last executing test programs:

1m0.201351963s ago: executing program 1 (id=443):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x1, 0x5f52, &(0x7f000000ef80)="$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")
open(0x0, 0x145142, 0x0)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
unlink(&(0x7f00000000c0)='./file2\x00')
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40142, 0x2)

59.029771592s ago: executing program 1 (id=449):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000002900000039"], 0x18}, 0x8000)

58.681754331s ago: executing program 1 (id=454):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
syslog(0x2, 0xffffffffffffffff, 0x4b)

58.458487897s ago: executing program 1 (id=467):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x1000810, 0x0)

58.401817618s ago: executing program 1 (id=458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000000700)='\x00\x00\x00\x00', 0x4)

58.035032498s ago: executing program 1 (id=459):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0xc000000f})
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x2005, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0})

57.777109545s ago: executing program 32 (id=459):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0xc000000f})
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x2005, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0})

25.145761288s ago: executing program 2 (id=584):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

24.856398265s ago: executing program 2 (id=586):
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe", 0xfffffffffffffe73}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006d88785dd000000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x800}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20)

24.700786089s ago: executing program 2 (id=588):
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
timer_create(0x7, &(0x7f000049efa0)={0x0, 0x33, 0x4, @tid=r0}, &(0x7f0000044000)=<r1=>0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
timer_settime(r1, 0x1, &(0x7f0000001140), 0x0)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)

24.628849311s ago: executing program 2 (id=589):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000200)={[{@resuid}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x2f703f36}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, 0x0, 0x0)

24.066620125s ago: executing program 2 (id=592):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001)
write(r0, 0x0, 0x0)

23.462157721s ago: executing program 2 (id=598):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000200)='10 ', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='10', 0x2)

22.941719274s ago: executing program 33 (id=598):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000200)='10 ', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='10', 0x2)

5.786752252s ago: executing program 0 (id=709):
r0 = epoll_create1(0x80000)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000})

5.675078895s ago: executing program 0 (id=710):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

4.352214779s ago: executing program 4 (id=723):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x3, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000)
recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/105, 0x69}, 0x4}], 0x1, 0x12102, 0x0)

4.234086642s ago: executing program 4 (id=725):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0))

4.143338674s ago: executing program 4 (id=727):
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c09040000010000010009050102"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r1, 0x0, 0x0)

3.086043611s ago: executing program 5 (id=737):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})

3.011033233s ago: executing program 3 (id=738):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000000c0)="63eced8e66a0e76e70a3b646dc3f", 0x0, 0x7ffe, 0xf00, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.920134965s ago: executing program 3 (id=739):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@assoc={0x0, 0x117, 0x4, 0x6}], 0xf}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/89, 0x7ffff061}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2.826132017s ago: executing program 3 (id=740):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x880, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4442, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51)
fallocate(r0, 0x0, 0x9, 0x10001)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc000, 0x863, 0x0)

2.36129566s ago: executing program 5 (id=742):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)

2.360762959s ago: executing program 0 (id=752):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8410, &(0x7f00000006c0), 0x2, 0x24b, &(0x7f0000000840)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2)
pwrite64(r1, &(0x7f00000002c0)='y', 0x1, 0x10)
fallocate(r0, 0x10, 0x1, 0x2a9d)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xffffffe4, 0x0, 0x1000, 0x6})

2.108254576s ago: executing program 6 (id=744):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x80047441, &(0x7f0000000180))

2.094766256s ago: executing program 3 (id=755):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@prjquota}, {@nogrpid}, {@allocsize={'allocsize', 0x3d, [0x30, 0x37, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10)
copy_file_range(r0, 0x0, r1, &(0x7f0000000080)=0x8010000, 0x400000, 0x0)

1.511381661s ago: executing program 6 (id=745):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
write(r0, &(0x7f0000000200)="03dfffb889ba43e1c0aee0eb6adf88a65972471b2d4a0407a43034ad714dfe95042d6b840fbf14fee80d15443597e99973320275a8d9edb1ea947cba76ceb04396462b5459b7930bbd79e2ba724b8c8de5c69de362f337dbaf3d3dc5ee5756b6afb1ec13", 0x64)
ppoll(&(0x7f0000000040)=[{r1, 0x84}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000001c0)={0x4, 0x4, 0xe3, 0x2, 0x8, "dd81c57a12d3f46cf3e9dffa8a465f3359d2b2", 0x697f, 0xf})

1.510734411s ago: executing program 0 (id=757):
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

1.469654812s ago: executing program 5 (id=746):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x1004000, &(0x7f00000014c0), 0x0, 0x793, &(0x7f0000000c00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x179)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000"], 0x2c, 0x1)

1.291527436s ago: executing program 6 (id=747):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/208, 0xd0}], 0x1}, 0x6}], 0x1, 0x12000, 0x0)
sendmmsg$alg(r1, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)="98ff947690984ff9de569b3c9063e8a33ca29f1160395892e4093f987f6445bb98ec8dc9f6524b55eb19c490f1ac3616016453b41807e76918b41adadead66d632cf82655fb59dd955ee9fc48efcc3f8cfc65fd673df44d9fbb54ebde975294c4b1903cf84dbaa8d3896204c8414630b1b1632febb1919cd2b6383c1328f04e4a97d5cdaff0e9550a8072ba24d00dc38e4e4262b5eef3c020c0abc8550fdd4df1adc1f2b248d8729561216ce2d51798321d8d1ed9162f8cd2bc3402ae2736fbf7ec1a8", 0xc3}, {&(0x7f0000000440)="f979ddd119767d26e6", 0x9}, {&(0x7f0000000740)="127802ec", 0x4}], 0x3, 0x0, 0x0, 0x11}], 0x1, 0x880)

1.129676691s ago: executing program 6 (id=748):
unshare(0x2040400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5})

1.002624544s ago: executing program 0 (id=749):
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
setresuid(0xee01, 0x0, 0x0)
r0 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
prlimit64(r0, 0x0, 0x0, 0x0)

1.001905494s ago: executing program 4 (id=750):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0xfffffffffffffe5b}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4800)

950.077306ms ago: executing program 5 (id=751):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0)

741.574701ms ago: executing program 6 (id=753):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="10b6f8911192a200caf9038a7e0fafc5c440ef87aba6f62c2189ca69ad02d7486deda01687", 0x25}], 0x1}}], 0x1, 0x4004881)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b0006006500"], 0x28}}, 0x0)

708.198211ms ago: executing program 3 (id=754):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000040), 0x400000000000116, 0x200088d4)

612.513474ms ago: executing program 4 (id=756):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01802cbd7010040000e20400000006000100050000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

611.932364ms ago: executing program 5 (id=758):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x20000011}], 0x1, 0x40008063, 0x0)

297.7µs ago: executing program 0 (id=759):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x80047441, &(0x7f0000000180))

184.94µs ago: executing program 5 (id=760):
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$FUSE_ATTR(r1, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7fffffff, 0xfffffffc, 0x0, {0x3, 0xa, 0xfffffffffffffffb, 0x40, 0x6, 0x6, 0x757, 0x2, 0x6, 0x0, 0x0, 0xee00, 0x0, 0x8bfffffd, 0x223b8fb9}}}, 0x78)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1)

126.989µs ago: executing program 6 (id=761):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x8914, &(0x7f0000000040))
ioctl(r0, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001")
ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00')
connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
close(r0)

45.38µs ago: executing program 3 (id=762):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB='m'], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x1014}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendto$packet(r0, &(0x7f0000000080)="a084d380d3fc030000e50788031c", 0xe, 0x20004084, &(0x7f00000001c0)={0x11, 0x1c, r2, 0x1, 0xb, 0x6, @local}, 0x14)

0s ago: executing program 4 (id=763):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x9, 0x4f, "0d518e07009188b791e15b1b6f6f788c6b00", 0x9, 0x140220})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd)

kernel console output (not intermixed with test programs):

