last executing test programs:

5m13.533088109s ago: executing program 1 (id=69):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

5m12.880738914s ago: executing program 1 (id=78):
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)})
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, 0x0})

5m12.809430946s ago: executing program 1 (id=80):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0xfe}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x404c444)

5m12.703916589s ago: executing program 1 (id=83):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020)

5m12.556551322s ago: executing program 1 (id=87):
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2802052, 0x0, 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

5m12.151838402s ago: executing program 1 (id=94):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2,0x', 0x4)

5m11.80471804s ago: executing program 32 (id=94):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='2,0x', 0x4)

2m48.280085958s ago: executing program 5 (id=1587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xf}, {0x2, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}]}, 0x2c}}, 0x4008000)

2m48.101539253s ago: executing program 5 (id=1588):
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x2000c09d)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

2m47.923603277s ago: executing program 5 (id=1594):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x28, 0x140d, 0x413, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4)

2m47.516023216s ago: executing program 5 (id=1596):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x176}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x4c}}, 0x0)

2m47.35667978s ago: executing program 5 (id=1597):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000000)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000040)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0)
stat(&(0x7f00000003c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000400))

2m47.124398086s ago: executing program 5 (id=1598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2m45.987200844s ago: executing program 3 (id=1606):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)

2m44.923643579s ago: executing program 3 (id=1619):
r0 = socket$kcm(0x29, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0xffff834b, 0x4)

2m44.327731963s ago: executing program 3 (id=1626):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4)

2m44.118933749s ago: executing program 3 (id=1631):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@discard}, {@namecase}, {@utf8}, {@gid={'gid', 0x3d, 0xee01}}, {@allow_utime={'allow_utime', 0x3d, 0xf12}}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@errors_remount}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x1545, &(0x7f0000004500)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020)

2m43.531958063s ago: executing program 3 (id=1633):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)

2m43.023296304s ago: executing program 3 (id=1634):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x2, 0x0)
getdents64(r0, 0x0, 0x22)

2m42.399981769s ago: executing program 33 (id=1634):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$eJzs3c1vHGcZAPBn1uu1N5TESZM2QZViNRIgrCb+kAvm0oAQ8qFCVTlwthInsbJJg+0it0LEfBQuHHrIH1AOvnFASNwjyoUL3Hr1sRKCSy81p0Hzseu1vbte49TrTX+/aDzvzDvv+z7zzNeuN9YG8KW1OBXVp5HE4tSbG9ny9tZcY3tr7kGzHBFjEVGJqBazSD5P0/TjiJtRTHElW1l2l+zt/dG5ZunJysLbn3y2/WmxVC2nfPvKwXZd/P5xl4rNcorJiBgp58ewp79bh/U3flh3SWsPs4RdayYOBm00ItLcv58Ua3769xdaNW3qnVofeuYDQyApnpsHTEScKS/07HVA8VQsntlDbXPQAQAAAMAJOLcTO7ERZwcdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyT8vv/k3KqNMuTkTS//79WrouyfLpcPdrmT7+oOAAAAAAAAADgBF3diZ3YiLPN5TTJP/N/NV+4mP/8Srwba7Ecq3E9NmIp1mM9VmMmIibaOqptLK2vr860Wjb/Z8DBlrMdW84eEuhYOa8/i70GAAAAAAAAgGHzeZqmPTf4VSzufv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnQZKm6eOIJIrpYjlPJqJSjYjxiKhl221G/LNZHlZXXot4OuggAAAA4BjSPrc7txM7sRFnW+2S/D3/S/n7/vF4Nx7GeqzEejRiOW7nvwso3vVXtrfmGttbcw+y6WC/3/vPkcLNe4yIkXyp08iX8y3qcSdW8jXX41a8E0lyOyp5y8zlLJbRKGI6GNcvs5iSNwqjfUZ2u5xne/5hOd+veqR97eqIv0yZyDMy2srIdBlblo3zzQx0zsQRj87+kWai0gr2YtsoWSL27cSenL/R53hnynm2P7/tkvPB2J+J2baz76XdTIx3vCq+8Zc//uRe4+H9e3fWpk7PLh202WHdSDkv7iv1MhOPdzMx15aJl3uffcOTib5M5+fEpdbyYvwwfhxTMRlvxWqsxM9iKdZjOSbjB3lpqTyfk7ZLvi1Tlbaub+4Z6K3DIqmVZ2hxsPbGFIfE9Gre9mysxI/inbgdy/F6/m82ZuLbMR/zsdB2hC/1PsL5VV/pctWnX+0Y/LVvloV6RPyunOfudrm/9nsLP7Ysr+fb8to665PiSJ7fcxfezdKFPrK0/974p96hVL9WFrIxfh17T5fBmtiXiZm2TLzYOxN/yG8ra42H91fvLT3qb7gLH5aF7Bh80Psp8Ywe0P3KzpcLrWH3nh1Z3YtFXf4apD1ftfITl6Jd5UDdpVZdcaVudr1Sa+VruIM9zeZ1L3esG8/XXG6r2/96q9F6PTTsH/4APLc+qEWc+daZWv1f9X/UP6r/pn6v/ub498e+M/ZKLUb/Nvrd6vTI1yuvJH+Oj+IXu+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/9/ae+/fX2o0llf3FdI0fdylapgLza8zO8FBr7wQMahdrkXE6cj8f9M0LdckpyGe3oU0MxbpUZsnReGvEdFfq2pEdKq6Ovgk9Lhp+AIoeC7cWH/w6Mbae++/tvJg6e7y3eWHC/PzC9ML86/P3biz0lieLn4OOkrgi7D70B90JAAAAAAAAAAAAEC/TuLPCbqPPn6SuwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMqcWpqD6NJGamr09ny9tbc41sapZ3t6xGRCUikp9HJB9H3Ixiiom27pJu4zxZWXj7k8+2P93tq9rcvtKrXX82yykmI2KknD+r/m4du7+ktYdZwq41EweD9r8AAAD//0jrDBA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x2, 0x0)
getdents64(r0, 0x0, 0x22)

2m32.045914208s ago: executing program 34 (id=1598):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2m31.899549842s ago: executing program 2 (id=1676):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000000c001a8008"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

2m31.709826936s ago: executing program 2 (id=1677):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000002f00)={'custom1\x00'})

2m30.615456182s ago: executing program 2 (id=1681):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8811}, 0x400c000)

2m30.449096006s ago: executing program 2 (id=1682):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@discard}, {@namecase}, {@utf8}, {@gid={'gid', 0x3d, 0xee01}}, {@allow_utime={'allow_utime', 0x3d, 0xf12}}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@errors_remount}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x1545, &(0x7f0000004500)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020)

2m29.926604799s ago: executing program 2 (id=1683):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)={[{@ikeep}, {@qnoenforce}, {@quota}, {@filestreams}, {@nogrpid}, {@uqnoenforce}, {@dax}]}, 0x4, 0x9766, &(0x7f000001c4c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0105872, &(0x7f0000000180)={0x3000000})
setxattr$incfs_id(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x2)

2m29.394156392s ago: executing program 2 (id=1684):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000500)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x571, &(0x7f0000000b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
removexattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00')

2m29.096268439s ago: executing program 35 (id=1684):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000500)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x571, &(0x7f0000000b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
removexattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00')

