611] netlink: 'syz.3.4147': attribute type 11 has an invalid length.
[  663.212282][T19582] XFS (loop4): Ending clean mount
[  663.487315][T19615] loop6: detected capacity change from 0 to 1024
[  663.551116][T18928] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  663.571824][T19619] loop3: detected capacity change from 0 to 256
[  663.665907][T19619] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  664.040305][T19628] loop5: detected capacity change from 0 to 3431
[  664.164050][   T57] hfsplus: b-tree write err: -5, ino 3
[  664.376204][T19633] tun0: tun_chr_ioctl cmd 2147767507
[  664.624153][T19640] xt_hashlimit: size too large, truncated to 1048576
[  664.753504][T19641] xt_hashlimit: size too large, truncated to 1048576
[  665.711785][T19658] rxe_eth0 speed is unknown, defaulting to 1000
[  665.924847][T19664] loop4: detected capacity change from 0 to 512
[  665.988245][T19664] EXT4-fs (loop4): Test dummy encryption mode enabled
[  666.073119][T19664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002]
[  666.081244][T19664] System zones: 1-12
[  666.157253][T19664] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  666.327694][T19664] EXT4-fs error (device loop4): ext4_add_entry:2488: inode #2: comm syz.4.4162: Directory hole found for htree leaf block 0
[  666.414075][T19664] EXT4-fs (loop4): Remounting filesystem read-only
[  666.577178][T18928] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  666.681934][T19674] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4163'.
[  666.831115][T19678] loop4: detected capacity change from 0 to 1024
[  666.937806][T19678] hfsplus: invalid btree flag
[  666.942754][T19678] hfsplus: failed to load catalog file
[  667.288174][T19683] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4165'.
[  668.607084][T19710] loop2: detected capacity change from 0 to 164
[  669.310055][T19726] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  670.001853][T19744] loop4: detected capacity change from 0 to 8
[  670.402753][T19752] ip_tables: iptables: counters copy to user failed while replacing table
[  671.227252][T19775] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  671.863422][T19797] ip_tables: iptables: counters copy to user failed while replacing table
[  671.953611][T19797] ip_tables: iptables: counters copy to user failed while replacing table
[  672.304002][T19808] netlink: 'syz.4.4201': attribute type 3 has an invalid length.
[  672.311960][T19808] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.4201'.
[  672.982962][T19821] input: syz1 as /devices/virtual/input/input50
[  673.636669][ T5882] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  673.824983][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short
[  673.841037][ T5882] usb 3-1: not running at top speed; connect to a high speed hub
[  673.857976][ T5882] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[  673.881217][ T5882] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  673.914917][ T5882] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  673.929943][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.951096][ T5882] usb 3-1: Product: syz
[  673.961262][ T5882] usb 3-1: Manufacturer: syz
[  673.973109][ T5882] usb 3-1: SerialNumber: syz
[  674.409626][ T5882] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  674.622560][ T5882] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  674.660894][ T5882] usb 3-1: USB disconnect, device number 28
[  674.740848][T16041] udevd[16041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  675.026383][T19857] usbcore.quirks: string doesn't fit in 127 chars.
[  676.080049][T19889] loop2: detected capacity change from 0 to 512
[  676.119480][T19889] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.4245: iget: bad i_size value: 38620345925642
[  676.175010][T19889] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.4245: couldn't read orphan inode 15 (err -117)
[  676.221382][T19889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  676.427620][ T8348] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.560216][T19900] loop4: detected capacity change from 0 to 512
[  676.708888][T19900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  676.800535][T19900] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  676.871950][ T5882] IPVS: starting estimator thread 0...