1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.708922][ T1301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.729929][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.773973][ T4392] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   71.883190][ T4285] Bluetooth: hci3: command 0x0419 tx timeout
[   71.883207][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[   71.889227][ T4285] Bluetooth: hci4: command 0x0419 tx timeout
[   71.896238][ T4283] Bluetooth: hci2: command 0x0419 tx timeout
[   71.907533][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[   72.176084][   T26] audit: type=1326 audit(1786109324.412:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.0.20" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf5ab9e0d9 code=0x0
[   72.600815][ T4424] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080
[   72.782311][ T4317] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   72.849008][ T4433] process 'syz.4.31' launched './file1' with NULL argv: empty string added
[   72.894224][ T4435] Illegal XDP return value 4294967274 on prog  (id 3) dev syz_tun, expect packet loss!
[   72.985157][ T4317] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00
[   73.019721][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.047377][ T4317] usb 3-1: Product: syz
[   73.064911][ T4317] usb 3-1: Manufacturer: syz
[   73.070215][ T4317] usb 3-1: SerialNumber: syz
[   73.438589][ T4451] loop0: detected capacity change from 0 to 4096
[   73.445117][ T4457] loop4: detected capacity change from 0 to 128
[   73.464144][ T4457] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   73.515717][ T4451] =======================================================
[   73.515717][ T4451] WARNING: The mand mount option has been deprecated and
[   73.515717][ T4451]          and is ignored by this kernel. Remove the mand
[   73.515717][ T4451]          option from the mount to silence this warning.
[   73.515717][ T4451] =======================================================
[   73.615315][ T4451] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   73.702266][   T26] audit: type=1800 audit(1786109325.932:3): pid=4451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.38" name="file1" dev="loop0" ino=30 res=0 errno=0
[   74.365720][ T4317] usb 3-1: USB disconnect, device number 2
[   74.676045][ T4488] udevd[4488]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   75.103178][ T4507] loop0: detected capacity change from 0 to 512
[   75.170013][ T4507] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.61: Unimplemented hash flags: 0x0001
[   75.210504][ T4511] loop4: detected capacity change from 0 to 1024
[   75.217146][ T4507] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.61: Corrupt directory, running e2fsck is recommended
[   75.262390][ T4507] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   75.271002][ T4507] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.61: corrupted in-inode xattr
[   75.285281][ T4507] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.61: couldn't read orphan inode 15 (err -117)
[   75.287058][ T4511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   75.311684][ T4507] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   75.356091][ T4511] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz.4.62: path /13/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[   75.391782][ T4507] EXT4-fs (loop0): shut down requested (2)
[   75.412866][ T4507] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.61: directory missing '.'
[   75.436599][ T4277] EXT4-fs (loop4): unmounting filesystem.
[   75.502582][ T4269] EXT4-fs (loop0): unmounting filesystem.
[   75.682073][ T4521] loop1: detected capacity change from 0 to 1024
[   75.706580][ T4519] loop0: detected capacity change from 0 to 256
[   75.783955][ T4521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   75.820474][ T4521] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.997328][ T4531] netlink: 132 bytes leftover after parsing attributes in process `syz.3.69'.
[   76.033777][ T4536] loop0: detected capacity change from 0 to 128
[   76.064824][   T33] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1)
[   76.140940][   T33] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   76.185960][   T33] EXT4-fs (loop1): This should not happen!! Data will be lost
[   76.185960][   T33] 
[   76.231622][ T4270] EXT4-fs (loop1): unmounting filesystem.
[   76.623574][ T4553] loop3: detected capacity change from 0 to 512
[   77.075767][ T4553] EXT4-fs (loop3): Test dummy encryption mode enabled
[   77.094651][ T4553] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   77.126556][ T4553] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   77.146592][ T4553] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   77.159278][ T4553] EXT4-fs (loop3): orphan cleanup on readonly fs
[   77.172335][ T4553] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.76: corrupted xattr entries
[   77.192463][ T4553] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   77.271154][ T4553] EXT4-fs (loop3): 1 orphan inode deleted
[   77.319781][ T4553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   77.332105][ T4581] netlink: 'syz.1.86': attribute type 3 has an invalid length.
[   77.530637][ T4272] EXT4-fs (loop3): unmounting filesystem.
[   77.741072][  T128] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   77.922518][  T128] usb 5-1: Using ep0 maxpacket: 32
[   77.937582][  T128] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   77.962465][  T128] usb 5-1: config 0 interface 0 has no altsetting 0
[   77.969486][  T128] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[   77.979131][  T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.994271][  T128] usb 5-1: config 0 descriptor??
[   78.186979][ T4612] loop2: detected capacity change from 0 to 1024
[   78.587642][  T128] usbhid 5-1:0.0: can't add hid device: -71
[   78.596800][  T128] usbhid: probe of 5-1:0.0 failed with error -71
[   78.617878][  T128] usb 5-1: USB disconnect, device number 2
[   78.924410][ T4617] loop0: detected capacity change from 0 to 32768
[   78.993152][ T4617] XFS (loop0): Mounting V5 Filesystem
[   79.024994][ T4641] loop3: detected capacity change from 0 to 512
[   79.091277][ T4641] EXT4-fs: Ignoring removed i_version option
[   79.117353][ T4641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.197690][ T4641] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.109: invalid indirect mapped block 4294967295 (level 1)
[   79.202401][ T4617] XFS (loop0): Ending clean mount
[   79.289246][ T4617] XFS (loop0): Quotacheck needed: Please wait.
[   79.291411][ T4641] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.109: invalid indirect mapped block 4294967295 (level 1)
[   79.331117][ T4652] loop1: detected capacity change from 0 to 1024
[   79.335927][ T4641] EXT4-fs (loop3): 2 truncates cleaned up
[   79.350923][ T4641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   79.366546][ T4617] XFS (loop0): Quotacheck: Done.
[   79.415010][ T4652] nfs: Unknown parameter 'ac�����G���+�YE�<!E�xJ'
[   79.584656][ T4272] EXT4-fs (loop3): unmounting filesystem.
[   79.717649][ T4269] XFS (loop0): Unmounting Filesystem
[   79.835855][ T4661] syz.3.114 uses obsolete (PF_INET,SOCK_PACKET)
[   79.962464][  T128] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   80.128224][ T4668] loop3: detected capacity change from 0 to 128
[   80.162297][  T128] usb 5-1: Using ep0 maxpacket: 16
[   80.165956][ T4668] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   80.169100][  T128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   80.236291][  T128] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   80.257180][ T4673] gadgetfs: bound to dummy_udc driver
[   80.275507][  T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.282149][ T4668] hpfs: filesystem error: improperly stopped
[   80.290497][ T4668] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   80.323119][  T128] usb 5-1: config 0 descriptor??
[   80.368970][ T4668] hpfs: You really don't want any checks? You are crazy...
[   80.390025][ T4668] hpfs: Code page index out of array
[   80.451370][ T4668] hpfs: code page support is disabled
[   80.461117][ T4668] hpfs: hpfs_map_4sectors(): unaligned read
[   80.482074][ T4668] hpfs: hpfs_map_4sectors(): unaligned read
[   80.501547][ T4668] hpfs: filesystem error: unable to find root dir
[   80.623081][ T4655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.631860][ T4655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.663381][ T4668] hpfs: hpfs_map_4sectors(): unaligned read
[   80.676982][ T4285] Bluetooth: hci4: Unknown advertising packet type: 0x2000
[   80.677033][ T4285] Bluetooth: hci4: Malformed LE Event: 0x0d
[   80.704104][ T4688] loop1: detected capacity change from 0 to 128
[   80.711907][ T4688] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   80.742252][ T4319] usb 5-1: USB disconnect, device number 3
[   80.890696][ T4693] netlink: 1355 bytes leftover after parsing attributes in process `syz.0.128'.
[   81.008771][    T9] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   81.059014][ T4700] loop2: detected capacity change from 0 to 164
[   81.174714][ T4703] device pim6reg1 entered promiscuous mode
[   81.407317][   T14] cfg80211: failed to load regulatory.db
[   81.646434][ T4722] loop2: detected capacity change from 0 to 128
[   81.712645][ T4722] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   81.794188][ T4722] hpfs: filesystem error: improperly stopped
[   81.800227][ T4722] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   81.902302][ T4722] hpfs: You really don't want any checks? You are crazy...
[   81.909776][ T4722] hpfs: Code page index out of array
[   81.944511][ T4722] hpfs: code page support is disabled
[   81.978779][ T4722] hpfs: hpfs_map_4sectors(): unaligned read
[   81.994867][ T4722] hpfs: hpfs_map_4sectors(): unaligned read
[   82.024036][ T4722] hpfs: filesystem error: unable to find root dir
[   82.426484][ T4719] loop3: detected capacity change from 0 to 32768
[   82.577755][ T4719] XFS (loop3): Mounting V5 Filesystem
[   82.742308][  T128] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   82.760815][ T4719] XFS (loop3): Ending clean mount
[   82.819654][ T4719] XFS (loop3): Quotacheck needed: Please wait.
[   82.887371][ T4719] XFS (loop3): Quotacheck: Done.
[   82.932432][  T128] usb 2-1: Using ep0 maxpacket: 32
[   82.939976][  T128] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[   82.979467][  T128] usb 2-1: config 0 has no interface number 0
[   83.010247][  T128] usb 2-1: config 0 interface 12 has no altsetting 0
[   83.050808][  T128] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[   83.087508][  T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.115557][  T128] usb 2-1: Product: syz
[   83.120494][  T128] usb 2-1: Manufacturer: syz
[   83.125616][  T128] usb 2-1: SerialNumber: syz
[   83.135690][  T128] usb 2-1: config 0 descriptor??
[   83.183376][ T4272] XFS (loop3): Unmounting Filesystem
[   83.236701][ T4746] loop4: detected capacity change from 0 to 32768
[   83.414757][ T4746] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   83.590846][ T4746] syz.4.146 (4746) used greatest stack depth: 18688 bytes left
[   83.748888][ T4277] ocfs2: Unmounting device (7,4) on (node local)
[   83.780181][ T4785] loop2: detected capacity change from 0 to 2048
[   83.919549][ T4789] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.091641][ T4785] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[   84.138173][ T4785] Remounting filesystem read-only
[   84.263158][ T4271] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[   84.364782][  T128] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[   84.382847][  T128] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[   84.411846][  T128] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[   84.445221][  T128] f81534: probe of 2-1:0.12 failed with error -71
[   84.495533][  T128] usb 2-1: USB disconnect, device number 2
[   85.200921][ T4838] loop4: detected capacity change from 0 to 128
[   85.493267][ T4845] loop4: detected capacity change from 0 to 2048
[   85.580836][ T4845] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.004008][ T4864] input: syz0 as /devices/virtual/input/input5
[   86.140030][ T4871] loop2: detected capacity change from 0 to 128
[   86.213835][ T4871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   86.252472][ T4871] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.334052][ T4874] loop0: detected capacity change from 0 to 8192
[   86.369310][ T4874] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   86.390712][ T4874] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   86.400988][ T4874] REISERFS (device loop0): using ordered data mode
[   86.407863][ T4874] reiserfs: using flush barriers
[   86.415082][ T4874] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   86.432052][ T4874] REISERFS (device loop0): checking transaction log (loop0)
[   86.503047][ T4883] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   86.513446][ T4883] device gretap1 entered promiscuous mode
[   86.559015][ T4874] REISERFS (device loop0): Using tea hash to sort names
[   86.570103][ T4271] EXT4-fs (loop2): unmounting filesystem.
[   86.608021][ T4874] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   86.678338][ T4886] loop4: detected capacity change from 0 to 512
[   86.736830][ T4886] FAT-fs (loop4): Directory bread(block 199916) failed
[   86.779657][ T4886] FAT-fs (loop4): Directory bread(block 199917) failed
[   86.802314][ T4886] FAT-fs (loop4): Directory bread(block 199918) failed
[   86.823026][ T4886] FAT-fs (loop4): Directory bread(block 199919) failed
[   86.829276][ T4891] loop2: detected capacity change from 0 to 1024
[   86.865557][ T4891] EXT4-fs: Ignoring removed orlov option
[   86.900803][ T4886] FAT-fs (loop4): Directory bread(block 199920) failed
[   86.975074][ T4891] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c118, mo2=0002]
[   86.980619][ T4886] FAT-fs (loop4): Directory bread(block 199921) failed
[   86.990261][ T4886] FAT-fs (loop4): Directory bread(block 199922) failed
[   86.998429][ T4886] FAT-fs (loop4): Directory bread(block 199923) failed
[   87.051814][ T4891] System zones: 0-1, 3-12
[   87.057570][ T4891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   87.329016][ T4271] EXT4-fs (loop2): unmounting filesystem.
[   87.508164][ T4909] netlink: 27 bytes leftover after parsing attributes in process `syz.0.190'.
[   87.546213][ T4911] loop2: detected capacity change from 0 to 512
[   87.579794][ T4911] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   87.622355][ T4911] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   87.655016][ T4911] EXT4-fs (loop2): 1 truncate cleaned up
[   87.671919][ T4911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   87.813796][ T4271] EXT4-fs (loop2): unmounting filesystem.
[   88.056375][ T4931] netlink: 52 bytes leftover after parsing attributes in process `syz.2.204'.
[   88.075854][ T4931] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.083421][ T4931] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.560428][ T4952] input: syz1 as /devices/virtual/input/input6
[   88.790655][ T4958] loop2: detected capacity change from 0 to 2048
[   88.846319][ T4958] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   88.916908][ T4958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.584994][ T4992] loop0: detected capacity change from 0 to 128
[   89.637663][ T4992] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   89.793275][ T4992] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   89.814087][ T4992] ext2 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.889132][ T4269] EXT4-fs (loop0): unmounting filesystem.
[   90.161977][ T5018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.240'.
[   90.192936][ T5018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.240'.
[   90.301465][ T5020] loop3: detected capacity change from 0 to 512
[   90.340431][ T5020] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   90.410267][ T5020] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.242: bad orphan inode 131083
[   90.447830][ T5020] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   90.545244][ T5020] EXT4-fs (loop3): shut down requested (2)
[   90.573578][ T5020] syz.3.242 (pid 5020) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   90.611116][ T4272] EXT4-fs (loop3): unmounting filesystem.
[   90.686554][   T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   90.762401][ T4364] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   90.896327][   T14] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[   90.921355][ T5034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.922767][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.960093][   T14] usb 5-1: Product: syz
[   90.970207][   T14] usb 5-1: Manufacturer: syz
[   90.976468][ T4364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.992299][   T14] usb 5-1: SerialNumber: syz
[   90.997060][ T4364] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   91.016099][   T14] usb 5-1: config 0 descriptor??
[   91.043951][   T14] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 004
[   91.054569][ T4364] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   91.073476][ T4364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.101810][ T4364] usb 1-1: Product: syz
[   91.106734][ T4364] usb 1-1: Manufacturer: syz
[   91.111368][ T4364] usb 1-1: SerialNumber: syz
[   91.138299][ T5046] loop2: detected capacity change from 0 to 4096
[   91.167511][ T5046] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[   91.554554][ T5056] loop3: detected capacity change from 0 to 128
[   91.608692][ T5056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   91.659366][ T5056] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   91.693415][ T4315] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   91.700333][   T14] i2c i2c-1: failure reading functionality
[   91.752108][   T14] i2c i2c-1: connected i2c-tiny-usb device
[   91.789849][   T14] usb 5-1: USB disconnect, device number 4
[   91.828987][ T4272] EXT4-fs (loop3): unmounting filesystem.
[   91.882288][ T4315] usb 2-1: Using ep0 maxpacket: 32
[   91.889755][ T4315] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[   91.910589][ T4315] usb 2-1: config 0 has no interface number 0
[   91.921508][ T4315] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   91.937391][ T4315] usb 2-1: config 0 interface 85 has no altsetting 0
[   91.947769][ T4315] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   91.960623][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.969739][ T4315] usb 2-1: Product: syz
[   91.978018][ T4315] usb 2-1: Manufacturer: syz
[   91.983407][ T4315] usb 2-1: SerialNumber: syz
[   91.997411][ T4315] usb 2-1: config 0 descriptor??
[   92.212014][ T4364] cdc_ncm 1-1:1.0: bind() failure
[   92.225474][ T4364] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   92.252764][ T4364] cdc_ncm 1-1:1.1: bind() failure
[   92.456867][   T27] usb 1-1: USB disconnect, device number 2
[   92.624943][ T4315] appletouch 2-1:0.85: Geyser mode initialized.
[   92.645798][ T4315] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input7
[   92.864164][ T4315] usb 2-1: USB disconnect, device number 3
[   92.897623][ T4315] appletouch 2-1:0.85: input: appletouch disconnected
[   93.060848][ T5092] loop0: detected capacity change from 0 to 2048
[   93.074662][ T5087] loop4: detected capacity change from 0 to 40427
[   93.091889][ T5092] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   93.117765][ T5087] F2FS-fs (loop4): build fault injection attr: rate: 174, type: 0x3ffff
[   93.161733][ T5092] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   93.231067][ T5092] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   93.271391][ T5092] UDF-fs: Scanning with blocksize 512 failed
[   93.317041][ T5092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.474618][   T26] audit: type=1800 audit(1786109345.712:4): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.272" name="file1" dev="loop0" ino=838 res=0 errno=0
[   93.662737][ T5103] overlayfs: failed to decode file handle (len=8, type=0, flags=0, err=-22)