2m27.676013823s ago: executing program 0 (id=1690):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040887}, 0x0)

2m26.408027623s ago: executing program 0 (id=1695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2m26.308053586s ago: executing program 0 (id=1696):
timer_create(0x3, 0x0, &(0x7f0000bbdffc))
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
timer_create(0x1, 0x0, &(0x7f0000000440))
preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0)

2m26.305170056s ago: executing program 0 (id=1697):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@discard}, {@namecase}, {@utf8}, {@gid={'gid', 0x3d, 0xee01}}, {@allow_utime={'allow_utime', 0x3d, 0xf12}}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@errors_remount}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x1545, &(0x7f0000004500)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020)

2m26.075536452s ago: executing program 0 (id=1698):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x14, "72ebcc8e6c0c96a624ec1c7dd8413121bf29d0bd"}, 0x0})

2m25.533746684s ago: executing program 0 (id=1699):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c)
r1 = dup(r0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0xff82}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050)

2m25.232050872s ago: executing program 36 (id=1699):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c)
r1 = dup(r0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0xff82}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050)

13.642118593s ago: executing program 6 (id=3138):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0})
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa214892ec08586dd61bcc1d7000032"], 0x0)

13.477794907s ago: executing program 6 (id=3141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/safesetid/gid_allowlist_policy\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/100, 0x64)

13.217616293s ago: executing program 6 (id=3144):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7}}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)

13.033474678s ago: executing program 6 (id=3145):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x497, &(0x7f0000002940)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000)

12.480261191s ago: executing program 6 (id=3149):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001380)={0x2020}, 0xfd1d)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

11.887598455s ago: executing program 6 (id=3159):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCFLSH(r0, 0x540b, 0x2)

11.591903922s ago: executing program 37 (id=3159):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCFLSH(r0, 0x540b, 0x2)

7.686253796s ago: executing program 4 (id=3207):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd3860800000080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c600000000d7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c)

7.51605059s ago: executing program 4 (id=3209):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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")
symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x20a9823, 0x0, 0x1, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./bus/file0\x00')

6.516155344s ago: executing program 4 (id=3218):
setns(0xc9, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

6.308140039s ago: executing program 4 (id=3221):
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

6.27469098s ago: executing program 4 (id=3222):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000)

4.874486133s ago: executing program 7 (id=3229):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff3}, {0x2, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20005000}, 0x0)

4.563153021s ago: executing program 9 (id=3231):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x6}, 0x10)
listen(r0, 0x0)
listen(r0, 0x6)

4.438608634s ago: executing program 9 (id=3232):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2)

4.212053269s ago: executing program 9 (id=3233):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000030000000600000007"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.292067061s ago: executing program 9 (id=3234):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x497, &(0x7f0000002940)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000)

3.054100397s ago: executing program 9 (id=3235):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400fff800000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.673688907s ago: executing program 7 (id=3237):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

2.666649096s ago: executing program 4 (id=3238):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x40200000, 0x40200003, 0x0, 0x6, 0x7})
unshare(0x6020400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc)

2.446804882s ago: executing program 7 (id=3240):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe)
write(r0, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd)

2.316175195s ago: executing program 9 (id=3242):
r0 = syz_io_uring_setup(0x3fde, &(0x7f0000000080)={0x0, 0x3a86, 0x40, 0x82, 0x93}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000000))
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x786, 0x206a29, 0x0, 0x0, 0x5d)

1.898287985s ago: executing program 38 (id=3242):
r0 = syz_io_uring_setup(0x3fde, &(0x7f0000000080)={0x0, 0x3a86, 0x40, 0x82, 0x93}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000000))
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x786, 0x206a29, 0x0, 0x0, 0x5d)

1.865374686s ago: executing program 7 (id=3244):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
connect$rds(r0, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)

1.737834759s ago: executing program 7 (id=3247):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ad, &(0x7f0000002080)="$eJzs3c9rHFUcAPDvbHaT9GdSUbCKGvDQgpgmseAPFFLwKCKoJy8NybaUbn/QRLAhQovYk8eC4EUEwYs3xYsgpSdFvPQi/Q+kUiQIrdJDZCaTzTbdTTfNbiZxPx+YzZt5s/ve7PKdNz9e5gXQs0bSl1LEwYi4lEQM5cuTiKhkqXLE5PJ6dxcXpv9ZXJhOYmnp3b+SbJ07iwvT0fCe1J78bYMRceN6Eo/1PVju7MX501O1WvVCPn9k7sz5I7MX5188dWbqZPVk9ezExMSrE0fHXx6b6Ni2fvLMr9/du/L2p5/vv3n1zxs/7E9iMvbmeY3b0SkjMVL/ThqVI+LNThdWkL58e0oNy5LympUGt7hStK3U8Bs+GUPRF6s/3lBc/77QygEAXbGUTgBAj0m0/wDQY1auA9xZXJhemYq9IgFsldvHlu/PpnF/N5+Wc8oxmf0dzPoB7P47icbbuslK34FNSj/j2w8qX6ZTdOk+PNDcpcvZjf8m7X+Sxf9w3nljbfz3ReT7h81Zuw8R/7B1NhP/73SgfPEPAAAAAAAAnXPtWES80uz+X6ne/yea3P8biIixDpT/8Pt/pVsdKAZo4vaxiNfzZ/vc3/+v/kSX4b58bl9EPBGV5MSpWnUs7mW9hw9HJd1NVMebf3y2y3j/yvhPrcpv7P+XTmn5K30B83rcKg/c/56ZqbmpzW43EHH7csRT5Wbxn9Tb/6RF/9/jbZbx48I3z7bKe3j8A92y9FXEoabt/+qT65L1n893JDseWH5tWsb88Tc+blV+W/G/+m9KQAel7f/u9eN/OGl8Xufsxsv47M7YF63yHvX4vz95L3uqaH++7KOpubkL4xH9yVsPLm/6CNGlgY1vCexsK/GwEi9p/B9+vvn5/3rH/5WION9mmV//XPm9Vd5IFqmO/6EIafzPbKj933ji39+ebrmraK/9P5q16YfzJa7/wfraDdCi6wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ1Uioi9kZRG6+lSaXQ0Yk9EPB67S7Vzs3MvnDj34dmZNC9iOCqlE6dq1bGIGFqeT9L58Sy9Oj+xZv6liDgQEVcHdmXzo9PnajNFbzwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5Pa0GP8/9cdAw4qTRdUQAOiKwaIrAABsOe0/APQe7T8A9J4Nt/+/7OtORQCALeP8HwB6j/YfAAAAAAAAAAAAAAAAAAAAAAAAALrqwHPXbiYRcem1XdmU6s/zKoXWDOi2UtEVAArTV3QFgMKU21kpSernBMD/h3N8IHlIfushQlxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgdxw62O74/22NFArsIEbvg95l/H/oXY7qoXcZ/x/o1vj/ux6xPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsB3NXpw/PVWrVS9IdDpR3h7V2A6JgYjobhGDsT22tMBE+iXHWMc+sOg9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO8F/AQAA///IXxBG")
chdir(&(0x7f00000003c0)='./file0\x00')
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0)

1.362803098s ago: executing program 7 (id=3249):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xfffffffc, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x42}, 0x0, 0x18, 0x0, 0x12345})
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="45ef20"])
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