[  676.986709][T18928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.000952][T19910] IPVS: using max 32 ests per chain, 76800 per kthread
[  677.770378][T19937] loop4: detected capacity change from 0 to 1024
[  677.827474][T19937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  677.908321][T19937] EXT4-fs error (device loop4): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.4.4254: path /69/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  678.108294][T18928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  679.007218][T19978] loop4: detected capacity change from 0 to 256
[  679.048808][T19978] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  679.114113][ T5882] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  679.230399][T19983] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  679.240343][   T28] audit: type=1326 audit(1792739798.494:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7381f9f559 code=0x7ffc0000
[  679.320790][T19983] FAT-fs (loop4): Filesystem has been set read-only
[  679.328820][ T5882] usb 4-1: Using ep0 maxpacket: 16
[  679.365303][ T5882] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  679.380101][   T28] audit: type=1326 audit(1792739798.494:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7381f9f559 code=0x7ffc0000
[  679.404381][    C0] vkms_vblank_simulate: vblank timer overrun
[  679.421661][ T5882] usb 4-1: config 0 has no interface number 0
[  679.435074][T19983] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  679.455975][ T5882] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  679.466365][T19987] block2mtd: illegal erase size
[  679.504186][ T5882] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  679.533490][   T28] audit: type=1326 audit(1792739798.524:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7381f9f559 code=0x7ffc0000
[  679.557573][    C0] vkms_vblank_simulate: vblank timer overrun
[  679.604704][ T5882] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  679.624806][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.664311][ T5882] usb 4-1: Product: syz
[  679.678370][ T5882] usb 4-1: Manufacturer: syz
[  679.700866][   T28] audit: type=1326 audit(1792739798.524:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7381f9f559 code=0x7ffc0000
[  679.724947][    C0] vkms_vblank_simulate: vblank timer overrun
[  679.733097][ T5882] usb 4-1: SerialNumber: syz
[  679.764859][ T5882] usb 4-1: config 0 descriptor??
[  679.773348][T19970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  679.781166][T19970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  679.850158][   T28] audit: type=1326 audit(1792739798.534:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7381f9f559 code=0x7ffc0000
[  679.874236][    C0] vkms_vblank_simulate: vblank timer overrun
[  679.982738][   T28] audit: type=1326 audit(1792739798.564:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7381f9f559 code=0x7ffc0000
[  680.006976][    C0] vkms_vblank_simulate: vblank timer overrun
[  680.048405][T19970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  680.101680][T19970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  680.157535][T19996] loop4: detected capacity change from 0 to 64
[  680.205363][   T28] audit: type=1326 audit(1792739798.564:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7381f9f559 code=0x7ffc0000
[  680.346920][   T28] audit: type=1326 audit(1792739798.574:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19985 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7381f5fd8e code=0x7ffc0000
[  680.371032][    C0] vkms_vblank_simulate: vblank timer overrun
[  680.394929][ T5882] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  680.545033][   T28] audit: type=1326 audit(1792739798.684:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7381f9f559 code=0x7ffc0000
[  680.569220][    C0] vkms_vblank_simulate: vblank timer overrun
[  680.584068][ T5882] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 84
[  680.745374][   T28] audit: type=1326 audit(1792739798.684:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.2.4275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7381f9f559 code=0x7ffc0000
[  680.769471][    C0] vkms_vblank_simulate: vblank timer overrun
[  680.813350][ T5882] usb 4-1: USB disconnect, device number 20
[  681.524898][T20025] netlink: 'syz.6.4295': attribute type 8 has an invalid length.
[  682.119846][T20043] loop3: detected capacity change from 0 to 256
[  682.158681][T20044] loop6: detected capacity change from 0 to 256
[  682.286754][T20044] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  682.786047][T20029] loop4: detected capacity change from 0 to 40427
[  682.828164][T20029] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  682.875700][T20029] F2FS-fs (loop4): Image doesn't support compression
[  682.927395][T20029] F2FS-fs (loop4): heap/no_heap options were deprecated
[  682.943171][ T5906] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  683.001768][T20029] F2FS-fs (loop4): invalid crc value
[  683.043636][T17367] Bluetooth: hci3: command 0x0405 tx timeout
[  683.063617][T20029] F2FS-fs (loop4): Found nat_bits in checkpoint
[  683.176181][ T5906] usb 7-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  683.193980][T20029] F2FS-fs (loop4): Start checkpoint disabled!
[  683.204891][ T5906] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.255556][ T5906] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  683.288336][T20029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  683.303088][ T5906] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  683.331376][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.360168][ T5906] usb 7-1: config 0 descriptor??
[  683.378624][ T5906] usb 7-1: Found UVC 9.00 device <unnamed> (046d:0825)
[  686.091007][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  686.097485][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  686.105600][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL
[  688.409459][ T5906] usb 7-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  688.419185][ T5906] uvcvideo 7-1:0.1: Failed to query (129) UVC probe control : -32 (exp. 48).
[  688.428470][ T5906] uvcvideo 7-1:0.1: Failed to initialize the device (-5).
[  716.818305][ T5881] usb 5-1: no suitable firmware found!
[  716.833158][ T5881] usb 5-1: ath9k_htc: Failed to get firmware htc_9271.fw
[  716.851460][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  747.532244][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  747.541617][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  747.551559][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL
[  754.730193][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  808.967949][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  808.981876][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  808.991733][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL
[  833.285008][   T29] INFO: task kworker/u4:0:11 blocked for more than 143 seconds.