[   93.703439][ T4364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   93.761532][ T4364] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   93.882474][ T5109] loop4: detected capacity change from 0 to 512
[   93.944878][ T5109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   93.985862][ T5109] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.186349][ T5109] capability: warning: `syz.4.281' uses deprecated v2 capabilities in a way that may be insecure
[   94.332129][ T4277] EXT4-fs (loop4): unmounting filesystem.
[   94.931021][   T26] audit: type=1326 audit(1786109347.162:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.4.293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9797d9e0d9 code=0x0
[   95.006608][ T5149] loop3: detected capacity change from 0 to 128
[   95.031380][ T5149] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   95.082427][ T4364] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.091662][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'.
[   95.129257][ T5153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'.
[   95.156655][ T5153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'.
[   95.195988][ T5153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'.
[   95.241991][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'.
[   95.268435][ T5153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'.
[   95.282378][ T4364] usb 2-1: Using ep0 maxpacket: 8
[   95.298757][ T4364] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[   95.307127][ T5153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'.
[   95.331625][ T4364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.337793][ T5153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'.
[   95.349995][ T4364] usb 2-1: Product: syz
[   95.360096][ T4364] usb 2-1: Manufacturer: syz
[   95.369438][ T5162] loop3: detected capacity change from 0 to 256
[   95.382290][ T4364] usb 2-1: SerialNumber: syz
[   95.400713][ T4364] usb 2-1: config 0 descriptor??
[   95.440704][ T5162] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   95.444379][ T4364] gspca_main: sonixj-2.14.0 probing 0c45:613e
[   95.559574][ T5162] syz.3.300: attempt to access beyond end of device
[   95.559574][ T5162] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[   95.601777][ T5162] syz.3.300: attempt to access beyond end of device
[   95.601777][ T5162] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   95.644973][   T26] audit: type=1800 audit(1786109347.882:6): pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.300" name="file1" dev="loop3" ino=1048597 res=0 errno=0
[   95.666308][ T5162] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[   95.699815][ T5162] exFAT-fs (loop3): Filesystem has been set read-only
[   95.731678][ T5168] exFAT-fs (loop3): hint_cluster is invalid (1)
[   95.766027][ T5168] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   95.799637][ T5168] exFAT-fs (loop3): error, failed to bmap (inode : ffff8880552c87e0 iblock : 9, err : -5)
[   95.845241][ T5168] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[   95.874186][ T5168] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[   95.891558][ T5161] loop2: detected capacity change from 0 to 32768
[   95.968972][ T5161] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   96.060795][ T5161] (syz.2.299,5161,0):ocfs2_rename:1282 ERROR: status = -2
[   96.069076][ T5161] (syz.2.299,5161,0):ocfs2_rename:1687 ERROR: status = -2
[   96.172284][   T26] audit: type=1326 audit(1786109348.402:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.3.305" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc87739e0d9 code=0x0
[   96.765194][ T5177] loop4: detected capacity change from 0 to 131072
[   96.784094][ T5177] F2FS-fs (loop4): invalid crc value
[   96.790980][ T4271] ocfs2: Unmounting device (7,2) on (node local)
[   96.851842][ T5177] F2FS-fs (loop4): Found nat_bits in checkpoint
[   96.897362][ T5177] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   96.948433][ T5177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   97.000440][ T4364] gspca_sonixj: reg_w1 err -71
[   97.062327][ T4364] sonixj: probe of 2-1:0.0 failed with error -71
[   97.081892][ T4364] usb 2-1: USB disconnect, device number 4
[   97.366376][ T5200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.314'.
[   98.341365][ T5226] loop2: detected capacity change from 0 to 1024
[   98.702040][ T5238] loop3: detected capacity change from 0 to 2048
[   98.898135][ T5238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   98.958991][ T4272] EXT4-fs (loop3): unmounting filesystem.
[   99.387603][ T5262] device syz_tun entered promiscuous mode
[   99.396374][ T5265] loop3: detected capacity change from 0 to 512
[   99.428536][ T5265] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.440848][ T5262] device syz_tun left promiscuous mode
[   99.471094][ T5265] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   99.545793][ T5265] EXT4-fs (loop3): 1 truncate cleaned up
[   99.552649][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   99.639154][ T5235] loop1: detected capacity change from 0 to 40427
[   99.646033][   T26] audit: type=1326 audit(1786109351.872:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.3.339" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc87739e0d9 code=0x0
[   99.676845][ T5235] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff
[   99.712299][ T5235] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4
[   99.724462][ T5235] F2FS-fs (loop1): invalid crc value
[   99.764440][ T5235] F2FS-fs (loop1): Found nat_bits in checkpoint
[   99.822439][ T4315] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   99.865775][ T5235] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00
[   99.971119][ T5235] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  100.022375][ T4315] usb 3-1: Using ep0 maxpacket: 8
[  100.043820][ T4315] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  100.046359][ T5235] F2FS-fs (loop1) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20
[  100.066636][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.080433][ T4315] usb 3-1: Product: syz
[  100.092286][ T4315] usb 3-1: Manufacturer: syz
[  100.101938][ T4315] usb 3-1: SerialNumber: syz
[  100.166826][ T5235] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x634/0x810
[  100.279790][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  100.292059][ T4270] syz-executor: attempt to access beyond end of device
[  100.292059][ T4270] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  100.440831][ T5295] loop3: detected capacity change from 0 to 512
[  100.477732][ T5295] ext4: Unknown parameter 'fscontext'
[  100.530957][ T5295] capability: warning: `syz.3.348' uses 32-bit capabilities (legacy support in use)
[  100.623940][ T5289] loop4: detected capacity change from 0 to 32768
[  100.742133][ T5289] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  100.742133][ T5289] 
[  100.755304][ T4315] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  100.764886][ T4315] usb 3-1: clock source 0 is not valid, cannot use
[  100.774437][ T4315] usb 3-1: 1:1: cannot get freq (v2/v3): err -32
[  100.780855][ T5289] ERROR: (device loop4): remounting filesystem as read-only
[  100.811130][ T5289] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  100.811130][ T5289] 
[  100.819189][ T5297] device gretap0 entered promiscuous mode
[  100.849396][ T5299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.350'.
[  100.994172][ T4315] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  101.010891][ T4315] usb 3-1: clock source 0 is not valid, cannot use
[  101.038069][ T4315] usb 3-1: 2:1: cannot get freq (v2/v3): err -71
[  101.062526][ T4315] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  101.168387][ T4315] usb 3-1: USB disconnect, device number 4
[  101.252372][    T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  101.453857][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.475102][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.499408][    T7] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  101.518788][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.547672][    T7] usb 2-1: config 0 descriptor??
[  101.647114][ T5310] loop4: detected capacity change from 0 to 32768
[  101.708748][ T5310] JBD2: Ignoring recovery information on journal
[  101.755347][ T5312] loop0: detected capacity change from 0 to 32768
[  101.778138][ T5312] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.355 (5312)
[  101.829167][ T5312] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  101.839911][ T5312] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  101.850060][ T5312] BTRFS info (device loop0): using free space tree
[  101.858640][ T5310] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  101.874966][   T11] (kworker/u4:1,11,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  101.925613][   T11] (kworker/u4:1,11,0):ocfs2_read_locked_inode:554 ERROR: status = -12
[  101.942645][   T11] (kworker/u4:1,11,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0
[  102.088920][ T5312] BTRFS info (device loop0): enabling ssd optimizations
[  102.155297][ T5310] (syz.4.354,5310,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0
[  102.178840][ T5310] (syz.4.354,5310,0):__ocfs2_delete_entry:1162 ERROR: status = -5
[  102.188463][ T5310] (syz.4.354,5310,0):ocfs2_orphan_del:2386 ERROR: status = -5
[  102.198496][ T5310] (syz.4.354,5310,0):ocfs2_orphan_del:2401 ERROR: status = -5
[  102.206431][ T5310] (syz.4.354,5310,0):ocfs2_del_inode_from_orphan:2734 ERROR: status = -5
[  102.215396][ T5310] (syz.4.354,5310,0):ocfs2_dio_end_io_write:2418 ERROR: status = -5
[  102.378732][ T4277] ocfs2: Unmounting device (7,4) on (node local)
[  102.614497][    T7] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input8
[  102.730418][    T7] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input9
[  102.765167][ T4269] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  102.770232][    T7] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input10
[  102.860234][    T7] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0003/input/input11
[  102.898600][ T5357] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  102.919774][ T5357] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  103.054752][    T7] uclogic 0003:256C:006D.0003: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  103.096843][ T5368] loop2: detected capacity change from 0 to 1024
[  103.116679][ T5368] EXT4-fs: Ignoring removed bh option
[  103.181363][    T7] usb 2-1: USB disconnect, device number 5
[  103.190143][ T5368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  103.350415][ T5357] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  103.383392][ T5357] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  103.396964][ T4318] thunderbolt 0000:00:01.0: error -EINVAL: cannot obtain PCI resources, aborting
[  103.402538][ T5357] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  103.447074][ T5379] thunderbolt: probe of 0000:00:01.0 failed with error -22
[  103.524789][ T5357] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  103.556915][ T5377] fido_id[5377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  103.574161][ T5357] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  103.580852][ T5357] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  103.662908][ T5357] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  103.709959][ T5357] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  103.737606][ T5357] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  103.774079][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  103.794099][ T5389] binder: 5388:5389 ioctl c018620c 200000000200 returned -22
[  103.797015][ T5357] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  103.867275][ T5357] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  103.874032][ T5389] loop1: detected capacity change from 0 to 1024
[  103.882785][ T5357] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  103.910912][ T5389] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  103.914468][ T5357] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  103.933185][ T5393] loop8: detected capacity change from 0 to 8
[  103.947288][ T5389] jbd2_journal_init_inode: Cannot locate journal superblock
[  103.967697][ T5393] Dev loop8: unable to read RDB block 8
[  103.973599][ T5389] EXT4-fs (loop1): Could not load journal inode
[  103.980277][ T5308] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop0 scanned by udevd (5308)
[  104.000581][ T5393]  loop8: unable to read partition table
[  104.010738][ T5393] loop8: partition table beyond EOD, truncated
[  104.048489][ T5393] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  104.061981][ T5375] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  104.452682][ T5404] netlink: 'syz.0.375': attribute type 1 has an invalid length.
[  104.580797][ T5404] device bond1 entered promiscuous mode
[  104.587037][ T5404] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.726555][ T5409] bond1: (slave veth3): making interface the new active one
[  104.750939][ T5409] device veth3 entered promiscuous mode
[  104.769628][ T5409] bond1: (slave veth3): Enslaving as an active interface with an up link
[  104.805056][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  104.922362][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout
[  105.148377][ T5435] loop4: detected capacity change from 0 to 256
[  105.402706][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout
[  105.464773][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  105.494794][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  105.546218][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  105.572261][ T5367] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  105.615337][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  105.642430][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout
[  105.659002][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  105.724444][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout
[  105.738321][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  105.766715][ T5367] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01
[  105.772314][ T5457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'.
[  105.777561][ T5367] usb 1-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1
[  105.809062][ T5367] usb 1-1: Product: syz
[  105.818231][ T5367] usb 1-1: Manufacturer: syz
[  105.828230][ T5367] usb 1-1: SerialNumber: syz
[  105.846344][ T5367] em28xx 1-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0)
[  105.848613][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  105.874475][ T5367] em28xx 1-1:1.0: DVB interface 0 found: bulk
[  105.882407][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout
[  105.905445][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  105.926755][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  106.453325][ T5367] em28xx 1-1:1.0: chip ID is em2840
[  106.892347][ T5364] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  107.007968][ T4285] Bluetooth: hci1: command 0x0406 tx timeout
[  107.092372][ T5364] usb 2-1: Using ep0 maxpacket: 32
[  107.099919][ T5364] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  107.115138][ T5364] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  107.142611][ T5364] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  107.159522][ T5364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  107.185970][ T5364] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  107.196089][ T5364] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  107.209881][ T5364] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  107.220876][ T5364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.258556][ T5364] usb 2-1: config 0 descriptor??
[  107.396738][ T5500] loop3: detected capacity change from 0 to 40427
[  107.427594][ T5500] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff
[  107.456481][ T5500] F2FS-fs (loop3): invalid crc value
[  107.482836][ T4285] Bluetooth: hci3: command 0x0406 tx timeout
[  107.483250][ T5500] F2FS-fs (loop3): Found nat_bits in checkpoint
[  107.503691][ T5364] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  107.594381][ T5500] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  107.722650][ T4285] Bluetooth: hci0: command 0x0406 tx timeout
[  107.803594][ T4285] Bluetooth: hci2: command 0x0406 tx timeout
[  107.828088][ T5367] em28xx 1-1:1.0: reading from i2c device at 0xa0 failed (error=-5)
[  107.845198][ T5367] em28xx 1-1:1.0: board has no eeprom
[  107.922265][ T5367] em28xx 1-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44)
[  107.948393][ T5367] em28xx 1-1:1.0: dvb set to bulk mode.
[  107.962324][ T4285] Bluetooth: hci4: command 0x0406 tx timeout
[  107.980014][ T5367] usb 1-1: USB disconnect, device number 3
[  107.987105][ T5367] em28xx 1-1:1.0: Disconnecting em28xx
[  107.996407][ T5365] em28xx 1-1:1.0: Binding DVB extension
[  108.005043][ T5365] zl10353_read_register: readreg error (reg=127, ret==-19)
[  108.031364][ T5365] em28xx 1-1:1.0: frontend initialization failed
[  108.038767][ T5365] em28xx 1-1:1.0: Remote control support is not available for this card.
[  108.092364][ T5367] em28xx 1-1:1.0: Closing input extension
[  108.125204][ T5367] em28xx 1-1:1.0: Freeing device
[  108.237637][ T4364] usb 2-1: USB disconnect, device number 6
[  108.269502][ T4364] usblp0: removed
[  108.412263][ T5365] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  108.606030][ T5365] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  108.632238][ T5365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.656267][ T5365] usb 5-1: config 0 descriptor??
[  108.673389][ T5365] cp210x 5-1:0.0: cp210x converter detected
[  109.079257][ T5365] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  109.101276][ T5365] usb 5-1: cp210x converter now attached to ttyUSB0
[  109.301824][ T5367] usb 5-1: USB disconnect, device number 5
[  109.319395][ T5367] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  109.321665][ T5554] loop3: detected capacity change from 0 to 4096
[  109.370229][ T5367] cp210x 5-1:0.0: device disconnected
[  109.400812][ T5554] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  109.476500][   T26] audit: type=1800 audit(1786109361.712:9): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.428" name="file1" dev="loop3" ino=30 res=0 errno=0
[  109.896049][ T5574] gadgetfs: bound to dummy_udc driver
[  110.181702][ T5587] loop1: detected capacity change from 0 to 128
[  110.206026][ T5587] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  110.422413][ T5367] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  110.612386][ T5367] usb 4-1: Using ep0 maxpacket: 16
[  110.633939][ T5367] usb 4-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config
[  110.654676][ T5367] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  110.676960][ T5367] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.702394][ T5367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.720626][ T5367] usb 4-1: Product: syz
[  110.730738][ T5367] usb 4-1: Manufacturer: syz
[  110.740852][ T5367] usb 4-1: SerialNumber: syz
[  110.807282][ T5594] loop1: detected capacity change from 0 to 32768
[  110.808506][ T5596] loop4: detected capacity change from 0 to 32768
[  110.839592][ T5596] XFS (loop4): Mounting V5 Filesystem
[  110.871906][ T5596] XFS (loop4): Ending clean mount
[  110.973672][ T5367] usb 4-1: 0:2 : does not exist
[  110.992554][ T4277] XFS (loop4): Unmounting Filesystem
[  111.006171][ T5367] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  111.091910][ T5367] usb 4-1: USB disconnect, device number 2
[  111.389419][ T5397] udevd[5397]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.640498][ T5615] gadgetfs: bound to dummy_udc driver
[  112.177095][    T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  112.372298][    T7] usb 4-1: Using ep0 maxpacket: 8