902.969939ms ago: executing program 8 (id=3253):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

653.546355ms ago: executing program 8 (id=3254):
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x4}, 0x2}, 0x18, 0x0, 0x3f, 0x0, 0x0, 0x40014}, 0x4081)
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, 0x0})

587.265376ms ago: executing program 8 (id=3255):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f0004060066", 0x27)

482.134159ms ago: executing program 8 (id=3256):
r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000040))
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x0, 0xfb, 0x2005d0, 0x0, 0x81})

231.206255ms ago: executing program 8 (id=3257):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000380), 0x4)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 8 (id=3258):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xfffe}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x70}, 0x0)

kernel console output (not intermixed with test programs):

has an invalid bInterval 0, changing to 7
[  283.218553][T10451] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  283.252822][ T5295] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.286121][ T5295] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  283.339084][T10457] device veth0_to_bond entered promiscuous mode
[  283.350900][ T5295] usb 8-1: config 0 interface 0 has no altsetting 0
[  283.378105][T10457] device macsec1 entered promiscuous mode
[  283.386290][ T5295] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  283.421508][ T5295] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.462607][ T5295] usb 8-1: config 0 descriptor??
[  283.877395][ T5295] hid (null): nested delimiters
[  283.894142][ T5295] hid (null): nested delimiters
[  283.899115][ T5295] hid (null): nested delimiters
[  283.934366][ T5295] hid (null): report_id 24797 is invalid
[  284.086264][ T5295] usb 8-1: USB disconnect, device number 3
[  284.662066][T10514] netlink: 'syz.9.2054': attribute type 8 has an invalid length.
[  284.690600][T10514] sch_fq: defrate 0 ignored.
[  284.757108][T10517] tap0: tun_chr_ioctl cmd 1074025677
[  284.775302][T10517] tap0: linktype set to 1
[  284.803856][T10521] loop4: detected capacity change from 0 to 512
[  284.845818][T10521] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  284.919521][T10521] EXT4-fs (loop4): 1 truncate cleaned up
[  284.991892][T10521] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  285.096738][T10530] loop7: detected capacity change from 0 to 512
[  285.164237][T10530] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  285.191458][T10530] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.2058: corrupted in-inode xattr
[  285.249185][T10530] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.2058: couldn't read orphan inode 15 (err -117)
[  285.334548][T10530] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  285.362676][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  285.529079][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  285.557375][T10551] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  285.704577][T10549] netdevsim netdevsim12 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  285.753401][T10549] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.836918][ T5295] kernel write not supported for file /sequencer2 (pid: 5295 comm: kworker/0:8)
[  286.513966][T10588] ptp ptp0: new virtual clock ptp1
[  286.525372][T10588] ptp ptp0: guarantee physical clock free running
[  286.893071][T10613] loop7: detected capacity change from 0 to 256
[  287.045556][T10626] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  287.258175][T10629] device team_slave_0 entered promiscuous mode
[  287.276072][T10627] device team_slave_0 left promiscuous mode
[  287.413884][T10638] tap0: tun_chr_ioctl cmd 1074025677
[  287.419459][T10638] tap0: linktype set to 1
[  287.731189][T10649] block nbd0: server does not support multiple connections per device.
[  287.762159][T10649] block nbd0: shutting down sockets
[  287.920873][T10660] mtrr: base(0x12000) is not aligned on a size(0x6000) boundary
[  288.026865][T10665] loop6: detected capacity change from 0 to 128
[  288.110622][T10665] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  288.152522][T10665] hpfs: filesystem error: improperly stopped
[  288.160838][T10665] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  288.178041][T10665] hpfs: You really don't want any checks? You are crazy...
[  288.191753][T10665] hpfs: hpfs_map_sector(): read error
[  288.197164][T10665] hpfs: code page support is disabled
[  288.224992][T10665] hpfs: hpfs_map_4sectors(): unaligned read
[  288.245319][T10665] hpfs: hpfs_map_4sectors(): unaligned read
[  288.264953][T10665] hpfs: filesystem error: unable to find root dir
[  288.408353][T10679] program syz.4.2116 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  288.537118][T10652] loop9: detected capacity change from 0 to 32768
[  288.549190][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2119'.
[  288.643932][T10652] XFS (loop9): Mounting V5 Filesystem
[  288.774095][T10652] XFS (loop9): Ending clean mount
[  288.953701][ T9389] XFS (loop9): Unmounting Filesystem
[  289.448404][T10729] netlink: 'syz.9.2128': attribute type 18 has an invalid length.
[  290.098052][T10763] loop6: detected capacity change from 0 to 1024
[  290.152260][T10763] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  290.173158][T10763] EXT4-fs (loop6): orphan cleanup on readonly fs
[  290.198101][T10763] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.2147: Freeing blocks not in datazone - block = 0, count = 4096
[  290.212182][ T5299] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  290.230590][T10763] EXT4-fs (loop6): 1 orphan inode deleted
[  290.252372][T10763] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  290.378064][T10763] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz.6.2147: path /91/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  290.403934][ T5299] usb 10-1: unable to get BOS descriptor or descriptor too short
[  290.406103][T10771] loop4: detected capacity change from 0 to 2048
[  290.427764][ T5299] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.475373][T10771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  290.476280][ T5299] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  290.495046][T10775] EXT4-fs error (device loop6): ext4_lookup:1860: inode #15: comm syz.6.2147: iget: bad i_size value: 1970324836974602
[  290.538489][ T5299] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  290.565233][ T5299] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  290.580877][T10763] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 17: comm syz.6.2147: path /91/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  290.616780][ T5299] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  290.659324][ T5299] usb 10-1: config 1 interface 1 has no altsetting 0
[  290.682414][T10763] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 18: comm syz.6.2147: path /91/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  290.689766][ T5299] usb 10-1: string descriptor 0 read error: -22
[  290.767213][ T5299] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  290.786201][ T5299] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.800456][T10763] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 19: comm syz.6.2147: path /91/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  290.820675][    C0] vkms_vblank_simulate: vblank timer overrun
[  290.892020][T10763] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 20: comm syz.6.2147: path /91/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  291.038508][T10787] sctp: [Deprecated]: syz.4.2152 (pid 10787) Use of int in maxseg socket option.
[  291.038508][T10787] Use struct sctp_assoc_value instead
[  291.101196][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  291.652162][ T5299] usb 10-1: 2:0: failed to get current value for ch 1 (-71)
[  291.675931][ T5299] usb 10-1: Warning! Unlikely big volume range (=19897), cval->res is probably wrong.
[  291.710151][ T5299] usb 10-1: [2] FU [Speaker Playback Volume] ch = 1, val = -19897/0/1
[  291.754705][   T26] audit: type=1400 audit(1791250734.574:60): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10817 comm="syz.7.2166" name="p" offset=48
[  291.805286][ T5299] usb 10-1: USB disconnect, device number 3
[  291.921558][T10824] loop4: detected capacity change from 0 to 1024
[  292.138244][T10831] loop6: detected capacity change from 0 to 1024
[  292.211616][T10831] EXT4-fs: Ignoring removed bh option
[  292.243277][T10831] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  292.291086][T10837] loop4: detected capacity change from 0 to 512
[  292.338110][T10831] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  292.353132][T10837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  292.412787][T10845] loop8: detected capacity change from 0 to 128
[  292.446839][T10837] fs-verity: sha256 using implementation "sha256-avx2"