[  833.292716][   T29]       Tainted: G S                 syzkaller #0
[  833.299494][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  833.318213][   T29] task:kworker/u4:0    state:D stack:21784 pid:11    ppid:2      flags:0x00004000
[  833.331767][   T29] Workqueue: writeback wb_workfn (flush-8:0)
[  833.346511][   T29] Call Trace:
[  833.349816][   T29]  <TASK>
[  833.352748][   T29]  __schedule+0x15ae/0x4700
[  833.358952][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  833.374682][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  833.388685][   T29]  ? mark_lock+0x94/0x320
[  833.395859][   T29]  ? asan.module_dtor+0x20/0x20
[  833.400740][   T29]  ? blk_check_plugged+0x250/0x250
[  833.417647][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  833.426831][   T29]  ? wq_worker_sleeping+0x63/0x240
[  833.431977][   T29]  schedule+0xbd/0x170
[  833.447717][   T29]  io_schedule+0x80/0xd0
[  833.451992][   T29]  bit_wait_io+0x11/0xd0
[  833.459666][   T29]  __wait_on_bit+0x9f/0x2c0
[  833.471983][   T29]  ? bit_wait+0xd0/0xd0
[  833.481367][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  833.494728][   T29]  ? bit_wait+0xd0/0xd0
[  833.498914][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  833.505624][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  833.510768][   T29]  ? bit_waitqueue+0x30/0x30
[  833.517073][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  833.522291][   T29]  do_get_write_access+0x5c9/0xe00
[  833.531413][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  833.539981][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  833.548691][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  833.557410][   T29]  ? ext4_get_group_desc+0x10e/0x4d0
[  833.562768][   T29]  ext4_mb_mark_diskspace_used+0x27c/0x14b0
[  833.572175][   T29]  ? _raw_read_unlock+0x28/0x40
[  833.578134][   T29]  ? ext4_discard_allocated_blocks+0x620/0x620
[  833.587304][   T29]  ext4_mb_new_blocks+0x105b/0x42f0
[  833.592577][   T29]  ? ext4_ext_search_right+0x376/0x800
[  833.598916][   T29]  ? __asan_memcpy+0x40/0x70
[  833.610914][   T29]  ? ext4_mb_release_inode_pa+0xa30/0xa30
[  833.617700][   T29]  ? ext4_ext_find_goal+0xed/0x1d0
[  833.624948][   T29]  ext4_ext_map_blocks+0x1811/0x68c0
[  833.630297][   T29]  ? __might_sleep+0xe0/0xe0
[  833.637320][   T29]  ? ext4_ext_release+0x10/0x10
[  833.642225][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  833.650439][   T29]  ? ext4_es_lookup_extent+0x601/0x9f0
[  833.657279][   T29]  ext4_map_blocks+0x9db/0x1a90
[  833.662178][   T29]  ? ext4_issue_zeroout+0x250/0x250
[  833.671886][   T29]  ? rcu_is_watching+0x15/0xb0
[  833.678172][   T29]  ? ext4_inode_journal_mode+0x376/0x460
[  833.688256][   T29]  ext4_do_writepages+0x1463/0x3990
[  833.694344][   T29]  ? ext4_normal_submit_inode_data_buffers+0x240/0x240
[  833.701389][   T29]  ? rcu_read_lock_any_held+0xb4/0x140
[  833.709194][   T29]  ? __lock_acquire+0x1431/0x7eb0
[  833.714427][   T29]  ext4_writepages+0x1dd/0x350
[  833.719290][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  833.726873][   T29]  ? reacquire_held_locks+0x31f/0x5c0
[  833.732254][   T29]  ? writeback_sb_inodes+0x35e/0x1020
[  833.738013][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  833.747360][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  833.752308][   T29]  do_writepages+0x351/0x590
[  833.758874][   T29]  ? folio_clear_dirty_for_io+0xca0/0xca0
[  833.768037][   T29]  ? writeback_sb_inodes+0x4bd/0x1020
[  833.775709][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  833.780767][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  833.789965][   T29]  __writeback_single_inode+0x14e/0xee0
[  833.796007][   T29]  writeback_sb_inodes+0x813/0x1020
[  833.801668][   T29]  ? queue_io+0x530/0x530
[  833.808805][   T29]  __writeback_inodes_wb+0x114/0x240
[  833.814303][   T29]  wb_writeback+0x472/0xbe0