[  112.378796][    T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  112.387593][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  112.397859][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  112.407692][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  112.417683][    T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  112.430693][    T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  112.439812][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.546784][ T5446] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.665898][ T5446] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.674863][    T7] usb 4-1: usb_control_msg returned -32
[  112.681762][    T7] usbtmc 4-1:16.0: can't read capabilities
[  112.808926][ T5640] loop4: detected capacity change from 0 to 512
[  112.845791][ T5640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  112.849168][ T5446] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.892485][ T5640] EXT4-fs (loop4): 1 truncate cleaned up
[  112.898378][ T5640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  113.031415][ T5446] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.065200][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.075404][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.083489][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.092741][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.101685][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  113.110081][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.181419][ T5637] loop2: detected capacity change from 0 to 32768
[  113.204664][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  113.349302][ T5637] XFS (loop2): Mounting V5 Filesystem
[  113.484905][ T5637] XFS (loop2): Ending clean mount
[  113.536102][ T5658] usbtmc 4-1:16.0: usb_control_msg returned -32
[  113.692769][ T4271] XFS (loop2): Unmounting Filesystem
[  113.706044][ T5645] chnl_net:caif_netlink_parms(): no params data found
[  113.754766][    T7] usb 4-1: USB disconnect, device number 3
[  114.121590][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.137044][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.152501][ T5645] device bridge_slave_0 entered promiscuous mode
[  114.161035][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.178957][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.190037][ T5645] device bridge_slave_1 entered promiscuous mode
[  114.283409][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.404157][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.519667][ T5645] team0: Port device team_slave_0 added
[  114.591694][ T5645] team0: Port device team_slave_1 added
[  114.669750][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.697139][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.733503][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.856532][ T5679] loop2: detected capacity change from 0 to 32768
[  114.935731][ T5679] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  114.960236][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.009288][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.050182][ T5703] loop0: detected capacity change from 0 to 256
[  115.133909][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.162600][ T4287] Bluetooth: hci2: command 0x0409 tx timeout
[  115.288038][ T4271] ocfs2: Unmounting device (7,2) on (node local)
[  115.513855][ T5697] loop3: detected capacity change from 0 to 40427
[  115.576491][ T5645] device hsr_slave_0 entered promiscuous mode
[  115.603862][ T5697] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  115.639020][ T5697] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  115.673150][ T5645] device hsr_slave_1 entered promiscuous mode
[  115.680081][ T5645] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.724034][ T5697] F2FS-fs (loop3): invalid crc value
[  115.729388][ T5697] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  115.744237][ T5645] Cannot create hsr debugfs directory
[  115.750627][ T5712] loop2: detected capacity change from 0 to 4096
[  115.811060][ T5697] F2FS-fs (loop3): Found nat_bits in checkpoint
[  115.843523][ T5446] device hsr_slave_0 left promiscuous mode
[  115.883975][ T5712] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  115.903326][ T5446] device hsr_slave_1 left promiscuous mode
[  115.923526][ T5446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.951393][ T5446] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.959557][   T26] audit: type=1800 audit(1786109368.182:10): pid=5712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.472" name="file1" dev="loop2" ino=30 res=0 errno=0
[  116.011010][ T5446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.018534][ T5697] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  116.032403][ T5697] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  116.040048][ T5446] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.093537][ T5446] device bridge_slave_1 left promiscuous mode
[  116.101448][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.232016][ T5446] device bridge_slave_0 left promiscuous mode
[  116.241105][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.347440][ T4272] syz-executor: attempt to access beyond end of device
[  116.347440][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  116.447715][ T5446] device veth1_macvtap left promiscuous mode
[  116.482573][ T5446] device veth0_macvtap left promiscuous mode
[  116.489309][ T5446] device veth1_vlan left promiscuous mode
[  116.522765][ T5446] device veth0_vlan left promiscuous mode
[  116.810898][ T5741] loop4: detected capacity change from 0 to 2048
[  116.861565][ T5741] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  116.937136][ T5741] UDF-fs: Scanning with blocksize 512 failed
[  116.943065][ T5726] loop0: detected capacity change from 0 to 32768
[  117.041317][ T5741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.076200][ T5726] XFS (loop0): Mounting V5 Filesystem
[  117.242410][ T4287] Bluetooth: hci2: command 0x041b tx timeout
[  117.261877][ T5726] XFS (loop0): Ending clean mount
[  117.592604][ T4269] XFS (loop0): Unmounting Filesystem
[  117.760044][   T57] kworker/u4:4: attempt to access beyond end of device
[  117.760044][   T57] loop4: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  117.787840][   T57] Buffer I/O error on dev loop4, logical block 1024, lost async page write
[  117.797865][   T57] kworker/u4:4: attempt to access beyond end of device
[  117.797865][   T57] loop4: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  117.812316][   T57] Buffer I/O error on dev loop4, logical block 1024, lost async page write
[  117.821216][   T57] kworker/u4:4: attempt to access beyond end of device
[  117.821216][   T57] loop4: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  117.842473][   T57] Buffer I/O error on dev loop4, logical block 1025, lost async page write
[  117.872786][   T57] kworker/u4:4: attempt to access beyond end of device
[  117.872786][   T57] loop4: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  117.896736][   T57] Buffer I/O error on dev loop4, logical block 1025, lost async page write
[  117.922281][   T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  117.939976][   T57] kworker/u4:4: attempt to access beyond end of device
[  117.939976][   T57] loop4: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  117.968457][   T57] Buffer I/O error on dev loop4, logical block 1026, lost async page write
[  117.985578][   T57] kworker/u4:4: attempt to access beyond end of device
[  117.985578][   T57] loop4: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  118.000472][   T57] Buffer I/O error on dev loop4, logical block 1026, lost async page write
[  118.033234][   T57] kworker/u4:4: attempt to access beyond end of device
[  118.033234][   T57] loop4: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  118.047563][   T57] Buffer I/O error on dev loop4, logical block 1027, lost async page write
[  118.056287][   T57] kworker/u4:4: attempt to access beyond end of device
[  118.056287][   T57] loop4: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  118.069900][   T57] Buffer I/O error on dev loop4, logical block 1027, lost async page write
[  118.078981][   T57] kworker/u4:4: attempt to access beyond end of device
[  118.078981][   T57] loop4: rw=1, sector=2056, nr_sectors = 2 limit=2048
[  118.092752][   T57] Buffer I/O error on dev loop4, logical block 1028, lost async page write
[  118.101516][   T57] Buffer I/O error on dev loop4, logical block 1028, lost async page write
[  118.136302][   T14] usb 3-1: Using ep0 maxpacket: 32
[  118.146743][   T14] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  118.168694][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.202658][   T14] usb 3-1: config 0 descriptor??
[  118.216316][   T14] gspca_main: nw80x-2.14.0 probing 055f:d001
[  118.384244][ T5781] loop4: detected capacity change from 0 to 4096
[  118.460129][ T5781] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  118.508259][   T26] audit: type=1800 audit(1786109370.742:11): pid=5781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.489" name="file1" dev="loop4" ino=30 res=0 errno=0
[  118.562096][ T5446] team0 (unregistering): Port device team_slave_1 removed
[  118.600955][ T5783] loop3: detected capacity change from 0 to 512
[  118.664779][ T5446] team0 (unregistering): Port device team_slave_0 removed
[  118.676547][ T5783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  118.708729][ T5783] EXT4-fs (loop3): 1 truncate cleaned up
[  118.718367][ T5783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  118.803224][ T5446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.906539][ T5446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.308147][ T5446] bond0 (unregistering): Released all slaves
[  119.329065][ T4287] Bluetooth: hci2: command 0x040f tx timeout
[  119.443886][   T14] gspca_nw80x: reg_w err -71
[  119.492336][   T14] nw80x: probe of 3-1:0.0 failed with error -71
[  119.531882][   T14] usb 3-1: USB disconnect, device number 5
[  119.729886][ T5799] loop0: detected capacity change from 0 to 512
[  119.761498][ T5799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  119.869258][ T5799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  119.945803][ T5799] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.039654][ T5645] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  120.047234][ T5808] loop4: detected capacity change from 0 to 256
[  120.101910][ T5645] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  120.111467][   T26] audit: type=1800 audit(1786109372.352:12): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.496" name="file1" dev="loop0" ino=15 res=0 errno=0
[  120.153428][ T5645] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  120.188471][ T5645] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  120.325600][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  120.424429][ T5364] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  120.466680][ T5364] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  120.524929][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.575498][ T5824] loop2: detected capacity change from 0 to 256
[  120.593549][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.638140][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.668007][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  120.700032][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[  120.787163][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  120.816114][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.863413][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.870565][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.894150][   T26] audit: type=1807 audit(1786109373.122:13): UNKNOWN=\ res=0
[  120.903689][ T5830] ima: policy update failed
[  120.911777][   T26] audit: type=1802 audit(1786109373.132:14): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.503" res=0 errno=0
[  120.930032][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  120.963585][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  120.981081][   T26] audit: type=1807 audit(1786109373.142:15): action=measure func=FILE_CHECK res=1
[  121.001426][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.053287][   T26] audit: type=1802 audit(1786109373.142:16): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.503" res=0 errno=0
[  121.070875][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.077997][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.158343][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  121.166615][ T5836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.505'.
[  121.174960][ T5838] input: syz0 as /devices/virtual/input/input12
[  121.206588][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  121.240810][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  121.263646][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  121.313638][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  121.334105][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  121.353619][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  121.363197][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  121.396794][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.409347][ T4287] Bluetooth: hci2: command 0x0419 tx timeout
[  121.445167][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  121.501484][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.557095][ T5645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  122.307902][ T5876] gadgetfs: bound to dummy_udc driver
[  122.374110][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  122.397291][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  122.430067][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.822073][ T5364] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  122.823425][ T5855] loop4: detected capacity change from 0 to 40427
[  122.853649][ T5364] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  122.867156][ T5855] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  122.902408][ T5855] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  122.956633][ T5855] F2FS-fs (loop4): invalid crc value
[  122.983320][ T5855] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  123.031111][ T5855] F2FS-fs (loop4): Found nat_bits in checkpoint
[  123.100871][ T5872] loop2: detected capacity change from 0 to 32768
[  123.149630][ T5872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.516 (5872)
[  123.228957][ T5855] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  123.239492][ T5872] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.261958][ T5855] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  123.303648][ T5872] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  123.396993][ T5872] BTRFS info (device loop2): setting nodatasum
[  123.432233][ T5872] BTRFS info (device loop2): force zlib compression, level 3
[  123.439665][ T5872] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  123.518677][ T5872] BTRFS info (device loop2): use lzo compression, level 0
[  123.552487][ T5872] BTRFS info (device loop2): turning on flush-on-commit
[  123.589885][ T5872] BTRFS info (device loop2): enabling auto defrag
[  123.612888][ T5872] BTRFS info (device loop2): max_inline at 4096
[  123.619176][ T5872] BTRFS info (device loop2): using free space tree
[  123.673797][ T4277] bio_check_eod: 14 callbacks suppressed
[  123.673810][ T4277] syz-executor: attempt to access beyond end of device
[  123.673810][ T4277] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.803297][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.831324][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.912149][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.951550][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.985607][ T5645] device veth0_vlan entered promiscuous mode
[  124.058763][ T5872] BTRFS info (device loop2): enabling ssd optimizations
[  124.067193][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.120888][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.158591][ T5645] device veth1_vlan entered promiscuous mode
[  124.207795][ T5929] loop5: detected capacity change from 0 to 7
[  124.240355][ T5929]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  124.249349][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  124.267773][ T5929] loop5: partition table partially beyond EOD, truncated
[  124.281103][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  124.299439][ T5929] loop5: p1 size 618033127 extends beyond EOD, truncated
[  124.308713][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.336746][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.361564][ T5645] device veth0_macvtap entered promiscuous mode
[  124.406959][ T5645] device veth1_macvtap entered promiscuous mode
[  124.477719][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.484693][ T5382] udevd[5382]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  124.514111][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.572330][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.612229][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.622055][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.664206][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.686350][ T5937] loop3: detected capacity change from 0 to 2048
[  124.713869][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.741656][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.763042][ T5937] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  124.786775][ T5937] UDF-fs: Scanning with blocksize 512 failed
[  124.800678][ T4287] block nbd4: Receive control failed (result -32)
[  124.814970][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.825996][ T4271] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.852638][ T5937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.891655][ T5938] block nbd4: shutting down sockets
[  124.901301][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.921127][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.980341][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  125.123057][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  125.168914][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.210661][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.283705][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.327764][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.370198][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.380832][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.390945][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.416699][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.447352][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.460771][ T1301] kworker/u4:5: attempt to access beyond end of device
[  125.460771][ T1301] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  125.492833][ T1301] buffer_io_error: 13 callbacks suppressed
[  125.492844][ T1301] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  125.511648][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.522014][ T1301] kworker/u4:5: attempt to access beyond end of device
[  125.522014][ T1301] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  125.536559][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.540746][ T1301] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  125.565273][ T5645] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.590258][ T5645] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.593740][ T1301] kworker/u4:5: attempt to access beyond end of device
[  125.593740][ T1301] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  125.612335][ T5645] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.647718][ T5645] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.648754][ T1301] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  125.706350][ T1301] kworker/u4:5: attempt to access beyond end of device
[  125.706350][ T1301] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  125.717614][ T5971] loop2: detected capacity change from 0 to 512
[  125.768799][ T1301] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  125.786184][ T1301] kworker/u4:5: attempt to access beyond end of device
[  125.786184][ T1301] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  125.805008][ T1301] Buffer I/O error on dev loop3, logical block 1026, lost async page write