[  292.449420][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  292.472696][T10837] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.2173: bg 0: bad block bitmap checksum
[  292.530609][T10845] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  292.615462][T10845] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.653688][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  292.713364][T10855] loop6: detected capacity change from 0 to 512
[  292.803660][T10855] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  292.849690][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  292.850525][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2180'.
[  292.885885][T10855] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.2176: inode #88: comm syz.6.2176: iget: illegal inode #
[  293.069988][T10855] EXT4-fs (loop6): Remounting filesystem read-only
[  293.079372][T10855] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2176: error while reading EA inode 88 err=-117
[  293.131587][T10855] EXT4-fs (loop6): Remounting filesystem read-only
[  293.139125][T10855] EXT4-fs (loop6): 1 orphan inode deleted
[  293.165839][T10874] loop8: detected capacity change from 0 to 164
[  293.171157][T10855] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  293.246929][T10855] EXT4-fs (loop6): shut down requested (2)
[  293.371034][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  293.595335][T10890] loop6: detected capacity change from 0 to 512
[  293.703864][T10890] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  293.741376][T10896] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2195'.
[  293.753873][T10890] FAT-fs (loop6): Filesystem has been set read-only
[  293.790262][T10890] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  293.927110][T10900] loop7: detected capacity change from 0 to 1024
[  294.034538][T10900] hfsplus: invalid length 32517 has been corrected to 255
[  294.112023][   T26] audit: type=1800 audit(1791250736.934:61): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2197" name="file1" dev="loop7" ino=20 res=0 errno=0
[  294.295945][T10900] hfsplus: b-tree write err: -5, ino 20
[  294.401002][T10922] netlink: 6 bytes leftover after parsing attributes in process `syz.9.2206'.
[  294.543613][T10925] tun0: tun_chr_ioctl cmd 1074025681
[  294.709875][T10930] loop9: detected capacity change from 0 to 4096
[  294.817074][T10938] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.227387][T10950] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2215: invalid indirect mapped block 256 (level 2)
[  295.377351][T10950] EXT4-fs (loop6): 2 truncates cleaned up
[  295.377472][T10958] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.406793][T10950] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  295.470949][T10961] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.541166][T10950] fscrypt (loop6, inode 18): Unsupported encryption flags (0x10)
[  295.708719][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  295.832355][T10968] syzkaller1: tun_chr_ioctl cmd 35108
[  296.294725][T10995] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  296.578357][T11007] set_capacity_and_notify: 3 callbacks suppressed
[  296.578487][T11007] loop9: detected capacity change from 0 to 512
[  296.682888][T11007] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  296.731620][T11007] FAT-fs (loop9): Filesystem has been set read-only
[  296.732298][T11009] loop8: detected capacity change from 0 to 128
[  296.748827][T11007] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 548)
[  296.811903][T11009] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  296.866909][T11009] hpfs: filesystem error: improperly stopped
[  296.889580][T11009] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  296.906528][T11009] hpfs: You really don't want any checks? You are crazy...
[  296.945743][T11009] hpfs: hpfs_map_sector(): read error
[  296.964591][T11009] hpfs: code page support is disabled
[  296.982690][T11009] hpfs: hpfs_map_4sectors(): unaligned read
[  297.003678][T11009] hpfs: hpfs_map_4sectors(): unaligned read
[  297.023125][T11009] hpfs: filesystem error: unable to find root dir
[  297.063464][T11009] hpfs: hpfs_map_4sectors(): unaligned read
[  297.086367][T11009] hpfs: hpfs_map_sector(): read error
[  297.119529][T11018] hpfs: hpfs_map_4sectors(): unaligned read
[  297.132202][T11000] loop4: detected capacity change from 0 to 32768
[  297.196563][T11000] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  297.247040][T11000] JBD2: Ignoring recovery information on journal
[  297.429244][T11000] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  297.498316][T11021] ipt_CLUSTERIP: Please specify destination IP
[  297.639973][T11035] (syz.4.2234,11035,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  297.844487][ T4277] ocfs2: Unmounting device (7,4) on (node local)
[  298.077774][T11051] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  298.099560][T11052] overlayfs: failed to set xattr on upper
[  298.116536][T11051] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  298.335860][T11056] netlink: 'syz.4.2251': attribute type 10 has an invalid length.
[  298.379572][T11056] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2251'.
[  299.765622][T11091] loop6: detected capacity change from 0 to 8
[  300.177378][T11105] loop4: detected capacity change from 0 to 256
[  300.624693][T11118] loop8: detected capacity change from 0 to 1024
[  300.712628][T11118] hfsplus: invalid length 32517 has been corrected to 255
[  300.755666][   T26] audit: type=1800 audit(1791250743.575:62): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2274" name="file1" dev="loop8" ino=20 res=0 errno=0
[  300.797817][T11118] hfsplus: b-tree write err: -5, ino 20
[  300.879044][   T22] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  300.941120][   T11] hfsplus: b-tree write err: -5, ino 20
[  301.045560][T11131] loop4: detected capacity change from 0 to 512
[  301.190140][   T22] usb 8-1: Using ep0 maxpacket: 16
[  301.225156][   T22] usb 8-1: config 0 has no interfaces?
[  301.252434][   T22] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  301.272732][   T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.301529][T11136] block2mtd: device name too long
[  301.306851][   T22] usb 8-1: Product: syz
[  301.322163][   T22] usb 8-1: Manufacturer: syz
[  301.334270][   T22] usb 8-1: SerialNumber: syz
[  301.356586][   T22] r8152-cfgselector 8-1: config 0 descriptor??
[  301.394980][T11131] EXT4-fs (loop4): 1 orphan inode deleted
[  301.425645][ T5470] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  301.440810][T11131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  301.484980][ T5470] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1
[  301.533740][T11131] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.617958][   T22] r8152-cfgselector 8-1: Unknown version 0x0000
[  301.640486][   T22] r8152-cfgselector 8-1: USB disconnect, device number 4
[  301.716074][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  301.795798][T11150] No such timeout policy "syz1"
[  302.033778][T11164] loop6: detected capacity change from 0 to 128
[  302.084327][T11164] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  303.247819][T11214] loop9: detected capacity change from 0 to 256
[  303.386792][T11183] loop6: detected capacity change from 0 to 32768
[  303.471708][T11183] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 scanned by syz.6.2298 (11183)
[  303.566650][T11183] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  303.615476][T11183] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  303.654245][T11183] BTRFS info (device loop6): setting nodatacow, compression disabled
[  303.683710][T11197] loop7: detected capacity change from 0 to 32768
[  303.684357][T11183] BTRFS info (device loop6): turning on flush-on-commit
[  303.720848][T11197] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  303.766742][T11183] BTRFS info (device loop6): using free space tree
[  303.783882][T11197] JBD2: Ignoring recovery information on journal
[  303.876789][T11197] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  304.013408][T11197] (syz.7.2302,11197,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  304.065530][T11241] loop9: detected capacity change from 0 to 128
[  304.137540][T11241] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  304.167888][T11183] BTRFS info (device loop6): enabling ssd optimizations
[  304.270226][T11241] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.282675][ T9283] ocfs2: Unmounting device (7,7) on (node local)
[  304.449572][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  304.502841][ T9105] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  305.216139][T11276] loop8: detected capacity change from 0 to 1024
[  305.258636][ T4350] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  305.278250][T11276] hfsplus: invalid btree flag
[  305.288155][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2314'.
[  305.321728][T11276] hfsplus: failed to load catalog file
[  305.424471][T11284] loop9: detected capacity change from 0 to 1024