[  833.818935][   T29]  ? queue_io+0x321/0x530
[  833.826290][   T29]  ? percpu_ref_tryget+0x250/0x250
[  833.831412][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  833.837649][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  833.842716][   T29]  wb_workfn+0xad7/0xe60
[  833.847400][   T29]  ? inode_wait_for_writeback+0x230/0x230
[  833.859950][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  833.867255][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  833.872312][   T29]  ? read_lock_is_recursive+0x20/0x20
[  833.881014][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  833.890143][   T29]  ? process_scheduled_works+0x975/0x1600
[  833.899103][   T29]  ? process_scheduled_works+0x975/0x1600
[  833.905307][   T29]  process_scheduled_works+0xa60/0x1600
[  833.910906][   T29]  ? worker_attach_to_pool+0x370/0x370
[  833.919152][   T29]  ? assign_work+0x3cc/0x5d0
[  833.925223][   T29]  worker_thread+0xa5e/0xfe0
[  833.929866][   T29]  kthread+0x2fa/0x390
[  833.936658][   T29]  ? pr_cont_work+0x550/0x550
[  833.941352][   T29]  ? kthread_blkcg+0xd0/0xd0
[  833.946342][   T29]  ret_from_fork+0x48/0x80
[  833.950766][   T29]  ? kthread_blkcg+0xd0/0xd0
[  833.958017][   T29]  ret_from_fork_asm+0x11/0x20
[  833.964634][   T29]  </TASK>
[  833.967835][   T29] INFO: task jbd2/sda1-8:5119 blocked for more than 144 seconds.
[  833.980786][   T29]       Tainted: G S                 syzkaller #0
[  833.988524][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  833.998820][   T29] task:jbd2/sda1-8     state:D stack:25736 pid:5119  ppid:2      flags:0x00004000
[  834.014120][   T29] Call Trace:
[  834.017433][   T29]  <TASK>
[  834.020379][   T29]  __schedule+0x15ae/0x4700
[  834.027183][   T29]  ? asan.module_dtor+0x20/0x20
[  834.032054][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  834.037962][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  834.045989][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  834.051254][   T29]  schedule+0xbd/0x170
[  834.056236][   T29]  io_schedule+0x80/0xd0
[  834.060517][   T29]  bit_wait_io+0x11/0xd0
[  834.066838][   T29]  __wait_on_bit+0x9f/0x2c0
[  834.071353][   T29]  ? bit_wait+0xd0/0xd0
[  834.077912][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  834.087047][   T29]  ? bit_wait+0xd0/0xd0
[  834.091369][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  834.097062][   T29]  ? do_raw_write_lock+0x11e/0x260
[  834.102210][   T29]  ? bit_waitqueue+0x30/0x30
[  834.110290][   T29]  ? do_raw_read_unlock+0x3d/0x80
[  834.118452][   T29]  jbd2_journal_commit_transaction+0x2e90/0x5ad0
[  834.127719][   T29]  ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0
[  834.134715][   T29]  ? lock_chain_count+0x20/0x20
[  834.139582][   T29]  ? _raw_spin_unlock+0x40/0x40
[  834.144761][   T29]  ? __try_to_del_timer_sync+0x1c2/0x280
[  834.150501][   T29]  ? __timer_delete_sync+0x23d/0x2e0
[  834.158317][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  834.164241][   T29]  ? timer_delete_sync+0x20/0x20
[  834.169186][   T29]  ? do_raw_read_unlock+0x80/0x80
[  834.177220][   T29]  ? prepare_to_wait+0x1aa/0x200
[  834.182214][   T29]  kjournald2+0x40f/0x810
[  834.188528][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  834.198433][   T29]  ? wake_bit_function+0x200/0x200
[  834.203787][   T29]  ? _raw_spin_unlock+0x40/0x40
[  834.208689][   T29]  ? __kthread_parkme+0x71/0x1c0
[  834.214014][   T29]  ? __kthread_parkme+0x15b/0x1c0
[  834.219105][   T29]  kthread+0x2fa/0x390
[  834.229371][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  834.235011][   T29]  ? kthread_blkcg+0xd0/0xd0
[  834.239610][   T29]  ret_from_fork+0x48/0x80
[  834.246715][   T29]  ? kthread_blkcg+0xd0/0xd0
[  834.251375][   T29]  ret_from_fork_asm+0x11/0x20
[  834.256586][   T29]  </TASK>
[  834.259664][   T29] INFO: task syz-executor:5778 blocked for more than 144 seconds.