[  125.814067][ T1301] kworker/u4:5: attempt to access beyond end of device
[  125.814067][ T1301] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  125.816834][ T5971] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  125.846341][ T1301] Buffer I/O error on dev loop3, logical block 1026, lost async page write
[  125.855785][ T4444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.885801][ T1301] kworker/u4:5: attempt to access beyond end of device
[  125.885801][ T1301] loop3: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  125.900741][ T4444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.917767][ T1301] Buffer I/O error on dev loop3, logical block 1027, lost async page write
[  125.926977][ T1301] kworker/u4:5: attempt to access beyond end of device
[  125.926977][ T1301] loop3: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  125.933997][ T5971] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.534: bad orphan inode 131083
[  125.940864][ T1301] Buffer I/O error on dev loop3, logical block 1027, lost async page write
[  125.959963][ T1301] kworker/u4:5: attempt to access beyond end of device
[  125.959963][ T1301] loop3: rw=1, sector=2056, nr_sectors = 2 limit=2048
[  125.973904][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.030124][ T1301] Buffer I/O error on dev loop3, logical block 1028, lost async page write
[  126.049345][ T5971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  126.050375][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.088287][ T1301] Buffer I/O error on dev loop3, logical block 1028, lost async page write
[  126.120890][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.161266][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.261845][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  126.357752][ T5983] loop0: detected capacity change from 0 to 1024
[  126.429288][ T5983] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  126.706951][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  126.834005][ T6004] loop5: detected capacity change from 0 to 256
[  126.889112][ T6004] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.939194][ T6004] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  126.977521][ T6004] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  127.001475][ T6011] loop2: detected capacity change from 0 to 2048
[  127.022618][ T5995] loop3: detected capacity change from 0 to 32768
[  127.073028][ T6011] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  127.087860][ T5995] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.537 (5995)
[  127.121990][ T6011] UDF-fs: Scanning with blocksize 512 failed
[  127.163333][ T5995] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.189382][ T6011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.223705][ T5995] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  127.269807][ T5995] BTRFS info (device loop3): setting nodatasum
[  127.297964][ T5995] BTRFS info (device loop3): force zlib compression, level 3
[  127.336501][ T5995] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  127.406748][ T5995] BTRFS info (device loop3): use lzo compression, level 0
[  127.435995][ T5995] BTRFS info (device loop3): turning on flush-on-commit
[  127.469451][ T5995] BTRFS info (device loop3): enabling auto defrag
[  127.501090][ T5995] BTRFS info (device loop3): max_inline at 4096
[  127.539102][ T5995] BTRFS info (device loop3): using free space tree
[  127.634845][ T6021] loop5: detected capacity change from 0 to 4096
[  127.810988][ T6021] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  127.812352][ T6045] loop2: detected capacity change from 0 to 16
[  127.847850][ T5995] BTRFS info (device loop3): enabling ssd optimizations
[  127.856884][ T6045] erofs: (device loop2): mounted with root inode @ nid 36.
[  127.936643][   T26] audit: type=1800 audit(1786109380.172:17): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.545" name="file1" dev="loop5" ino=30 res=0 errno=0
[  127.963659][ T6045] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  128.167026][ T4272] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.383033][ T6055] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  128.389630][ T6055] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  128.519497][ T6055] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  128.543654][ T6055] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  128.572262][ T6055] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  128.658985][ T6055] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  128.692698][ T6055] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  128.714794][ T6055] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  128.766365][ T6055] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  128.798989][ T6055] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  128.822536][ T6055] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  128.859201][ T6055] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  128.890890][ T6055] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  128.915000][ T6055] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  128.960902][ T6055] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  129.355394][ T6076] loop4: detected capacity change from 0 to 32768
[  129.445582][ T6076] XFS (loop4): Mounting V5 Filesystem
[  129.640398][ T6101] loop0: detected capacity change from 0 to 512
[  129.656278][ T6076] XFS (loop4): Ending clean mount
[  129.688308][ T6076] XFS (loop4): Quotacheck needed: Please wait.
[  129.702318][ T6101] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  129.738838][ T6082] loop3: detected capacity change from 0 to 32768
[  129.756856][ T5446] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  129.783563][ T5446] XFS (loop4): Unmount and run xfs_repair
[  129.791105][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.815998][ T6101] EXT4-fs (loop0): 1 truncate cleaned up
[  129.821756][ T6101] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  129.836370][ T5446] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  129.849005][ T5446] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  129.858068][ T5446] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  129.867488][ T5446] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  129.880872][ T6082] JBD2: Ignoring recovery information on journal
[  129.886679][ T5446] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  129.897859][ T5446] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  129.907561][ T5446] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  129.916648][ T5446] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  129.925569][ T5446] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  129.934948][ T5446] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  129.951845][ T6076] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  129.968313][ T6108] loop5: detected capacity change from 0 to 2048
[  130.074489][ T6082] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  130.078996][ T6108] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  130.114629][ T1301] (kworker/u4:5,1301,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  130.145572][ T6108] UDF-fs: Scanning with blocksize 512 failed
[  130.158491][ T1301] (kworker/u4:5,1301,1):ocfs2_read_locked_inode:554 ERROR: status = -12
[  130.175959][ T5951] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  130.215057][ T5951] XFS (loop4): Unmount and run xfs_repair
[  130.219003][ T6108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.232096][ T1301] (kworker/u4:5,1301,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0
[  130.252686][ T5951] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  130.284340][ T5951] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  130.320281][ T5951] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  130.342022][ T5951] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  130.377152][ T6082] (syz.3.556,6082,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0
[  130.394241][ T5951] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  130.403416][ T5951] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  130.405428][ T6082] (syz.3.556,6082,0):__ocfs2_delete_entry:1162 ERROR: status = -5
[  130.413714][ T5951] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.429409][ T5951] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.438616][ T5951] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.447793][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout
[  130.456338][ T6076] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  130.464763][ T6082] (syz.3.556,6082,1):ocfs2_orphan_del:2386 ERROR: status = -5
[  130.484637][ T6082] (syz.3.556,6082,1):ocfs2_orphan_del:2401 ERROR: status = -5
[  130.492253][ T6082] (syz.3.556,6082,1):ocfs2_del_inode_from_orphan:2734 ERROR: status = -5
[  130.502757][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.509958][ T6082] (syz.3.556,6082,1):ocfs2_dio_end_io_write:2418 ERROR: status = -5
[  130.510215][ T6076] XFS (loop4): page discard on page ffffea000133a300, inode 0x244a, pos 0.
[  130.603822][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout
[  130.697645][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  130.762494][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout
[  130.801570][ T1301] bio_check_eod: 37 callbacks suppressed
[  130.801583][ T1301] kworker/u4:5: attempt to access beyond end of device
[  130.801583][ T1301] loop5: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  130.824176][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  130.842945][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout
[  130.887280][ T1301] buffer_io_error: 36 callbacks suppressed
[  130.887292][ T1301] Buffer I/O error on dev loop5, logical block 1024, lost async page write
[  130.909284][ T1301] kworker/u4:5: attempt to access beyond end of device
[  130.909284][ T1301] loop5: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  130.928031][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout
[  131.003470][ T1301] Buffer I/O error on dev loop5, logical block 1024, lost async page write
[  131.012417][ T1301] kworker/u4:5: attempt to access beyond end of device
[  131.012417][ T1301] loop5: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  131.026827][ T1301] Buffer I/O error on dev loop5, logical block 1025, lost async page write
[  131.035540][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'.
[  131.045650][ T1301] kworker/u4:5: attempt to access beyond end of device
[  131.045650][ T1301] loop5: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  131.066984][ T1301] Buffer I/O error on dev loop5, logical block 1025, lost async page write
[  131.092351][ T1301] kworker/u4:5: attempt to access beyond end of device
[  131.092351][ T1301] loop5: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  131.136355][ T1301] Buffer I/O error on dev loop5, logical block 1026, lost async page write
[  131.156158][ T1301] kworker/u4:5: attempt to access beyond end of device
[  131.156158][ T1301] loop5: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  131.199446][ T1301] Buffer I/O error on dev loop5, logical block 1026, lost async page write
[  131.242425][ T1301] kworker/u4:5: attempt to access beyond end of device
[  131.242425][ T1301] loop5: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  131.266105][ T1301] Buffer I/O error on dev loop5, logical block 1027, lost async page write
[  131.275438][ T1301] kworker/u4:5: attempt to access beyond end of device
[  131.275438][ T1301] loop5: rw=1, sector=2054, nr_sectors = 2 limit=2048
[  131.288160][ T4277] XFS (loop4): Unmounting Filesystem
[  131.293709][ T1301] Buffer I/O error on dev loop5, logical block 1027, lost async page write
[  131.307895][ T1301] kworker/u4:5: attempt to access beyond end of device
[  131.307895][ T1301] loop5: rw=1, sector=2056, nr_sectors = 2 limit=2048
[  131.322034][ T1301] Buffer I/O error on dev loop5, logical block 1028, lost async page write
[  131.402052][ T1301] kworker/u4:5: attempt to access beyond end of device
[  131.402052][ T1301] loop5: rw=1, sector=2056, nr_sectors = 2 limit=2048
[  131.433330][ T1301] Buffer I/O error on dev loop5, logical block 1028, lost async page write
[  131.594075][ T6141] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  131.600747][ T6141] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  131.620686][ T6141] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  131.643774][ T6141] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  131.691549][ T6141] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  131.712968][ T6141] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  131.757294][ T6141] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  131.776181][ T6147] loop5: detected capacity change from 0 to 4096
[  131.881715][ T6147] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  131.939030][   T26] audit: type=1800 audit(1786109384.172:18): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.564" name="file1" dev="loop5" ino=30 res=0 errno=0
[  132.146991][ T5951] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  132.239183][ T6158] input: syz0 as /devices/virtual/input/input13
[  132.352254][ T5951] usb 4-1: Using ep0 maxpacket: 8
[  132.365106][ T5951] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  132.377905][ T5951] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  132.404448][ T5951] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  132.426087][ T6143] loop2: detected capacity change from 0 to 32768
[  132.429074][ T5951] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  132.461135][ T5951] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.468487][ T6143] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  132.481179][ T5951] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  132.518674][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.613188][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  132.619513][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  132.662226][ T6066] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  132.720640][ T5397] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  132.760636][ T5951] usb 4-1: usb_control_msg returned -32
[  132.770671][ T5951] usbtmc 4-1:16.0: can't read capabilities
[  132.862405][ T6066] usb 6-1: Using ep0 maxpacket: 32
[  132.876186][ T6066] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.915117][ T6066] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.931634][ T6066] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  132.952363][ T6066] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  132.960804][ T6066] usb 6-1: Product: syz
[  132.982215][ T6066] usb 6-1: Manufacturer: syz
[  132.992572][ T6066] hub 6-1:4.0: USB hub found
[  133.197194][ T6066] hub 6-1:4.0: 2 ports detected
[  133.612792][ T6066] hub 6-1:4.0: set hub depth failed
[  133.632770][ T6066] usb 6-1: USB disconnect, device number 2
[  133.642582][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout
[  133.648595][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout
[  133.654858][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout
[  133.722268][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout
[  133.728301][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout
[  133.778474][ T5951] usb 4-1: USB disconnect, device number 4
[  135.803601][ T4287] Bluetooth: hci2: command 0x0406 tx timeout
[  145.461564][ T6334] loop0: detected capacity change from 0 to 512
[  145.496176][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'.
[  145.512965][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'.
[  145.552953][ T6338] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.562061][ T6338] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.571396][ T6338] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.580334][ T6338] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.597810][ T6334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  145.609999][ T6334] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.959856][ T6352] loop2: detected capacity change from 0 to 512
[  145.983436][ T6352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  146.021631][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  146.072945][ T6352] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.589: iget: bad i_size value: 38620345925642
[  146.137177][ T6352] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.589: couldn't read orphan inode 15 (err -117)
[  146.197671][ T6352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  146.284233][ T6357] loop4: detected capacity change from 0 to 4096
[  146.702439][ T6344] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  146.826673][ T6371] loop5: detected capacity change from 0 to 512
[  146.851940][ T6371] EXT4-fs: Ignoring removed nobh option
[  146.870510][ T6371] EXT4-fs: Ignoring removed mblk_io_submit option
[  146.929295][ T6371] EXT4-fs (loop5): orphan cleanup on readonly fs
[  146.955036][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  146.972554][ T6371] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  147.055253][ T6371] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.596: attempt to clear invalid blocks 2 len 1
[  147.107050][ T4277] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  147.132653][ T4277] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  147.148141][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.154546][ T6371] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  147.169561][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.186273][ T6371] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.596: invalid indirect mapped block 1819239214 (level 0)
[  147.222101][ T6371] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.596: invalid indirect mapped block 1819239214 (level 1)
[  147.319255][ T6371] EXT4-fs (loop5): 1 truncate cleaned up
[  147.357983][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.369603][ T6371] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  147.385745][ T6386] loop4: detected capacity change from 0 to 1024
[  147.406788][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.450498][ T6386] EXT4-fs: Ignoring removed oldalloc option
[  147.511267][ T6386] EXT4-fs: Ignoring removed orlov option
[  147.548992][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.570461][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.646989][ T6386] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  147.663778][ T5645] EXT4-fs (loop5): unmounting filesystem.
[  147.746466][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.795562][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.868921][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  147.953194][ T6403] loop0: detected capacity change from 0 to 16
[  147.989719][ T6403] erofs: (device loop0): mounted with root inode @ nid 36.
[  148.356466][ T6411] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  148.367239][ T6411] overlayfs: failed to set xattr on upper
[  148.375452][ T6411] overlayfs: ...falling back to index=off,metacopy=off.
[  148.592072][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  148.611333][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  148.620585][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  148.644372][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  148.657764][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  148.667279][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.245294][ T6417] chnl_net:caif_netlink_parms(): no params data found
[  149.248621][ T6440] loop0: detected capacity change from 0 to 512
[  149.328092][ T6440] EXT4-fs: Ignoring removed oldalloc option
[  149.346749][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.397854][ T6440] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  149.417921][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.449757][ T6417] device bridge_slave_0 entered promiscuous mode
[  149.465536][ T6440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  149.497043][ T6440] EXT4-fs (loop0): orphan cleanup on readonly fs
[  149.512937][ T6440] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.613: bad orphan inode 267