[  305.448730][ T4350] usb 8-1: Using ep0 maxpacket: 8
[  305.466210][ T4350] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  305.515415][ T4350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.536711][T11284] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  305.548703][ T4350] pvrusb2: Hardware description: Terratec Grabster AV400
[  305.566058][ T4350] pvrusb2: **********
[  305.579584][ T4350] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  305.613682][ T4350] pvrusb2: Important functionality might not be entirely working.
[  305.639099][ T4350] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  305.670263][ T4350] pvrusb2: **********
[  305.708634][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  305.753928][ T2312] pvrusb2: Invalid write control endpoint
[  305.808849][T11298] loop8: detected capacity change from 0 to 256
[  305.872462][T11298] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  306.013125][T11305] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  306.038534][ T4350] usb 8-1: USB disconnect, device number 5
[  306.075621][ T2312] pvrusb2: Invalid write control endpoint
[  306.101030][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  306.145551][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  306.166942][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  306.177987][ T2312] pvrusb2: Device being rendered inoperable
[  306.196066][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  306.242422][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  306.277036][ T2312] pvrusb2: Attached sub-driver cx25840
[  306.312586][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  306.352587][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  306.975110][T11347] loop7: detected capacity change from 0 to 128
[  307.059734][T11347] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  307.084170][T11347] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  307.126033][T11347] fscrypt (loop7, inode 12): Direct key flag not allowed with different contents and filenames modes
[  307.369354][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  307.543466][T11367] ax25_connect(): syz.7.2352 uses autobind, please contact jreuter@yaina.de
[  307.996979][T11355] loop8: detected capacity change from 0 to 32768
[  308.027340][T11386] loop6: detected capacity change from 0 to 512
[  308.028268][T11384] nbd: socks must be embedded in a SOCK_ITEM attr
[  308.049077][T11384] block nbd0: shutting down sockets
[  308.098436][T11355] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  308.120560][T11386] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  308.147159][T11386] EXT4-fs (loop6): #blocks per group too big: 65535
[  308.150512][T11355] JBD2: Ignoring recovery information on journal
[  308.408958][T11355] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  308.556143][T11355] (syz.8.2346,11355,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  308.748399][ T9337] ocfs2: Unmounting device (7,8) on (node local)
[  309.036392][T11381] loop4: detected capacity change from 0 to 40427
[  309.064035][T11381] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64)
[  309.083602][T11381] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  309.128318][T11381] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff
[  309.156530][T11381] F2FS-fs (loop4): invalid crc value
[  309.230888][T11381] F2FS-fs (loop4): Found nat_bits in checkpoint
[  309.231038][T11424] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2372'.
[  309.435007][T11381] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  309.453971][T11381] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  309.589717][   T26] audit: type=1800 audit(1791250752.416:63): pid=11381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2357" name="file1" dev="loop4" ino=10 res=0 errno=0
[  309.644483][T11381] syz.4.2357: attempt to access beyond end of device
[  309.644483][T11381] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  309.809520][ T4277] syz-executor: attempt to access beyond end of device
[  309.809520][ T4277] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  310.104708][T11457] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2383'.
[  310.936375][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2400'.
[  311.017978][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  311.115906][T11486] loop7: detected capacity change from 0 to 128
[  311.134107][T11486] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  311.508025][   T11] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  311.613709][T11503] loop6: detected capacity change from 0 to 164
[  311.885253][T11512] loop7: detected capacity change from 0 to 1024
[  311.949720][T11515] loop6: detected capacity change from 0 to 1024
[  311.996619][T11515] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  312.104380][T11515] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  312.228076][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2404'.
[  312.420999][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  312.525160][T11529] loop4: detected capacity change from 0 to 4096
[  312.536960][T11502] loop8: detected capacity change from 0 to 32768
[  312.559080][   T26] audit: type=1400 audit(1791250755.387:64): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=11530 comm="syz.7.2407" name="p" offset=48
[  312.602693][T11529] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  312.657546][T11529] ntfs3: loop4: Failed to load $Extend.
[  312.661046][T11502] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  312.814234][   T26] audit: type=1800 audit(1791250755.637:65): pid=11529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2405" name="file1" dev="loop4" ino=30 res=0 errno=0
[  312.833153][T11543] program syz.7.2408 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  313.026446][ T9337] ocfs2: Unmounting device (7,8) on (node local)
[  313.392257][T11524] loop9: detected capacity change from 0 to 40427
[  313.435821][T11524] F2FS-fs (loop9): build fault injection attr: rate: 14, type: 0x3ffff
[  313.465719][T11524] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x30e4
[  313.526183][T11524] F2FS-fs (loop9): invalid crc value
[  313.551034][T11567] loop8: detected capacity change from 0 to 256
[  313.571333][T11524] F2FS-fs (loop9): Found nat_bits in checkpoint
[  313.667478][ T8627] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  313.706889][T11524] F2FS-fs (loop9) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00
[  313.783698][T11575] loop6: detected capacity change from 0 to 512
[  313.804408][T11524] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  313.857479][ T8627] usb 5-1: Using ep0 maxpacket: 8
[  313.869844][ T8627] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  313.874111][T11578] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2420'.
[  313.895614][T11524] F2FS-fs (loop9) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20
[  313.908399][ T8627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.929418][T11575] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  313.944741][T11524] F2FS-fs (loop9) : inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xcb/0x600
[  313.951190][ T8627] pvrusb2: Hardware description: Terratec Grabster AV400
[  313.963911][ T8627] pvrusb2: **********
[  313.968522][ T8627] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  313.980393][ T8627] pvrusb2: Important functionality might not be entirely working.
[  313.985528][T11575] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  313.989319][ T8627] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  314.008647][ T8627] pvrusb2: **********
[  314.021169][T11575] System zones: 0-1, 15-15, 18-18, 34-34
[  314.032401][T11575] EXT4-fs (loop6): orphan cleanup on readonly fs
[  314.043767][T11575] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  314.067681][T11575] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  314.117599][T11575] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  314.152862][ T2312] pvrusb2: Invalid write control endpoint
[  314.166489][T11575] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2419: bg 0: block 40: padding at end of block bitmap is not set
[  314.275655][T11575] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  314.357683][T11575] EXT4-fs (loop6): 1 truncate cleaned up
[  314.378732][T11575] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  314.397709][ T2312] pvrusb2: Invalid write control endpoint
[  314.420089][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  314.473274][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  314.500733][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  314.511528][T11575] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.2419: bad symlink.
[  314.534717][T11592] loop8: detected capacity change from 0 to 512
[  314.562271][ T2312] pvrusb2: Device being rendered inoperable
[  314.600682][   T33] usb 5-1: USB disconnect, device number 20