[  834.270229][   T29]       Tainted: G S                 syzkaller #0
[  834.277283][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  834.286101][   T29] task:syz-executor    state:D stack:21840 pid:5778  ppid:5777   flags:0x00004002
[  834.300424][   T29] Call Trace:
[  834.305696][   T29]  <TASK>
[  834.308687][   T29]  __schedule+0x15ae/0x4700
[  834.315933][   T29]  ? mark_lock+0x94/0x320
[  834.320272][   T29]  ? asan.module_dtor+0x20/0x20
[  834.327264][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  834.332327][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  834.344601][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  834.349876][   T29]  schedule+0xbd/0x170
[  834.355479][   T29]  io_schedule+0x80/0xd0
[  834.359761][   T29]  bit_wait_io+0x11/0xd0
[  834.365537][   T29]  __wait_on_bit+0x9f/0x2c0
[  834.370074][   T29]  ? bit_wait+0xd0/0xd0
[  834.375959][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  834.381471][   T29]  ? bit_wait+0xd0/0xd0
[  834.387290][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  834.392096][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  834.398654][   T29]  ? bit_waitqueue+0x30/0x30
[  834.408066][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  834.415967][   T29]  do_get_write_access+0x5c9/0xe00
[  834.421144][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  834.428686][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  834.436822][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  834.447326][   T29]  ? __might_sleep+0xe0/0xe0
[  834.451951][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  834.459870][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  834.466821][   T29]  ext4_dirty_inode+0xcb/0x110
[  834.471609][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  834.479127][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  834.485836][   T29]  file_update_time+0x187/0x1a0
[  834.490713][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  834.497340][   T29]  ? do_wp_page+0x4ce/0x34d0
[  834.501947][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  834.509226][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  834.519040][   T29]  do_page_mkwrite+0x153/0x3f0
[  834.525143][   T29]  do_wp_page+0xd4d/0x34d0
[  834.529610][   T29]  ? folio_put+0xd0/0xd0
[  834.536605][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  834.541653][   T29]  ? __rwlock_init+0x150/0x150
[  834.546701][   T29]  handle_mm_fault+0x1300/0x4a40
[  834.551654][   T29]  ? handle_mm_fault+0xe6/0x4a40
[  834.557231][   T29]  ? numa_migrate_prep+0x350/0x350
[  834.562489][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  834.574676][   T29]  do_user_addr_fault+0x736/0x12d0
[  834.579867][   T29]  exc_page_fault+0x64/0x100
[  834.586043][   T29]  ? clear_bhb_loop+0x40/0x90
[  834.590755][   T29]  asm_exc_page_fault+0x26/0x30
[  834.597105][   T29] RIP: 0033:0x7fb34b67dad6
[  834.601526][   T29] RSP: 002b:00007ffeb2975c50 EFLAGS: 00010202
[  834.610121][   T29] RAX: 00007fb349504000 RBX: 000055557363c100 RCX: 0000000000000002
[  834.619543][   T29] RDX: 0000000000000ba0 RSI: 000055557363fb88 RDI: 0000000000000004
[  834.631065][   T29] RBP: 00007ffeb2976150 R08: 000055557363fbd8 R09: 0000000000000093
[  834.641715][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffeb2975f90
[  834.657804][   T29] R13: 00007ffeb2975d80 R14: 585858582e7a7973 R15: 00007ffeb2975cd0
[  834.666145][   T29]  </TASK>
[  834.669260][   T29] INFO: task syz.4.4297:20028 blocked for more than 144 seconds.