[  149.536385][ T6440] EXT4-fs (loop0): Remounting filesystem read-only
[  149.615962][ T6440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  149.756739][ T6440] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.613: dx entry: limit 0 != root limit 125
[  149.783711][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.790822][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.820241][ T6417] device bridge_slave_1 entered promiscuous mode
[  149.826812][ T6440] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.613: Corrupt directory, running e2fsck is recommended
[  150.044530][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.069505][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.186503][   T11] device hsr_slave_0 left promiscuous mode
[  150.211016][   T11] device hsr_slave_1 left promiscuous mode
[  150.236563][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.254266][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.275020][   T11] device bridge_slave_1 left promiscuous mode
[  150.304936][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.315867][   T11] device bridge_slave_0 left promiscuous mode
[  150.322211][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.407024][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  150.479211][   T11] device veth1_macvtap left promiscuous mode
[  150.503251][   T11] device veth0_macvtap left promiscuous mode
[  150.509609][   T11] device veth1_vlan left promiscuous mode
[  150.540472][   T11] device veth0_vlan left promiscuous mode
[  150.566704][ T6467] loop0: detected capacity change from 0 to 1024
[  150.732436][ T6465] loop4: detected capacity change from 0 to 8192
[  150.762315][ T4273] Bluetooth: hci1: command 0x0409 tx timeout
[  150.831411][ T6465]  loop4: p2 p3 p4
[  150.850151][ T6465] loop4: p2 start 4293394690 is beyond EOD, truncated
[  150.915815][ T6465] loop4: p3 size 100663552 extends beyond EOD, truncated
[  150.935872][ T6465] loop4: p4 size 50331648 extends beyond EOD, truncated
[  151.176531][ T6354] udevd[6354]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  151.196978][ T6342] udevd[6342]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  151.517437][   T11] team0 (unregistering): Port device team_slave_1 removed
[  151.555763][   T11] team0 (unregistering): Port device team_slave_0 removed
[  151.592935][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.631461][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.900893][   T11] bond0 (unregistering): Released all slaves
[  152.108957][ T6417] team0: Port device team_slave_0 added
[  152.124873][ T6417] team0: Port device team_slave_1 added
[  152.197561][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.229890][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.315442][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.329776][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.338154][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.409561][ T6500] loop5: detected capacity change from 0 to 164
[  152.416284][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.571926][ T6417] device hsr_slave_0 entered promiscuous mode
[  152.622574][ T6417] device hsr_slave_1 entered promiscuous mode
[  152.842618][ T4273] Bluetooth: hci1: command 0x041b tx timeout
[  152.980945][ T6513] loop5: detected capacity change from 0 to 1024
[  153.081793][ T6513] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  153.150471][   T26] audit: type=1800 audit(1786109405.382:19): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.634" name="file2" dev="loop5" ino=16 res=0 errno=0
[  153.329688][ T6417] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  153.356610][ T6417] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  153.387924][ T6417] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  153.464430][ T6417] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  153.540546][ T5645] EXT4-fs (loop5): unmounting filesystem.
[  153.624239][ T6532] loop3: detected capacity change from 0 to 128
[  153.678312][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.724068][ T6532] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  153.734004][ T6417] 8021q: adding VLAN 0 to HW filter on device team0
[  153.782551][ T6532] hpfs: filesystem error: improperly stopped
[  153.801252][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  153.810622][ T6532] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  153.822412][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.842056][ T6541] overlayfs: refusing to follow metacopy origin for (/file1)
[  153.872568][ T6532] hpfs: You really don't want any checks? You are crazy...
[  153.879795][ T6532] hpfs: Code page index out of array
[  153.886921][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  153.903433][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.925568][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.932697][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.941461][ T6532] hpfs: code page support is disabled
[  153.952647][ T6532] hpfs: hpfs_map_4sectors(): unaligned read
[  153.958631][ T6532] hpfs: hpfs_map_4sectors(): unaligned read
[  153.982515][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  153.991229][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.007160][ T6532] hpfs: filesystem error: unable to find root dir
[  154.028207][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.035349][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.101805][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  154.123808][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  154.146137][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  154.180154][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  154.222847][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  154.258420][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  154.280582][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  154.322412][   T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  154.326560][ T6417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.360743][ T6417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.398143][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  154.406664][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  154.430695][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  154.458903][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  154.487638][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  154.533856][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.536977][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  154.562631][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.602878][   T27] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  154.646170][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.690939][   T27] usb 5-1: config 0 descriptor??
[  154.922341][ T4273] Bluetooth: hci1: command 0x040f tx timeout
[  154.977117][ T6564] loop3: detected capacity change from 0 to 128
[  155.104400][ T6564] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  155.135779][   T27] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  155.152209][ T6564] hpfs: filesystem error: improperly stopped
[  155.170755][   T27] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  155.171185][ T6564] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  155.188789][   T27] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  155.207364][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.217905][ T6564] hpfs: You really don't want any checks? You are crazy...
[  155.225079][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.234590][ T6564] hpfs: Code page index out of array
[  155.243580][ T6564] hpfs: code page support is disabled
[  155.255358][   T27] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  155.255559][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.270106][ T6564] hpfs: hpfs_map_4sectors(): unaligned read
[  155.278529][   T27] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  155.289834][ T6564] hpfs: hpfs_map_4sectors(): unaligned read
[  155.306744][ T6564] hpfs: filesystem error: unable to find root dir
[  155.321700][   T27] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  155.784526][ T6580] loop5: detected capacity change from 0 to 8192
[  155.824543][   T27] playstation 0003:054C:0DF2.0006: Invalid gyro calibration data for axis (3), disabling calibration.
[  155.852471][   T27] playstation 0003:054C:0DF2.0006: Invalid gyro calibration data for axis (4), disabling calibration.
[  155.874500][ T6580] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.892223][   T27] playstation 0003:054C:0DF2.0006: Invalid gyro calibration data for axis (5), disabling calibration.
[  155.923358][   T27] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (0), disabling calibration.
[  155.946431][   T27] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (1), disabling calibration.
[  155.957869][ T6594] loop0: detected capacity change from 0 to 512
[  155.979780][ T6594] ext4: Unknown parameter 'noacl'
[  155.982787][   T27] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (2), disabling calibration.
[  156.026909][   T27] input: HID 054c:0df2 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0006/input/input14
[  156.041217][ T6594] netlink: 'syz.0.655': attribute type 3 has an invalid length.
[  156.063232][   T27] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0006/input/input15
[  156.075027][ T6594] netlink: 72 bytes leftover after parsing attributes in process `syz.0.655'.
[  156.095084][ T4364] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  156.107856][   T27] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0006/input/input16
[  156.160899][   T27] playstation 0003:054C:0DF2.0006: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000
[  156.208718][   T27] usb 5-1: USB disconnect, device number 6
[  156.267728][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.286895][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.295826][ T4364] usb 4-1: Using ep0 maxpacket: 8
[  156.321704][ T4364] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  156.351534][ T4364] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.381168][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  156.387365][ T4364] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  156.394033][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  156.423066][ T6417] device veth0_vlan entered promiscuous mode
[  156.431035][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  156.439819][ T4364] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  156.441822][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  156.476605][ T4364] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.511747][ T6417] device veth1_vlan entered promiscuous mode
[  156.538609][ T4364] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  156.612331][ T4364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.627167][ T6417] device veth0_macvtap entered promiscuous mode
[  156.678159][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  156.697504][ T6602] fido_id[6602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  156.718211][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  156.763179][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  156.811191][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  156.855740][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  156.879134][ T4364] usb 4-1: usb_control_msg returned -32
[  156.885098][ T4364] usbtmc 4-1:16.0: can't read capabilities
[  156.899910][ T6417] device veth1_macvtap entered promiscuous mode
[  156.976408][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.002471][ T4273] Bluetooth: hci1: command 0x0419 tx timeout
[  157.012123][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.081147][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.139912][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.150146][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.161355][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.187207][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.200479][ T5951] usb 4-1: USB disconnect, device number 5
[  157.207421][ T6590] usbtmc 4-1:16.0: usb_control_msg returned -71
[  157.220599][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.262351][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.270807][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  157.284541][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.297047][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.309440][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.314060][ T6600] loop5: detected capacity change from 0 to 40427
[  157.325486][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.338033][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.360727][ T6600] F2FS-fs (loop5): invalid crc value
[  157.371178][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.397475][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.400116][ T6600] F2FS-fs (loop5): Found nat_bits in checkpoint
[  157.409321][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.425754][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.457351][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.488300][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.496938][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  157.499712][ T6600] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  157.513011][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  157.534417][ T6417] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.554944][ T6600] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  157.561000][ T6417] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.607994][ T6417] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.627022][ T6417] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.676024][ T6600] bio_check_eod: 13 callbacks suppressed
[  157.676038][ T6600] syz.5.656: attempt to access beyond end of device
[  157.676038][ T6600] loop5: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  157.779935][ T5713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.793683][ T5713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.832618][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  157.856029][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.883900][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.927438][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  157.984304][ T5645] syz-executor: attempt to access beyond end of device
[  157.984304][ T5645] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  158.590153][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.667'.
[  158.789476][   T26] audit: type=1326 audit(1786109411.022:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.5.660" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5f0d9e0d9 code=0x0
[  159.082741][ T6069] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  159.290596][ T6069] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  159.308793][ T6069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.318457][ T6069] usb 5-1: Product: syz
[  159.323816][ T6069] usb 5-1: Manufacturer: syz
[  159.328433][ T6069] usb 5-1: SerialNumber: syz
[  159.342318][ T6069] usb 5-1: config 0 descriptor??
[  159.353222][ T6069] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  159.381442][ T6069] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  159.410143][ T6069] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  159.450189][ T6069] usb 5-1: media controller created
[  159.514340][ T6069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.560729][ T6666] dvb-usb: bulk message failed: -22 (7/0)
[  159.729631][ T6069] DVB: Unable to find symbol mt352_attach()
[  159.906008][ T6069] DVB: Unable to find symbol nxt6000_attach()
[  159.922519][ T6069] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  159.958174][ T6702] netlink: 52 bytes leftover after parsing attributes in process `syz.6.679'.
[  159.980724][ T6069] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18
[  160.017264][ T6706] loop5: detected capacity change from 0 to 512
[  160.027469][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.027967][ T6069] dvb-usb: schedule remote query interval to 1000 msecs.
[  160.035415][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.064840][ T6069] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  160.102127][ T6069] dvb-usb: bulk message failed: -22 (7/0)
[  160.116821][ T6706] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.680: Unimplemented hash flags: 0x0001
[  160.144851][ T6706] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.680: Corrupt directory, running e2fsck is recommended
[  160.155029][ T6069] dvb-usb: bulk message failed: -22 (7/0)
[  160.178821][ T6706] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  160.268088][ T6069] usb 5-1: USB disconnect, device number 7
[  160.280126][ T6706] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.680: corrupted in-inode xattr
[  160.355898][ T6706] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.680: couldn't read orphan inode 15 (err -117)
[  160.443753][ T6706] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  160.474798][ T6689] loop0: detected capacity change from 0 to 32768
[  160.534304][ T6069] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  160.535155][ T6706] EXT4-fs (loop5): shut down requested (2)
[  160.623503][ T6727] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #2: block 3: comm syz.5.680: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  160.684203][ T6689] XFS (loop0): Mounting V5 Filesystem
[  160.800621][ T6731] loop3: detected capacity change from 0 to 1024
[  160.801309][ T6727] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #2: comm syz.5.680: directory missing '.'
[  160.808037][ T6731] EXT4-fs: Ignoring removed oldalloc option
[  160.830341][ T6689] XFS (loop0): Ending clean mount
[  160.850388][ T6731] EXT4-fs: Ignoring removed orlov option
[  160.937301][ T6731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  160.998543][ T6743] XFS (loop0): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  161.163884][ T5951] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  161.213091][ T4269] XFS (loop0): Unmounting Filesystem
[  161.243731][ T5645] EXT4-fs (loop5): unmounting filesystem.
[  161.255062][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  161.400400][ T5951] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  161.431529][ T5951] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  161.468553][ T5951] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  161.490456][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.519883][ T6736] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  161.769051][ T6755] loop5: detected capacity change from 0 to 512
[  161.816450][ T6755] EXT4-fs: Ignoring removed i_version option
[  161.846390][   T27] usb 7-1: USB disconnect, device number 2
[  161.865684][ T6755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  161.949009][ T6755] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.692: invalid indirect mapped block 4294967295 (level 1)
[  161.977643][ T6761] loop4: detected capacity change from 0 to 128
[  161.987058][ T6761] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  161.987476][ T6755] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.692: invalid indirect mapped block 4294967295 (level 1)
[  162.014148][ T6755] EXT4-fs (loop5): 2 truncates cleaned up
[  162.020281][ T6755] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  162.059526][ T6761] hpfs: filesystem error: improperly stopped
[  162.072260][ T6761] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  162.092236][ T6761] hpfs: You really don't want any checks? You are crazy...
[  162.099471][ T6761] hpfs: Code page index out of array
[  162.108621][ T6761] hpfs: code page support is disabled
[  162.114812][ T6761] hpfs: hpfs_map_4sectors(): unaligned read
[  162.120792][ T6761] hpfs: hpfs_map_4sectors(): unaligned read
[  162.127315][ T6761] hpfs: filesystem error: unable to find root dir
[  162.135927][ T5645] EXT4-fs (loop5): unmounting filesystem.