[  314.635391][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  314.643211][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  314.657741][ T2312] pvrusb2: Attached sub-driver cx25840
[  314.666972][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  314.677463][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  314.702708][T11592] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  314.736719][T11574] loop7: detected capacity change from 0 to 32768
[  314.752932][T11574] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.2418 (11574)
[  314.772846][T11592] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  314.798894][T11574] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  314.824335][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  314.836675][T11574] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  314.914979][T11574] BTRFS info (device loop7): use zlib compression, level 3
[  314.962246][T11574] BTRFS info (device loop7): using free space tree
[  314.964176][T11592] EXT4-fs error (device loop8): ext4_get_first_dir_block:3607: inode #12: comm syz.8.2423: directory missing '..'
[  315.299101][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  315.333267][T11574] BTRFS info (device loop7): enabling ssd optimizations
[  315.868612][ T9283] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  316.329976][   T26] audit: type=1400 audit(1791250759.157:66): apparmor="STATUS" operation="profile_load" info="parent does not exist" error=-2 profile="unconfined" name="//o" pid=11661 comm="syz.4.2438"
[  316.513090][T11669] MTRR 2 not used
[  316.525410][T11671] program syz.7.2432 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  316.737118][   T14] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  316.928404][   T14] usb 9-1: Using ep0 maxpacket: 8
[  316.940196][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  316.946538][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  316.960098][   T14] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  316.991058][   T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.025551][   T14] pvrusb2: Hardware description: Terratec Grabster AV400
[  317.056605][   T14] pvrusb2: **********
[  317.065946][   T14] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  317.082157][   T14] pvrusb2: Important functionality might not be entirely working.
[  317.091234][   T14] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  317.107698][   T14] pvrusb2: **********
[  317.251268][ T2312] pvrusb2: Invalid write control endpoint
[  317.317765][T11700] loop4: detected capacity change from 0 to 256
[  317.375889][T11700] exfat: Deprecated parameter 'utf8'
[  317.414759][T11690] loop7: detected capacity change from 0 to 40427
[  317.471830][T11700] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x82675e9d, utbl_chksum : 0xe619d30d)
[  317.502800][T11690] F2FS-fs (loop7): Corrupted extension count (327717 + 1 > 64)
[  317.527650][ T2312] pvrusb2: Invalid write control endpoint
[  317.533510][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  317.570197][T11690] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  317.589913][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  317.621938][T11690] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff
[  317.630923][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  317.663178][T11690] F2FS-fs (loop7): invalid crc value
[  317.746045][T11690] F2FS-fs (loop7): Found nat_bits in checkpoint
[  317.768243][ T2312] pvrusb2: Device being rendered inoperable
[  317.929809][T11690] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  317.989451][T11690] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  318.017068][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  318.021659][ T5297] usb 9-1: USB disconnect, device number 3
[  318.081959][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  318.099251][   T26] audit: type=1800 audit(1791250760.927:67): pid=11690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2442" name="file1" dev="loop7" ino=10 res=0 errno=0
[  318.149039][T11690] syz.7.2442: attempt to access beyond end of device
[  318.149039][T11690] loop7: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  318.157571][ T2312] pvrusb2: Attached sub-driver cx25840
[  318.236909][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  318.241838][T11715] loop4: detected capacity change from 0 to 512
[  318.275151][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  318.316643][ T9283] syz-executor: attempt to access beyond end of device
[  318.316643][ T9283] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  318.373857][T11715] EXT4-fs (loop4): 1 truncate cleaned up
[  318.388506][T11715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  318.473891][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  318.616158][T11730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2452'.
[  318.800453][T11738] loop6: detected capacity change from 0 to 512
[  318.874991][T11738] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.2456: iget: bad i_size value: 38620345925642
[  318.946642][T11738] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.2456: couldn't read orphan inode 15 (err -117)
[  318.975822][T11743] tmpfs: Bad value for 'uid'
[  318.996626][T11738] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  319.058672][T11738] fscrypt (loop6, inode 18): Mutually exclusive encryption flags (0x0c)
[  319.178948][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  319.436168][T11756] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2461'.
[  319.457912][T11717] loop9: detected capacity change from 0 to 40427
[  319.499024][T11717] F2FS-fs (loop9): invalid crc value
[  319.511003][T11756] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  319.559231][T11717] F2FS-fs (loop9): Found nat_bits in checkpoint
[  319.735015][T11717] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  319.964289][T11779] scsi_strcpy_devinfo: model string 'Vû"Œúâ¶L똯°‘öh`ADò6ã*œj.6$Fò{׋Ì	†Pf’ÎÙ9
[  319.964289][T11779] úC9‚ßq¥��%úŽ5–¦ýœµÑ
[  319.964289][T11779] ~‡2«H;iÿÅìóruû	;_ñ+@ج±$ÃüoLÝwU°Š07àxeUÀ�Šéä"ËÚ§ÁˆR^ÎlŽ!ÝL¹†3' is too long
[  320.060323][T11717] F2FS-fs (loop9): do_checkpoint failed err:-5, stop checkpoint
[  320.796592][T11815] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  321.014074][T11822] loop9: detected capacity change from 0 to 4096
[  321.093235][T11822] EXT4-fs (loop9): Test dummy encryption mode enabled
[  321.177846][T11822] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  321.302047][   T26] audit: type=1326 audit(1791250764.128:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11840 comm="syz.7.2486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68ef79e199 code=0x0
[  321.378685][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  321.447677][T11844] kAFS: bad VL server IP address
[  322.206196][T11838] loop8: detected capacity change from 0 to 32768
[  322.342590][T11838] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  322.455301][ T9337] ocfs2: Unmounting device (7,8) on (node local)
[  322.586546][    T7] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  322.786543][    T7] usb 8-1: Using ep0 maxpacket: 32
[  322.803198][    T7] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  322.848516][    T7] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  322.873700][    T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.926330][    T7] usb 8-1: Product: syz
[  322.930643][    T7] usb 8-1: Manufacturer: syz
[  322.935303][    T7] usb 8-1: SerialNumber: syz
[  323.235499][    T7] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  323.256817][    T7] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  323.291810][T11903] loop4: detected capacity change from 0 to 64
[  323.345896][    T7] usb 8-1: USB disconnect, device number 6
[  323.383593][T11899] loop9: detected capacity change from 0 to 4096
[  323.433861][T11899] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512)
[  323.612959][T11911] loop6: detected capacity change from 0 to 2048
[  323.669326][T11911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  324.135846][T11926] loop4: detected capacity change from 0 to 1024
[  324.202158][T11926] EXT4-fs: Ignoring removed bh option
[  324.256594][T11926] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  324.342119][T11926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  324.345192][T11936] Attempt to restore checkpoint with obsolete wellknown handles
[  324.505938][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  324.589849][T11943] loop7: detected capacity change from 0 to 512
[  324.762974][T11943] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  324.785082][T11955] loop6: detected capacity change from 0 to 256
[  324.799142][T11943] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.873145][T11955] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  324.953037][T11960] loop4: detected capacity change from 0 to 4096
[  325.045094][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  325.086733][T11965] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  325.124495][T11966] loop8: detected capacity change from 0 to 512