[  834.677756][   T29]       Tainted: G S                 syzkaller #0
[  834.690227][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  834.699218][   T29] task:syz.4.4297      state:D stack:27048 pid:20028 ppid:18928  flags:0x00004004
[  834.712552][   T29] Call Trace:
[  834.716042][   T29]  <TASK>
[  834.718983][   T29]  __schedule+0x15ae/0x4700
[  834.727488][   T29]  ? mark_lock+0x94/0x320
[  834.731836][   T29]  ? asan.module_dtor+0x20/0x20
[  834.738685][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  834.747493][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  834.753613][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  834.758875][   T29]  schedule+0xbd/0x170
[  834.765780][   T29]  io_schedule+0x80/0xd0
[  834.770071][   T29]  bit_wait_io+0x11/0xd0
[  834.774667][   T29]  __wait_on_bit+0x9f/0x2c0
[  834.779218][   T29]  ? bit_wait+0xd0/0xd0
[  834.786377][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  834.791896][   T29]  ? bit_wait+0xd0/0xd0
[  834.796527][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  834.801303][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  834.813509][   T29]  ? bit_waitqueue+0x30/0x30
[  834.818236][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  834.826257][   T29]  do_get_write_access+0x5c9/0xe00
[  834.831394][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  834.837659][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  834.848262][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  834.856692][   T29]  ? __might_sleep+0xe0/0xe0
[  834.861346][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  834.869653][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  834.875436][   T29]  ext4_dirty_inode+0xcb/0x110
[  834.880220][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  834.890786][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  834.896327][   T29]  file_update_time+0x187/0x1a0
[  834.901213][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  834.909035][   T29]  ? filemap_fault+0x103c/0x1540
[  834.918279][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  834.926887][   T29]  ? pte_alloc_one+0x3b6/0x540
[  834.931771][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  834.938429][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  834.946244][   T29]  do_page_mkwrite+0x153/0x3f0
[  834.951048][   T29]  handle_mm_fault+0x1a26/0x4a40
[  834.957962][   T29]  ? handle_mm_fault+0xe6/0x4a40
[  834.967779][   T29]  ? numa_migrate_prep+0x350/0x350
[  834.973215][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  834.978546][   T29]  do_user_addr_fault+0x736/0x12d0
[  834.986374][   T29]  exc_page_fault+0x64/0x100
[  834.990984][   T29]  asm_exc_page_fault+0x26/0x30
[  834.996111][   T29] RIP: 0033:0x7fed8ba73c09
[  835.000528][   T29] RSP: 002b:00007fffc7111720 EFLAGS: 00010202
[  835.007168][   T29] RAX: 0000001b32524000 RBX: 0000000000000000 RCX: 00000000003ffde8
[  835.018716][   T29] RDX: 0000001b32523ffc RSI: 00000000003ffde8 RDI: 00007fed8c955700
[  835.030319][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fed8be12000
[  835.040926][   T29] R10: 00007fed8c955700 R11: 0000000000000000 R12: 0000000000000000
[  835.049253][   T29] R13: 000000000007ffff R14: ffffffff83c6aee7 R15: 00007fed8c955720
[  835.060747][   T29]  ? f2fs_build_node_manager+0x1df7/0x2ad0
[  835.068370][   T29]  </TASK>
[  835.071398][   T29] INFO: task syz.6.4305:20048 blocked for more than 145 seconds.
[  835.083004][   T29]       Tainted: G S                 syzkaller #0
[  835.089831][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  835.101423][   T29] task:syz.6.4305      state:D stack:27048 pid:20048 ppid:13473  flags:0x00004004
[  835.110888][   T29] Call Trace:
[  835.114632][   T29]  <TASK>
[  835.118105][   T29]  __schedule+0x15ae/0x4700
[  835.122632][   T29]  ? mark_lock+0x94/0x320
[  835.130058][   T29]  ? asan.module_dtor+0x20/0x20
[  835.138605][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  835.146451][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  835.152356][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  835.157858][   T29]  schedule+0xbd/0x170
[  835.161997][   T29]  io_schedule+0x80/0xd0
[  835.168910][   T29]  bit_wait_io+0x11/0xd0
[  835.175040][   T29]  __wait_on_bit+0x9f/0x2c0
[  835.179590][   T29]  ? bit_wait+0xd0/0xd0
[  835.188015][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  835.193683][   T29]  ? bit_wait+0xd0/0xd0
[  835.197849][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  835.202614][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  835.208189][   T29]  ? bit_waitqueue+0x30/0x30
[  835.212824][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  835.222030][   T29]  do_get_write_access+0x5c9/0xe00
[  835.227602][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  835.236300][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  835.242494][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  835.251903][   T29]  ? __might_sleep+0xe0/0xe0
[  835.259145][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  835.265033][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  835.270523][   T29]  ext4_dirty_inode+0xcb/0x110
[  835.275698][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  835.281529][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  835.291449][   T29]  file_update_time+0x187/0x1a0
[  835.297574][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  835.302616][   T29]  ? filemap_fault+0x103c/0x1540
[  835.310259][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  835.316143][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  835.325930][   T29]  do_page_mkwrite+0x153/0x3f0
[  835.330714][   T29]  handle_mm_fault+0x1a26/0x4a40
[  835.336187][   T29]  ? handle_mm_fault+0xe6/0x4a40
[  835.341160][   T29]  ? numa_migrate_prep+0x350/0x350
[  835.349032][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  835.354946][   T29]  do_user_addr_fault+0x736/0x12d0
[  835.360142][   T29]  exc_page_fault+0x64/0x100
[  835.371425][   T29]  asm_exc_page_fault+0x26/0x30
[  835.376560][   T29] RIP: 0033:0x7faae6073c09
[  835.380995][   T29] RSP: 002b:00007ffd6514ef20 EFLAGS: 00010202
[  835.389693][   T29] RAX: 0000001b2ff24000 RBX: 0000000000000000 RCX: 00000000003ffde8
[  835.399531][   T29] RDX: 0000001b2ff23ffc RSI: 00000000003ffde8 RDI: 00007faae6f55700
[  835.411730][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007faae6412000
[  835.419979][   T29] R10: 00007faae6f55700 R11: 0000000000000000 R12: 0000000000000000
[  835.431563][   T29] R13: 000000000000fe89 R14: ffffffff8132425e R15: 00007faae6f55720
[  835.439760][   T29]  ? fpregs_activate+0x8e/0x1b0
[  835.447454][   T29]  </TASK>
[  835.450513][   T29] INFO: task syz.2.4310:20059 blocked for more than 145 seconds.