[  162.488357][ T6776] loop0: detected capacity change from 0 to 1024
[  162.543930][ T6779] loop3: detected capacity change from 0 to 256
[  162.562339][   T27] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  162.564180][ T6776] nfs: Unknown parameter 'ac�����G���+�YE�<!E�xJ'
[  162.640119][ T6779] device pim6reg1 entered promiscuous mode
[  162.774413][   T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  162.811610][   T27] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  162.857370][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.876383][   T27] usb 6-1: Product: syz
[  162.883817][   T27] usb 6-1: Manufacturer: syz
[  162.892419][ T6069] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  162.898637][   T27] usb 6-1: SerialNumber: syz
[  163.082642][ T6069] usb 7-1: Using ep0 maxpacket: 32
[  163.092869][ T6069] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.121785][ T6069] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.135589][ T6069] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  163.150578][ T6069] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.173969][ T6069] usb 7-1: config 0 descriptor??
[  163.192536][ T6069] hub 7-1:0.0: USB hub found
[  163.232357][ T5951] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  163.324254][   T27] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  163.396078][ T6069] hub 7-1:0.0: 1 port detected
[  163.433777][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.449904][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.466808][ T5951] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  163.476434][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.491897][ T5951] usb 4-1: config 0 descriptor??
[  163.910361][ T5951] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  163.938437][ T5951] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  163.958647][ T5951] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  163.978853][ T5951] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  163.999065][ T5951] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  164.035308][ T5951] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  164.053127][ T6069] hub 7-1:0.0: activate --> -90
[  164.281574][ T6832] IPv6: sit1: Disabled Multicast RS
[  164.454781][ T6069] usb 7-1-port1: cannot disable (err = -71)
[  164.462396][ T6068] usb 7-1: USB disconnect, device number 3
[  164.562265][ T5951] playstation 0003:054C:0DF2.0007: Invalid gyro calibration data for axis (3), disabling calibration.
[  164.587867][ T5951] playstation 0003:054C:0DF2.0007: Invalid gyro calibration data for axis (4), disabling calibration.
[  164.629568][ T5951] playstation 0003:054C:0DF2.0007: Invalid gyro calibration data for axis (5), disabling calibration.
[  164.659654][ T5951] playstation 0003:054C:0DF2.0007: Invalid accelerometer calibration data for axis (0), disabling calibration.
[  164.685775][ T5951] playstation 0003:054C:0DF2.0007: Invalid accelerometer calibration data for axis (1), disabling calibration.
[  164.703584][ T5951] playstation 0003:054C:0DF2.0007: Invalid accelerometer calibration data for axis (2), disabling calibration.
[  164.720909][ T5951] input: HID 054c:0df2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0007/input/input20
[  164.744657][ T5951] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0007/input/input21
[  164.789996][ T5951] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0007/input/input22
[  164.865180][ T5951] playstation 0003:054C:0DF2.0007: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000
[  164.895232][ T5951] usb 4-1: USB disconnect, device number 6
[  165.203872][ T6852] fido_id[6852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  165.321043][ T5951] usb 6-1: USB disconnect, device number 3
[  165.340930][ T5951] usblp0: removed
[  165.510509][ T6862] loop5: detected capacity change from 0 to 512
[  165.528874][ T6865] loop4: detected capacity change from 0 to 128
[  165.569563][ T6862] FAT-fs (loop5): Directory bread(block 199916) failed
[  165.592337][ T6862] FAT-fs (loop5): Directory bread(block 199917) failed
[  165.620948][ T6862] FAT-fs (loop5): Directory bread(block 199918) failed
[  165.637480][ T6862] FAT-fs (loop5): Directory bread(block 199919) failed
[  165.722272][ T6862] FAT-fs (loop5): Directory bread(block 199920) failed
[  165.784162][ T6862] FAT-fs (loop5): Directory bread(block 199921) failed
[  165.791076][ T6862] FAT-fs (loop5): Directory bread(block 199922) failed
[  165.881006][ T6862] FAT-fs (loop5): Directory bread(block 199923) failed
[  166.693531][ T5951] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  166.736803][ T6906] sctp: [Deprecated]: syz.3.731 (pid 6906) Use of int in max_burst socket option deprecated.
[  166.736803][ T6906] Use struct sctp_assoc_value instead
[  166.907144][ T5951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  166.946649][ T6908] loop3: detected capacity change from 0 to 8192
[  166.955369][ T5951] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  166.973163][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.004607][ T5951] usb 5-1: Product: syz
[  167.012279][ T5951] usb 5-1: Manufacturer: syz
[  167.016931][ T5951] usb 5-1: SerialNumber: syz
[  167.447191][ T5951] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  167.862718][ T6931] loop3: detected capacity change from 0 to 32768
[  167.900128][ T6931] JBD2: Ignoring recovery information on journal
[  167.984819][ T6931] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  168.023807][ T6931] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[  168.041292][ T6931] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  168.051166][ T6931] OCFS2: File system is now read-only.
[  168.056668][ T6931] (syz.3.740,6931,0):ocfs2_search_chain:1783 ERROR: status = -30
[  168.064793][ T6931] (syz.3.740,6931,0):ocfs2_search_chain:1893 ERROR: status = -30
[  168.074619][ T6931] (syz.3.740,6931,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  168.083035][ T6931] (syz.3.740,6931,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  168.091391][ T6931] (syz.3.740,6931,0):ocfs2_claim_metadata:2040 ERROR: status = -30
[  168.099346][ T6931] (syz.3.740,6931,0):ocfs2_claim_metadata:2053 ERROR: status = -30
[  168.107285][ T6931] (syz.3.740,6931,0):ocfs2_create_refcount_tree:595 ERROR: status = -30
[  168.115828][ T6931] (syz.3.740,6931,0):ocfs2_reflink_remap_blocks:4657 ERROR: status = -30
[  168.126699][ T6931] (syz.3.740,6931,0):ocfs2_remap_file_range:2710 ERROR: status = -30
[  168.209937][ T6938] loop0: detected capacity change from 0 to 128
[  168.265977][ T6938] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  168.336665][ T6938] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  168.368602][    C1] vkms_vblank_simulate: vblank timer overrun
[  168.385997][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  168.651294][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  169.141509][ T6953] loop3: detected capacity change from 0 to 32768
[  169.141985][ T6961] loop5: detected capacity change from 0 to 2048
[  169.206450][ T6953] XFS (loop3): Mounting V5 Filesystem
[  169.281130][ T6961] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  169.394797][ T6953] XFS (loop3): Ending clean mount
[  169.457112][ T6953] XFS (loop3): Quotacheck needed: Please wait.
[  169.491669][ T4364] usb 5-1: USB disconnect, device number 8
[  169.532573][ T4364] usblp0: removed
[  169.589273][ T6953] XFS (loop3): Quotacheck: Done.
[  169.601790][ T5645] EXT4-fs (loop5): unmounting filesystem.
[  169.827739][ T4272] XFS (loop3): Unmounting Filesystem
[  170.011303][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.756'.
[  194.058855][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  194.065200][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  255.485657][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  255.491983][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  272.922304][ T4287] Bluetooth: hci1: command 0x0406 tx timeout
[  316.927896][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  316.934260][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  325.882293][   T28] INFO: task jbd2/sda1-8:3601 blocked for more than 143 seconds.
[  325.890048][   T28]       Not tainted syzkaller #0
[  325.896081][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.904825][   T28] task:jbd2/sda1-8     state:D stack:25904 pid:3601  ppid:2      flags:0x00004000
[  325.914351][   T28] Call Trace:
[  325.917635][   T28]  <TASK>
[  325.920552][   T28]  __schedule+0x107f/0x4030
[  325.925126][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  325.930157][   T28]  ? __sched_text_start+0x8/0x8
[  325.935043][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  325.940939][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  325.946224][   T28]  schedule+0xb9/0x180
[  325.950305][   T28]  io_schedule+0x7c/0xd0
[  325.954606][   T28]  bit_wait_io+0xd/0xc0
[  325.958781][   T28]  __wait_on_bit+0x9b/0x2c0
[  325.963343][   T28]  ? bit_wait+0xc0/0xc0
[  325.967526][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  325.973081][   T28]  ? bit_wait+0xc0/0xc0
[  325.977247][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  325.982006][   T28]  ? do_raw_write_lock+0x11a/0x260
[  325.987316][   T28]  ? bit_waitqueue+0x30/0x30
[  325.991925][   T28]  ? do_raw_read_unlock+0x39/0x70
[  325.997557][   T28]  jbd2_journal_commit_transaction+0x2f0f/0x5f30
[  326.004694][   T28]  ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0
[  326.011472][   T28]  ? lock_chain_count+0x20/0x20
[  326.016374][   T28]  ? _raw_spin_unlock+0x40/0x40
[  326.021231][   T28]  ? rcu_is_watching+0x11/0xa0
[  326.026076][   T28]  ? __timer_delete_sync+0x239/0x2e0
[  326.031363][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  326.036453][   T28]  ? timer_delete_sync+0x20/0x20
[  326.041393][   T28]  ? do_raw_read_unlock+0x70/0x70
[  326.046613][   T28]  ? prepare_to_wait+0x1a6/0x1f0
[  326.051551][   T28]  kjournald2+0x40b/0x800
[  326.055923][   T28]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  326.061126][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  326.067099][   T28]  ? wake_bit_function+0x200/0x200
[  326.072274][   T28]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  326.078169][   T28]  ? __kthread_parkme+0x71/0x1c0
[  326.083173][   T28]  ? __kthread_parkme+0x15b/0x1c0
[  326.088209][   T28]  kthread+0x29d/0x330
[  326.092462][   T28]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  326.098186][   T28]  ? kthread_blkcg+0xd0/0xd0
[  326.102855][   T28]  ret_from_fork+0x1f/0x30
[  326.107286][   T28]  </TASK>
[  326.110296][   T28] INFO: task syz-executor:4256 blocked for more than 143 seconds.
[  326.118159][   T28]       Not tainted syzkaller #0
[  326.123500][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  326.132220][   T28] task:syz-executor    state:D stack:21488 pid:4256  ppid:4255   flags:0x00004002
[  326.141444][   T28] Call Trace:
[  326.144813][   T28]  <TASK>
[  326.147746][   T28]  __schedule+0x107f/0x4030
[  326.152326][   T28]  ? mark_lock+0x94/0x320
[  326.156668][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  326.161691][   T28]  ? __sched_text_start+0x8/0x8
[  326.166613][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  326.172530][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  326.177716][   T28]  schedule+0xb9/0x180
[  326.181769][   T28]  io_schedule+0x7c/0xd0
[  326.186051][   T28]  bit_wait_io+0xd/0xc0
[  326.190213][   T28]  __wait_on_bit+0x9b/0x2c0
[  326.194772][   T28]  ? bit_wait+0xc0/0xc0
[  326.198933][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  326.205616][   T28]  ? bit_wait+0xc0/0xc0
[  326.209801][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  326.214643][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  326.219669][   T28]  ? bit_waitqueue+0x30/0x30
[  326.224314][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  326.229515][   T28]  do_get_write_access+0x605/0xf20
[  326.234680][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  326.240663][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  326.246878][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  326.253115][   T28]  ? rcu_is_watching+0x11/0xa0
[  326.257899][   T28]  ext4_reserve_inode_write+0x201/0x290
[  326.263515][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  326.269078][   T28]  ext4_dirty_inode+0xbf/0x100
[  326.273872][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  326.279678][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  326.284831][   T28]  __file_update_time+0x21d/0x240
[  326.289881][   T28]  file_update_time+0x2f3/0x370
[  326.294773][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  326.300064][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  326.305818][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  326.310882][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  326.317280][   T28]  ? count_memcg_event_mm+0x8a/0x3c0
[  326.322640][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  326.327683][   T28]  do_page_mkwrite+0x16b/0x5c0
[  326.332498][   T28]  wp_page_shared+0x167/0x370
[  326.337184][   T28]  handle_mm_fault+0x1b1b/0x3d40
[  326.342164][   T28]  ? mt_find+0x157/0x830
[  326.346435][   T28]  ? numa_migrate_prep+0x250/0x250
[  326.351568][   T28]  ? lock_chain_count+0x20/0x20
[  326.356470][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  326.361760][   T28]  do_user_addr_fault+0x58e/0xb20
[  326.367219][   T28]  exc_page_fault+0x60/0x100
[  326.371826][   T28]  ? clear_bhb_loop+0x60/0xb0
[  326.380374][   T28]  asm_exc_page_fault+0x22/0x30
[  326.385321][   T28] RIP: 0033:0x7f6a1ac7c662
[  326.389768][   T28] RSP: 002b:00007ffd9df37b80 EFLAGS: 00010202
[  326.398356][   T28] RAX: 00007f6a18c04000 RBX: 00005555716f5ac0 RCX: 0000000000000007
[  326.406823][   T28] RDX: 0000000000003308 RSI: 00005555716f64f8 RDI: 0000000000000080
[  326.414938][   T28] RBP: 00007ffd9df38080 R08: 00005555716f6500 R09: 000000000000008e
[  326.423028][   T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd9df37ec0
[  326.431018][   T28] R13: 00007ffd9df37cb0 R14: 585858582e7a7973 R15: 00007ffd9df37c00
[  326.439051][   T28]  </TASK>
[  326.442220][   T28] INFO: task syz.6.761:7003 blocked for more than 143 seconds.
[  326.449781][   T28]       Not tainted syzkaller #0
[  326.454793][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  326.463521][   T28] task:syz.6.761       state:D stack:26544 pid:7003  ppid:6417   flags:0x00004004
[  326.472782][   T28] Call Trace:
[  326.476067][   T28]  <TASK>
[  326.479000][   T28]  __schedule+0x107f/0x4030
[  326.483661][   T28]  ? mark_lock+0x94/0x320
[  326.488003][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  326.493207][   T28]  ? __sched_text_start+0x8/0x8
[  326.498078][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  326.504030][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  326.509816][   T28]  schedule+0xb9/0x180
[  326.513943][   T28]  io_schedule+0x7c/0xd0
[  326.518192][   T28]  bit_wait_io+0xd/0xc0
[  326.522437][   T28]  __wait_on_bit+0x9b/0x2c0
[  326.526962][   T28]  ? bit_wait+0xc0/0xc0
[  326.531104][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  326.536609][   T28]  ? bit_wait+0xc0/0xc0
[  326.540775][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  326.545562][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  326.550603][   T28]  ? bit_waitqueue+0x30/0x30
[  326.555254][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  326.560462][   T28]  do_get_write_access+0x605/0xf20
[  326.565644][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  326.571650][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  326.577833][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  326.584030][   T28]  ? rcu_is_watching+0x11/0xa0
[  326.588800][   T28]  ext4_reserve_inode_write+0x201/0x290
[  326.594501][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  326.599978][   T28]  ext4_dirty_inode+0xbf/0x100
[  326.604787][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  326.611007][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  326.616097][   T28]  __file_update_time+0x21d/0x240
[  326.621150][   T28]  file_update_time+0x2f3/0x370
[  326.626055][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  326.631362][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  326.636436][   T28]  ? pte_alloc_one+0x287/0x310
[  326.641225][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  326.647507][   T28]  do_page_mkwrite+0x16b/0x5c0
[  326.652293][   T28]  handle_mm_fault+0x199c/0x3d40
[  326.657211][   T28]  ? mt_find+0x157/0x830
[  326.661443][   T28]  ? numa_migrate_prep+0x250/0x250
[  326.666642][   T28]  ? lock_chain_count+0x20/0x20
[  326.671504][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  326.676892][   T28]  do_user_addr_fault+0x58e/0xb20
[  326.681932][   T28]  exc_page_fault+0x60/0x100
[  326.686684][   T28]  ? clear_bhb_loop+0x60/0xb0
[  326.691372][   T28]  asm_exc_page_fault+0x22/0x30
[  326.696260][   T28] RIP: 0033:0x7f0bc1a6ba23
[  326.700673][   T28] RSP: 002b:00007ffec0c14fc0 EFLAGS: 00010246
[  326.706872][   T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b34264000
[  326.715453][   T28] RDX: 0000001b34224000 RSI: 0000000000400000 RDI: 00007f0bc1de0708
[  326.723490][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  326.731462][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  326.739458][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec0c15250
[  326.747476][   T28]  </TASK>
[  326.750488][   T28] INFO: task syz.4.763:7004 blocked for more than 144 seconds.
[  326.758080][   T28]       Not tainted syzkaller #0
[  326.767892][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  326.778443][   T28] task:syz.4.763       state:D stack:27632 pid:7004  ppid:4277   flags:0x00004004
[  326.789897][   T28] Call Trace:
[  326.793788][   T28]  <TASK>
[  326.796727][   T28]  __schedule+0x107f/0x4030
[  326.801223][   T28]  ? mark_lock+0x94/0x320
[  326.805628][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  326.810657][   T28]  ? __sched_text_start+0x8/0x8
[  326.816125][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  326.822029][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  326.827274][   T28]  schedule+0xb9/0x180
[  326.831349][   T28]  io_schedule+0x7c/0xd0
[  326.835648][   T28]  bit_wait_io+0xd/0xc0
[  326.839810][   T28]  __wait_on_bit+0x9b/0x2c0
[  326.844406][   T28]  ? bit_wait+0xc0/0xc0
[  326.848570][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  326.854093][   T28]  ? bit_wait+0xc0/0xc0
[  326.858252][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  326.863069][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  326.868095][   T28]  ? bit_waitqueue+0x30/0x30
[  326.872902][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  326.878112][   T28]  do_get_write_access+0x605/0xf20
[  326.883272][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  326.889267][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  326.895525][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  326.901688][   T28]  ? rcu_is_watching+0x11/0xa0
[  326.906508][   T28]  ext4_reserve_inode_write+0x201/0x290
[  326.912114][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  326.918160][   T28]  ext4_dirty_inode+0xbf/0x100
[  326.922995][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  326.928824][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  326.933988][   T28]  __file_update_time+0x21d/0x240
[  326.939022][   T28]  file_update_time+0x2f3/0x370
[  326.943943][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  326.949239][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  326.954309][   T28]  ? pte_alloc_one+0x287/0x310
[  326.959080][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  326.965350][   T28]  do_page_mkwrite+0x16b/0x5c0
[  326.970119][   T28]  handle_mm_fault+0x199c/0x3d40
[  326.975129][   T28]  ? mt_find+0x157/0x830
[  326.979383][   T28]  ? numa_migrate_prep+0x250/0x250
[  326.984643][   T28]  ? lock_chain_count+0x20/0x20
[  326.989514][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  326.994865][   T28]  do_user_addr_fault+0x58e/0xb20
[  326.999901][   T28]  exc_page_fault+0x60/0x100