[  325.303910][T11966] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  325.330086][T11966] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.530623][T11976] loop4: detected capacity change from 0 to 4096
[  325.562733][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  325.665398][T11982] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  326.190875][T12006] loop9: detected capacity change from 0 to 256
[  326.524040][T12014] loop6: detected capacity change from 0 to 512
[  326.640465][T12014] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.2545: inode has both inline data and extents flags
[  326.656362][T12014] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.2545: couldn't read orphan inode 15 (err -117)
[  326.762975][T12014] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  326.942572][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  326.955930][ T4362] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  327.135837][ T4362] usb 5-1: Using ep0 maxpacket: 8
[  327.142794][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  327.155070][T12019] loop9: detected capacity change from 0 to 32768
[  327.185847][ T4362] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  327.225915][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.254587][T12019] 
[  327.254587][T12019]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  327.254587][T12019] 
[  327.272198][ T4362] usb 5-1: config 0 descriptor??
[  327.364018][T12011] loop8: detected capacity change from 0 to 32768
[  327.424701][T12019] JFS: metapage_get_blocks failed
[  327.464848][T12019] ERROR: (device loop9): release_metapage: write_one_page() failed
[  327.464848][T12019] 
[  327.498658][ T4362] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  327.529350][T12011] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  327.586124][T12019] ERROR: (device loop9): diWrite: ixpxd invalid
[  327.586124][T12019] 
[  327.595389][T12019] ERROR: (device loop9): txCommit: 
[  327.595389][T12019] 
[  327.651125][ T9389] 
[  327.651125][ T9389]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  327.651125][ T9389] 
[  327.675650][ T9389] 
[  327.675650][ T9389]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  327.675650][ T9389] 
[  327.748905][   T33] usb 5-1: USB disconnect, device number 21
[  327.772601][ T9337] ocfs2: Unmounting device (7,8) on (node local)
[  328.346382][T12052] rock: directory entry would overflow storage
[  328.405903][T12052] rock: sig=0x4f50, size=4, remaining=3
[  328.413005][T12052] iso9660: Corrupted directory entry in block 2 of inode 1472
[  328.468346][   T33] kernel write not supported for file /media4 (pid: 33 comm: kworker/1:1)
[  328.787047][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2561'.
[  328.812135][T12075] CacheFiles: Failed to register: -95
[  329.013211][T12082] overlayfs: failed to clone lowerpath
[  329.036003][T12087] Bluetooth: hci0: unsupported parameter 5135
[  329.076599][T12087] Bluetooth: hci0: unsupported parameter 8192
[  329.086985][T12087] Bluetooth: hci0: unsupported parameter 5135
[  329.093194][T12087] Bluetooth: hci0: unsupported parameter 8192
[  329.216636][T12096] set_capacity_and_notify: 1 callbacks suppressed
[  329.216651][T12096] loop6: detected capacity change from 0 to 512
[  329.305307][T12098] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2574'.
[  329.603965][T12109] loop9: detected capacity change from 0 to 512
[  329.621905][T12109] EXT4-fs (loop9): 1 truncate cleaned up
[  329.627959][T12109] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  329.644501][T12109] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.9.2579: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  329.783610][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  330.677768][T12153] loop7: detected capacity change from 0 to 2048
[  330.753448][T12153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.934273][T12132] loop8: detected capacity change from 0 to 40427
[  330.964082][T12132] F2FS-fs (loop8): invalid crc value
[  331.027399][T12132] F2FS-fs (loop8): Found nat_bits in checkpoint
[  331.305132][T12132] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  331.578808][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2600'.
[  331.603159][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2600'.
[  331.690626][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2600'.
[  331.725469][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2600'.
[  331.787105][T12188] loop7: detected capacity change from 0 to 512
[  331.800178][T12190] loop4: detected capacity change from 0 to 512
[  331.872057][T12188] EXT4-fs (loop7): 1 truncate cleaned up
[  331.915316][T12188] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  331.985280][T12190] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  332.023229][T12188] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2602: bg 0: block 465: padding at end of block bitmap is not set
[  332.086173][T12190] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.2603: bad orphan inode 131083
[  332.171400][T12190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  332.239728][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  332.251522][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  333.589206][T12223] loop9: detected capacity change from 0 to 32768
[  333.676116][T12223] XFS (loop9): Mounting V5 Filesystem
[  333.762321][T12254] loop8: detected capacity change from 0 to 1024
[  333.763665][T12223] XFS (loop9): Ending clean mount
[  333.784376][T12256] tmpfs: Bad value for 'uid'
[  333.832818][T12254] EXT4-fs: Ignoring removed orlov option
[  333.902747][T12233] loop6: detected capacity change from 0 to 32768
[  333.954907][ T9389] XFS (loop9): Unmounting Filesystem
[  334.006345][T12254] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  334.344785][T12254] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  334.433782][T12268] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2620'.
[  334.703182][T12272] hub 5-0:1.0: USB hub found
[  334.733236][T12272] hub 5-0:1.0: 1 port detected
[  334.838818][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  335.439998][T12300] device erspan0 entered promiscuous mode
[  336.863272][T12374] loop4: detected capacity change from 0 to 256
[  337.740358][T12385] loop9: detected capacity change from 0 to 40427
[  337.780651][T12385] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x3ffff
[  337.800095][T12385] F2FS-fs (loop9): invalid crc value
[  337.845534][T12385] F2FS-fs (loop9): Found nat_bits in checkpoint
[  337.974155][T12416] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  337.995170][T12385] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  338.383200][ T9389] syz-executor: attempt to access beyond end of device
[  338.383200][ T9389] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  338.516666][T12440] loop7: detected capacity change from 0 to 1024
[  338.555038][T12440] EXT4-fs: Ignoring removed orlov option
[  338.650777][T12440] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  338.736065][T12440] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  339.042657][T12429] loop4: detected capacity change from 0 to 32768
[  339.054675][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  339.201441][T12429] XFS (loop4): Mounting V5 Filesystem
[  339.288750][T12429] XFS (loop4): Ending clean mount
[  339.299016][T12466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  339.306457][T12466] IPv6: NLM_F_CREATE should be set when creating new route
[  339.314095][   T26] audit: type=1800 audit(1791250782.140:69): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2669" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  339.334718][    C0] vkms_vblank_simulate: vblank timer overrun
[  339.403559][ T4277] XFS (loop4): Unmounting Filesystem
[  339.657894][T12480] loop8: detected capacity change from 0 to 512
[  339.713263][T12480] EXT4-fs (loop8): 1 truncate cleaned up
[  339.763934][T12480] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  339.842598][T12484] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2681'.
[  339.870897][T12480] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2680: bg 0: block 465: padding at end of block bitmap is not set
[  339.942416][T12487] loop9: detected capacity change from 0 to 1024
[  339.961674][T12491] loop6: detected capacity change from 0 to 128
[  340.002241][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  340.128883][T12491] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  340.170158][T12491] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  340.248317][T12499] device netdevsim0 entered promiscuous mode
[  340.318184][T12499] device netdevsim0 left promiscuous mode
[  340.368365][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  340.408306][T12504] loop8: detected capacity change from 0 to 512
[  340.421221][T12502] delete_channel: no stack
[  340.440563][T12504] EXT4-fs: Ignoring removed oldalloc option