[  835.458587][   T29]       Tainted: G S                 syzkaller #0
[  835.467549][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  835.479137][   T29] task:syz.2.4310      state:D stack:25384 pid:20059 ppid:8348   flags:0x00004004
[  835.491089][   T29] Call Trace:
[  835.494631][   T29]  <TASK>
[  835.497571][   T29]  __schedule+0x15ae/0x4700
[  835.502092][   T29]  ? mark_lock+0x94/0x320
[  835.511480][   T29]  ? asan.module_dtor+0x20/0x20
[  835.517591][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  835.522647][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  835.532154][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  835.537563][   T29]  schedule+0xbd/0x170
[  835.541662][   T29]  io_schedule+0x80/0xd0
[  835.548564][   T29]  bit_wait_io+0x11/0xd0
[  835.552817][   T29]  __wait_on_bit+0x9f/0x2c0
[  835.557948][   T29]  ? bit_wait+0xd0/0xd0
[  835.562185][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  835.570510][   T29]  ? bit_wait+0xd0/0xd0
[  835.574909][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  835.580017][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  835.585589][   T29]  ? bit_waitqueue+0x30/0x30
[  835.590223][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  835.602203][   T29]  do_get_write_access+0x5c9/0xe00
[  835.608090][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  835.618392][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  835.626152][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  835.636141][   T29]  ? __might_sleep+0xe0/0xe0
[  835.640785][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  835.646754][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  835.652258][   T29]  ext4_dirty_inode+0xcb/0x110
[  835.659984][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  835.666221][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  835.671262][   T29]  file_update_time+0x187/0x1a0
[  835.678741][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  835.689540][   T29]  ? filemap_fault+0x103c/0x1540
[  835.697186][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  835.706185][   T29]  ? pte_alloc_one+0x3b6/0x540
[  835.711005][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  835.720504][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  835.727303][   T29]  do_page_mkwrite+0x153/0x3f0
[  835.737197][   T29]  handle_mm_fault+0x1a26/0x4a40
[  835.742210][   T29]  ? handle_mm_fault+0xe6/0x4a40
[  835.747460][   T29]  ? numa_migrate_prep+0x350/0x350
[  835.752590][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  835.760566][   T29]  do_user_addr_fault+0x736/0x12d0
[  835.767239][   T29]  exc_page_fault+0x64/0x100
[  835.771869][   T29]  asm_exc_page_fault+0x26/0x30
[  835.779829][   T29] RIP: 0033:0x7f7381e73c09
[  835.784444][   T29] RSP: 002b:00007ffdce4a2970 EFLAGS: 00010202
[  835.790516][   T29] RAX: 0000001b2d224000 RBX: 0000000000000000 RCX: 00000000003ffde8
[  835.798823][   T29] RDX: 0000001b2d223ffc RSI: 00000000003ffde8 RDI: 00007f7382d55700
[  835.809375][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f7382212000
[  835.820430][   T29] R10: 00007f7382d55700 R11: 0000000000000000 R12: 0000000000000000
[  835.831041][   T29] R13: 0000000000000b38 R14: ffffffff813241a0 R15: 00007f7382d55720
[  835.841816][   T29]  ? fpregs_assert_state_consistent+0xb0/0xe0
[  835.852479][   T29]  </TASK>
[  835.855736][   T29] 
[  835.855736][   T29] Showing all locks held in the system:
[  835.866155][   T29] 6 locks held by kworker/u4:0/11:
[  835.871264][   T29]  #0: ffff888142655538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  835.885963][   T29]  #1: ffffc90000107d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  835.898732][   T29]  #2: ffff88814e0180e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  835.911896][   T29]  #3: ffff88814e01ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  835.922527][   T29]  #4: ffff88814e01c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  835.932577][   T29]  #5: ffff8880795f5288 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90
[  835.952849][   T29] 1 lock held by khungtaskd/29:
[  835.959683][   T29]  #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  835.972179][   T29] 3 locks held by syz-executor/5778:
[  835.977711][   T29]  #0: ffff88805935f3a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  835.990303][   T29]  #1: ffff88814e018510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  836.000466][   T29]  #2: ffff88814e01c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  836.013124][   T29] 2 locks held by getty/9635:
[  836.017809][   T29]  #0: ffff8880331020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  836.030027][   T29]  #1: ffffc9000356f2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  836.041317][   T29] 3 locks held by syz.4.4297/20028:
[  836.049129][   T29]  #0: ffff8880315ad720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  836.067884][   T29]  #1: ffff88814e018510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  836.077967][   T29]  #2: ffff88814e01c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  836.091413][   T29] 3 locks held by syz.6.4305/20048:
[  836.096875][   T29]  #0: ffff888018c69e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  836.109729][   T29]  #1: ffff88814e018510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  836.119675][   T29]  #2: ffff88814e01c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  836.129625][   T29] 3 locks held by syz.2.4310/20059:
[  836.137352][   T29]  #0: ffff888077f3b120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  836.148413][   T29]  #1: ffff88814e018510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  836.160948][   T29]  #2: ffff88814e01c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  836.179419][   T29] 
[  836.181767][   T29] =============================================
[  836.181767][   T29] 
[  836.190534][   T29] NMI backtrace for cpu 0
[  836.194878][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G S                 syzkaller #0
[  836.203572][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  836.213620][   T29] Call Trace:
[  836.216927][   T29]  <TASK>
[  836.219853][   T29]  dump_stack_lvl+0x18c/0x250
[  836.224544][   T29]  ? __wake_up_klogd+0xd9/0x100
[  836.229392][   T29]  ? show_regs_print_info+0x20/0x20
[  836.234599][   T29]  ? load_image+0x420/0x420
[  836.239104][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  836.244062][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  836.250213][   T29]  ? load_image+0x420/0x420
[  836.254722][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  836.260789][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  836.266768][   T29]  watchdog+0xf59/0xfa0
[  836.270953][   T29]  ? watchdog+0x1e1/0xfa0
[  836.275280][   T29]  kthread+0x2fa/0x390
[  836.279346][   T29]  ? hungtask_pm_notify+0x50/0x50
[  836.284367][   T29]  ? kthread_blkcg+0xd0/0xd0
[  836.288951][   T29]  ret_from_fork+0x48/0x80
[  836.293361][   T29]  ? kthread_blkcg+0xd0/0xd0
[  836.297947][   T29]  ret_from_fork_asm+0x11/0x20
[  836.302730][   T29]  </TASK>
[  836.305754][    C0] vkms_vblank_simulate: vblank timer overrun
[  836.323876][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  836.330776][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G S                 syzkaller #0
[  836.339442][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  836.349486][   T29] Call Trace:
[  836.352759][   T29]  <TASK>
[  836.355686][   T29]  dump_stack_lvl+0x18c/0x250
[  836.360376][   T29]  ? show_regs_print_info+0x20/0x20
[  836.365578][   T29]  ? load_image+0x420/0x420
[  836.370438][   T29]  panic+0x2ca/0x720
[  836.374346][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  836.378855][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  836.384408][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  836.389779][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  836.395933][   T29]  watchdog+0xf98/0xfa0
[  836.400084][   T29]  ? watchdog+0x1e1/0xfa0
[  836.404411][   T29]  kthread+0x2fa/0x390
[  836.408478][   T29]  ? hungtask_pm_notify+0x50/0x50
[  836.413496][   T29]  ? kthread_blkcg+0xd0/0xd0
[  836.418077][   T29]  ret_from_fork+0x48/0x80
[  836.422485][   T29]  ? kthread_blkcg+0xd0/0xd0
[  836.427066][   T29]  ret_from_fork_asm+0x11/0x20
[  836.431834][   T29]  </TASK>
[  836.434848][   T29] Kernel Offset: disabled
[  836.439163][   T29] Rebooting in 86400 seconds..