[  327.004565][   T28]  ? clear_bhb_loop+0x60/0xb0
[  327.009258][   T28]  asm_exc_page_fault+0x22/0x30
[  327.014252][   T28] RIP: 0033:0x7f9797c6ba23
[  327.018678][   T28] RSP: 002b:00007ffe57864900 EFLAGS: 00010246
[  327.026101][   T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f864000
[  327.035716][   T28] RDX: 0000001b2f824000 RSI: 0000000000400000 RDI: 00007f9797fe0708
[  327.043732][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  327.051716][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  327.059718][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe57864b90
[  327.067768][   T28]  </TASK>
[  327.070806][   T28] INFO: task syz.3.762:7005 blocked for more than 144 seconds.
[  327.078391][   T28]       Not tainted syzkaller #0
[  327.083358][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  327.092003][   T28] task:syz.3.762       state:D stack:27632 pid:7005  ppid:4272   flags:0x00004004
[  327.101374][   T28] Call Trace:
[  327.104682][   T28]  <TASK>
[  327.107600][   T28]  __schedule+0x107f/0x4030
[  327.112157][   T28]  ? mark_lock+0x94/0x320
[  327.116505][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  327.121534][   T28]  ? __sched_text_start+0x8/0x8
[  327.126885][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  327.132882][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  327.138107][   T28]  schedule+0xb9/0x180
[  327.142227][   T28]  io_schedule+0x7c/0xd0
[  327.146484][   T28]  bit_wait_io+0xd/0xc0
[  327.150656][   T28]  __wait_on_bit+0x9b/0x2c0
[  327.155214][   T28]  ? bit_wait+0xc0/0xc0
[  327.159376][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  327.166326][   T28]  ? bit_wait+0xc0/0xc0
[  327.170489][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  327.175387][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  327.180535][   T28]  ? bit_waitqueue+0x30/0x30
[  327.185158][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  327.190357][   T28]  do_get_write_access+0x605/0xf20
[  327.195541][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  327.201526][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  327.207852][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  327.214057][   T28]  ? rcu_is_watching+0x11/0xa0
[  327.218828][   T28]  ext4_reserve_inode_write+0x201/0x290
[  327.224924][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  327.230405][   T28]  ext4_dirty_inode+0xbf/0x100
[  327.235218][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  327.241028][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  327.246458][   T28]  __file_update_time+0x21d/0x240
[  327.251481][   T28]  file_update_time+0x2f3/0x370
[  327.256408][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  327.261703][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  327.266773][   T28]  ? pte_alloc_one+0x287/0x310
[  327.271553][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  327.278048][   T28]  do_page_mkwrite+0x16b/0x5c0
[  327.283027][   T28]  handle_mm_fault+0x199c/0x3d40
[  327.287968][   T28]  ? mt_find+0x157/0x830
[  327.292262][   T28]  ? numa_migrate_prep+0x250/0x250
[  327.297379][   T28]  ? lock_chain_count+0x20/0x20
[  327.302297][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  327.307586][   T28]  do_user_addr_fault+0x58e/0xb20
[  327.312801][   T28]  exc_page_fault+0x60/0x100
[  327.317397][   T28]  ? clear_bhb_loop+0x60/0xb0
[  327.322058][   T28]  asm_exc_page_fault+0x22/0x30
[  327.327502][   T28] RIP: 0033:0x7fc87726ba23
[  327.331925][   T28] RSP: 002b:00007ffe34b73a30 EFLAGS: 00010246
[  327.338044][   T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f764000
[  327.346034][   T28] RDX: 0000001b2f724000 RSI: 0000000000400000 RDI: 00007fc8775e0708
[  327.354070][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  327.362040][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  327.370058][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe34b73cc0
[  327.378081][   T28]  </TASK>
[  327.381098][   T28] INFO: task syz.5.760:7006 blocked for more than 144 seconds.
[  327.388685][   T28]       Not tainted syzkaller #0
[  327.393671][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  327.402462][   T28] task:syz.5.760       state:D stack:27632 pid:7006  ppid:5645   flags:0x00004004
[  327.411867][   T28] Call Trace:
[  327.415228][   T28]  <TASK>
[  327.418163][   T28]  __schedule+0x107f/0x4030
[  327.422994][   T28]  ? mark_lock+0x94/0x320
[  327.427337][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  327.432988][   T28]  ? __sched_text_start+0x8/0x8
[  327.437858][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  327.443779][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  327.448983][   T28]  schedule+0xb9/0x180
[  327.453115][   T28]  io_schedule+0x7c/0xd0
[  327.457368][   T28]  bit_wait_io+0xd/0xc0
[  327.461511][   T28]  __wait_on_bit+0x9b/0x2c0
[  327.466056][   T28]  ? bit_wait+0xc0/0xc0
[  327.470219][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  327.475731][   T28]  ? bit_wait+0xc0/0xc0
[  327.479918][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  327.484722][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  327.489749][   T28]  ? bit_waitqueue+0x30/0x30
[  327.494397][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  327.499623][   T28]  do_get_write_access+0x605/0xf20
[  327.504775][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  327.510777][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  327.516981][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  327.523218][   T28]  ? rcu_is_watching+0x11/0xa0
[  327.527990][   T28]  ext4_reserve_inode_write+0x201/0x290
[  327.534254][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  327.539733][   T28]  ext4_dirty_inode+0xbf/0x100
[  327.544536][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  327.550344][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  327.555426][   T28]  __file_update_time+0x21d/0x240
[  327.560457][   T28]  file_update_time+0x2f3/0x370
[  327.565388][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  327.570686][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  327.575792][   T28]  ? pte_alloc_one+0x287/0x310
[  327.580580][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  327.586852][   T28]  do_page_mkwrite+0x16b/0x5c0
[  327.591628][   T28]  handle_mm_fault+0x199c/0x3d40
[  327.596623][   T28]  ? mt_find+0x157/0x830
[  327.600881][   T28]  ? numa_migrate_prep+0x250/0x250
[  327.606039][   T28]  ? lock_chain_count+0x20/0x20
[  327.610902][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  327.616243][   T28]  do_user_addr_fault+0x58e/0xb20
[  327.621283][   T28]  exc_page_fault+0x60/0x100
[  327.625910][   T28]  ? clear_bhb_loop+0x60/0xb0
[  327.630598][   T28]  asm_exc_page_fault+0x22/0x30
[  327.635913][   T28] RIP: 0033:0x7fb5f0c6ba23
[  327.640337][   T28] RSP: 002b:00007ffde04b6950 EFLAGS: 00010246
[  327.646594][   T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d264000
[  327.654647][   T28] RDX: 0000001b2d224000 RSI: 0000000000400000 RDI: 00007fb5f0fe0708
[  327.662656][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  327.670635][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  327.678662][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffde04b6be0
[  327.686669][   T28]  </TASK>
[  327.689683][   T28] INFO: task syz.0.759:7007 blocked for more than 145 seconds.
[  327.697324][   T28]       Not tainted syzkaller #0
[  327.702314][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  327.710963][   T28] task:syz.0.759       state:D stack:27632 pid:7007  ppid:4269   flags:0x00004004
[  327.720223][   T28] Call Trace:
[  327.723557][   T28]  <TASK>
[  327.726492][   T28]  __schedule+0x107f/0x4030
[  327.730992][   T28]  ? mark_lock+0x94/0x320
[  327.735377][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  327.740780][   T28]  ? __sched_text_start+0x8/0x8
[  327.745734][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  327.751636][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  327.757046][   T28]  schedule+0xb9/0x180
[  327.761125][   T28]  io_schedule+0x7c/0xd0
[  327.767959][   T28]  bit_wait_io+0xd/0xc0
[  327.772362][   T28]  __wait_on_bit+0x9b/0x2c0
[  327.776863][   T28]  ? bit_wait+0xc0/0xc0
[  327.781019][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  327.790073][   T28]  ? bit_wait+0xc0/0xc0
[  327.794427][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  327.799209][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  327.804407][   T28]  ? bit_waitqueue+0x30/0x30
[  327.809174][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  327.814506][   T28]  do_get_write_access+0x605/0xf20
[  327.819648][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  327.825694][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  327.831858][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  327.838322][   T28]  ? rcu_is_watching+0x11/0xa0
[  327.843697][   T28]  ext4_reserve_inode_write+0x201/0x290
[  327.849283][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  327.854821][   T28]  ext4_dirty_inode+0xbf/0x100
[  327.859589][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  327.865533][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  327.870565][   T28]  __file_update_time+0x21d/0x240
[  327.875644][   T28]  file_update_time+0x2f3/0x370
[  327.880501][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  327.885991][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  327.891277][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  327.896386][   T28]  ? pte_alloc_one+0x287/0x310
[  327.901169][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  327.907469][   T28]  do_page_mkwrite+0x16b/0x5c0
[  327.912289][   T28]  handle_mm_fault+0x199c/0x3d40
[  327.917241][   T28]  ? mt_find+0x157/0x830
[  327.921503][   T28]  ? numa_migrate_prep+0x250/0x250
[  327.926644][   T28]  ? lock_chain_count+0x20/0x20
[  327.931509][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  327.936851][   T28]  do_user_addr_fault+0x58e/0xb20
[  327.942445][   T28]  exc_page_fault+0x60/0x100
[  327.947054][   T28]  ? clear_bhb_loop+0x60/0xb0
[  327.951735][   T28]  asm_exc_page_fault+0x22/0x30
[  327.956625][   T28] RIP: 0033:0x7faf5aa6ba23
[  327.961048][   T28] RSP: 002b:00007ffce9f47f60 EFLAGS: 00010246
[  327.967169][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2f464000
[  327.975369][   T28] RDX: 0000001b2f424000 RSI: 0000000000600000 RDI: 00007faf5ade0708
[  327.983488][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  327.991466][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  327.999470][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce9f481f0
[  328.007507][   T28]  </TASK>
[  328.010533][   T28] 
[  328.010533][   T28] Showing all locks held in the system:
[  328.018512][   T28] 1 lock held by rcu_tasks_kthre/12:
[  328.023878][   T28]  #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  328.034404][   T28] 1 lock held by rcu_tasks_trace/13:
[  328.039687][   T28]  #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  328.051179][   T28] 1 lock held by khungtaskd/28:
[  328.056123][   T28]  #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  328.066062][   T28] 2 locks held by getty/4024:
[  328.070736][   T28]  #0: ffff88814dc39098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  328.080532][   T28]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  328.090740][   T28] 3 locks held by syz-executor/4256:
[  328.096065][   T28]  #0: ffff88807a547958 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  328.106032][   T28]  #1: ffff88807e144558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  328.115822][   T28]  #2: ffff88814dd68990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  328.125635][   T28] 6 locks held by kworker/u4:9/5713:
[  328.130913][   T28]  #0: ffff888141a4f138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  328.141632][   T28]  #1: ffffc90003437d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  328.153858][   T28]  #2: ffff88807e1440e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0
[  328.163867][   T28]  #3: ffff88807e146c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x213/0x2e70
[  328.174462][   T28]  #4: ffff88814dd68990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  328.184210][   T28]  #5: ffff8880746834b0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[  328.194147][   T28] 3 locks held by syz.6.761/7003:
[  328.199162][   T28]  #0: ffff88807ae90158 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  328.209346][   T28]  #1: ffff88807e144558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  328.219133][   T28]  #2: ffff88814dd68990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  328.228835][   T28] 3 locks held by syz.4.763/7004:
[  328.233913][   T28]  #0: ffff88807d5944d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  328.243914][   T28]  #1: ffff88807e144558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  328.254240][   T28]  #2: ffff88814dd68990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  328.263948][   T28] 3 locks held by syz.3.762/7005:
[  328.268953][   T28]  #0: ffff88807d591f58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  328.278926][   T28]  #1: ffff88807e144558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  328.288775][   T28]  #2: ffff88814dd68990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  328.298753][   T28] 3 locks held by syz.5.760/7006:
[  328.303875][   T28]  #0: ffff88807d597958 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  328.313834][   T28]  #1: ffff88807e144558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  328.323695][   T28]  #2: ffff88814dd68990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  328.333433][   T28] 3 locks held by syz.0.759/7007:
[  328.338456][   T28]  #0: ffff88807d590158 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  328.348399][   T28]  #1: ffff88807e144558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  328.358546][   T28]  #2: ffff88814dd68990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  328.368306][   T28] 
[  328.370629][   T28] =============================================
[  328.370629][   T28] 
[  328.379101][   T28] NMI backtrace for cpu 1
[  328.383433][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  328.390604][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  328.400637][   T28] Call Trace:
[  328.403898][   T28]  <TASK>
[  328.406825][   T28]  dump_stack_lvl+0x188/0x24e
[  328.411493][   T28]  ? show_regs_print_info+0x12/0x12
[  328.416689][   T28]  ? load_image+0x410/0x410
[  328.421172][   T28]  ? vprintk_emit+0x59f/0x6a0
[  328.425835][   T28]  ? printk_sprint+0x460/0x460
[  328.430590][   T28]  nmi_cpu_backtrace+0x3e6/0x460
[  328.435529][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  328.441703][   T28]  ? _printk+0xda/0x130
[  328.445841][   T28]  ? load_image+0x410/0x410
[  328.450327][   T28]  ? load_image+0x410/0x410
[  328.454834][   T28]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  328.460893][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  328.466942][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  328.472921][   T28]  watchdog+0xf0e/0xf50
[  328.477060][   T28]  ? watchdog+0x1ed/0xf50
[  328.481377][   T28]  kthread+0x29d/0x330
[  328.485434][   T28]  ? hungtask_pm_notify+0x40/0x40
[  328.490449][   T28]  ? kthread_blkcg+0xd0/0xd0
[  328.495026][   T28]  ret_from_fork+0x1f/0x30
[  328.499441][   T28]  </TASK>
[  328.503109][   T28] Sending NMI from CPU 1 to CPUs 0:
[  328.508480][    C0] NMI backtrace for cpu 0
[  328.508489][    C0] CPU: 0 PID: 57 Comm: kworker/u4:4 Not tainted syzkaller #0
[  328.508503][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  328.508512][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  328.508535][    C0] RIP: 0010:__lock_acquire+0x36e/0x7c40
[  328.508557][    C0] Code: c7 c7 40 16 8c 8a 48 c7 c6 00 3e 8c 8a e8 aa b6 e9 ff 0f 0b e9 6b 0f 00 00 31 c0 49 b8 00 00 00 00 00 fc ff df 48 89 54 24 70 <48> 8d 04 80 48 8b 4c 24 20 4c 8d b4 c1 e0 0a 00 00 48 8d 8c c1 00
[  328.508569][    C0] RSP: 0018:ffffc90001587720 EFLAGS: 00000046
[  328.508581][    C0] RAX: 0000000000000003 RBX: 000000000000000f RCX: ffffffff96c17103
[  328.508590][    C0] RDX: 00000000000007b9 RSI: 0000000000000000 RDI: ffff88807d6618e8
[  328.508600][    C0] RBP: ffffc90001587950 R08: dffffc0000000000 R09: 0000000000000001
[  328.508610][    C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000000000
[  328.508620][    C0] R13: ffff88807d6618e8 R14: ffff8880187de550 R15: 00000000000007b9
[  328.508630][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  328.508642][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  328.508652][    C0] CR2: 0000555d5068b168 CR3: 000000000c88e000 CR4: 00000000003506f0
[  328.508665][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  328.508673][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  328.508682][    C0] Call Trace:
[  328.508687][    C0]  <TASK>
[  328.508697][    C0]  ? process_one_work+0x8ab/0x1160
[  328.508715][    C0]  ? verify_lock_unused+0x140/0x140
[  328.508735][    C0]  ? kasan_set_track+0x60/0x70
[  328.508753][    C0]  ? kasan_set_track+0x4b/0x70
[  328.508770][    C0]  ? kasan_save_free_info+0x27/0x40
[  328.508782][    C0]  ? ____kasan_slab_free+0x126/0x1f0
[  328.508801][    C0]  ? slab_free_freelist_hook+0x133/0x1b0
[  328.508818][    C0]  ? verify_lock_unused+0x140/0x140
[  328.508835][    C0]  ? process_one_work+0x8ab/0x1160
[  328.508850][    C0]  ? worker_thread+0xaf5/0x12a0
[  328.508865][    C0]  ? kthread+0x29d/0x330
[  328.508876][    C0]  ? ret_from_fork+0x1f/0x30
[  328.508898][    C0]  lock_acquire+0x1bb/0x4a0
[  328.508916][    C0]  ? skb_dequeue+0x29/0x150
[  328.508932][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  328.508952][    C0]  ? read_lock_is_recursive+0x10/0x10
[  328.508971][    C0]  ? lock_chain_count+0x20/0x20
[  328.508992][    C0]  _raw_spin_lock_irqsave+0xb0/0x100
[  328.509008][    C0]  ? skb_dequeue+0x29/0x150
[  328.509021][    C0]  ? _raw_spin_lock+0x40/0x40
[  328.509036][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  328.509052][    C0]  skb_dequeue+0x29/0x150
[  328.509064][    C0]  ? ieee80211_iface_work+0x978/0xc70
[  328.509086][    C0]  ieee80211_iface_work+0x98b/0xc70
[  328.509109][    C0]  cfg80211_wiphy_work+0x224/0x260
[  328.509127][    C0]  ? process_one_work+0x7b4/0x1160
[  328.509143][    C0]  process_one_work+0x8ab/0x1160
[  328.509164][    C0]  ? worker_detach_from_pool+0x240/0x240
[  328.509181][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[  328.509196][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  328.509213][    C0]  ? wq_worker_running+0x97/0x190
[  328.509235][    C0]  worker_thread+0xaf5/0x12a0
[  328.509259][    C0]  kthread+0x29d/0x330
[  328.509270][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[  328.509285][    C0]  ? kthread_blkcg+0xd0/0xd0
[  328.509299][    C0]  ret_from_fork+0x1f/0x30
[  328.509320][    C0]  </TASK>
[  328.511271][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  328.843247][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  328.850421][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  328.860454][   T28] Call Trace:
[  328.863717][   T28]  <TASK>
[  328.866650][   T28]  dump_stack_lvl+0x188/0x24e
[  328.871310][   T28]  ? memcpy+0x3c/0x60
[  328.875282][   T28]  ? show_regs_print_info+0x12/0x12
[  328.880483][   T28]  ? load_image+0x410/0x410
[  328.884973][   T28]  panic+0x2d3/0x710
[  328.888846][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  328.894471][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  328.898974][   T28]  ? __irq_work_queue_local+0x12c/0x190
[  328.904510][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  328.910644][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  328.916784][   T28]  watchdog+0xf4d/0xf50
[  328.920926][   T28]  ? watchdog+0x1ed/0xf50
[  328.925256][   T28]  kthread+0x29d/0x330
[  328.929303][   T28]  ? hungtask_pm_notify+0x40/0x40
[  328.934314][   T28]  ? kthread_blkcg+0xd0/0xd0
[  328.938896][   T28]  ret_from_fork+0x1f/0x30
[  328.943302][   T28]  </TASK>
[  328.946601][   T28] Kernel Offset: disabled
[  328.950912][   T28] Rebooting in 86400 seconds..