[  340.546107][T12504] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  340.603774][T12504] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[  340.767808][T12504] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[  340.948866][T12526] program syz.9.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  340.963895][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  341.140046][T12533] kAFS: bad VL server IP address
[  341.247766][T12536] vivid-007: disconnect
[  341.252900][T12536] vivid-007: reconnect
[  341.348001][T12539] MTRR 2 not used
[  341.448447][T12542] loop4: detected capacity change from 0 to 8192
[  341.518740][T12542]  loop4: p1 p2 p4[EZD]
[  341.541654][T12542] loop4: p4 start 201326592 is beyond EOD, truncated
[  341.604760][T12530] loop8: detected capacity change from 0 to 32768
[  341.690668][T12530] XFS (loop8): Mounting V5 Filesystem
[  341.779042][T12530] XFS (loop8): Ending clean mount
[  341.821660][T12563] batman_adv: batadv0: Adding interface: macsec2
[  341.858924][T12563] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.941302][ T9337] XFS (loop8): Unmounting Filesystem
[  342.016846][T12563] batman_adv: batadv0: Interface activated: macsec2
[  342.076542][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  342.133411][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  342.405946][T12579] loop9: detected capacity change from 0 to 512
[  342.467608][T12579] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2
[  342.488094][T12579] EXT4-fs error (device loop9): ext4_iget_extra_inode:4763: inode #15: comm syz.9.2706: corrupted in-inode xattr
[  342.565888][T12579] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2706: couldn't read orphan inode 15 (err -117)
[  342.588228][T12579] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  342.674162][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  342.897870][T12594] batman_adv: Routing algorithm 'B' is not supported
[  343.040438][T12577] loop7: detected capacity change from 0 to 40427
[  343.085439][T12577] F2FS-fs (loop7): invalid crc value
[  343.130960][T12577] F2FS-fs (loop7): Found nat_bits in checkpoint
[  343.246859][T12612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2716'.
[  343.271895][T12577] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  343.313772][T12615] loop9: detected capacity change from 0 to 512
[  343.352012][T12615] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  343.409700][T12615] EXT4-fs error (device loop9): ext4_init_orphan_info:623: comm syz.9.2717: orphan file block 0: bad magic
[  343.532162][T12615] EXT4-fs (loop9): mount failed
[  343.615443][T12615] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2717'.
[  343.918651][T12633] kAFS: Invalid Command on /proc/fs/afs/cells file
[  344.244654][T12649] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.846155][T12669] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  344.911229][T12648] loop9: detected capacity change from 0 to 32768
[  344.948001][T12648] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.2727 (12648)
[  345.008831][T12648] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  345.052576][T12648] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  345.080366][T12648] BTRFS info (device loop9): setting nodatacow, compression disabled
[  345.113400][T12648] BTRFS info (device loop9): force clearing of disk cache
[  345.137013][T12648] BTRFS info (device loop9): turning off barriers
[  345.172668][T12648] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_LZO (0x8)
[  345.205683][T12648] BTRFS info (device loop9): use lzo compression, level 0
[  345.231006][T12648] BTRFS info (device loop9): disabling free space tree
[  345.254934][T12648] BTRFS info (device loop9): enabling ssd optimizations
[  345.281096][T12648] BTRFS info (device loop9): using spread ssd allocation scheme
[  345.320612][T12648] BTRFS info (device loop9): not using ssd optimizations
[  345.336754][T12648] BTRFS info (device loop9): not using spread ssd allocation scheme
[  345.674333][T12648] BTRFS info (device loop9): rebuilding free space tree
[  345.737799][T12709] Bluetooth: hci0: unsupported parameter 5161
[  345.758521][T12709] Bluetooth: hci0: unsupported parameter 8192
[  345.773988][T12648] BTRFS info (device loop9): disabling free space tree
[  345.781970][T12648] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  345.822823][T12709] Bluetooth: hci0: unsupported parameter 5161
[  345.841984][T12709] Bluetooth: hci0: unsupported parameter 8192
[  345.843616][T12648] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  345.904388][T12648] BTRFS info (device loop9): checking UUID tree
[  345.965064][T12712] loop7: detected capacity change from 0 to 4096
[  346.471473][ T9389] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  346.902902][T12741] loop4: detected capacity change from 0 to 64
[  347.340071][T12752] loop8: detected capacity change from 0 to 2048
[  347.418470][T12752] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  347.442878][T12761] loop6: detected capacity change from 0 to 1024
[  347.508045][T12763] loop7: detected capacity change from 0 to 7
[  347.518323][ T4264] Dev loop7: unable to read RDB block 7
[  347.521033][T12761] EXT4-fs: Ignoring removed nomblk_io_submit option
[  347.524069][ T4264]  loop7: unable to read partition table
[  347.524221][ T4264] loop7: partition table beyond EOD, truncated
[  347.563153][T12763] Dev loop7: unable to read RDB block 7
[  347.573758][T12761] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  347.587381][ T9258] loop: Write error at byte offset 2, length 3584.
[  347.622287][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  347.631990][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  347.663400][T12761] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  347.703641][T12763]  loop7: unable to read partition table
[  347.711212][T12763] loop7: partition table beyond EOD, truncated
[  347.731346][T12761] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  347.739845][T12763] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CîjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`µ4FLQkÝŠ5) failed (rc=-5)
[  347.763506][T12761] System zones: 0-1, 3-36
[  347.776293][T12761] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  347.815847][ T3638] Dev loop7: unable to read RDB block 7
[  347.821588][ T3638]  loop7: unable to read partition table
[  347.843633][ T3638] loop7: partition table beyond EOD, truncated
[  348.054235][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  348.169375][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  348.285021][T12791] program syz.7.2768 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  348.306675][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'.
[  348.591455][T12810] loop6: detected capacity change from 0 to 1024
[  348.874055][T12821] loop4: detected capacity change from 0 to 128
[  349.075398][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2781'.
[  349.193317][ T5483] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  349.272728][T12837] loop4: detected capacity change from 0 to 512
[  349.345194][T12837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  349.393246][ T5483] usb 8-1: Using ep0 maxpacket: 8
[  349.400716][ T5483] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  349.413328][T12837] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.418954][ T5483] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  349.434700][ T5483] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  349.444700][ T5483] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  349.454877][ T5483] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  349.467975][ T5483] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  349.477188][ T5483] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.674740][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  349.708120][ T5483] usb 8-1: GET_CAPABILITIES returned 0
[  349.718296][ T5483] usbtmc 8-1:16.0: can't read capabilities
[  349.769222][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec2
[  349.811268][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.838060][T12853] batman_adv: batadv0: Adding interface: macsec1
[  349.850221][T12853] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.883321][T12853] batman_adv: batadv0: Interface activated: macsec1
[  349.986409][ T5483] usb 8-1: USB disconnect, device number 7
[  350.190429][T12869] loop9: detected capacity change from 0 to 128
[  350.239940][T12869] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  350.257383][T12871] loop6: detected capacity change from 0 to 512
[  350.264619][T12869] hpfs: filesystem error: improperly stopped
[  350.284441][T12869] hpfs: You really don't want any checks? You are crazy...
[  350.349697][T12869] hpfs: hpfs_map_sector(): read error
[  350.358239][T12871] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  350.374595][T12869] hpfs: code page support is disabled
[  350.388551][T12871] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.408683][T12869] hpfs: hpfs_map_4sectors(): unaligned read
[  350.423373][T12869] hpfs: hpfs_map_4sectors(): unaligned read
[  350.436240][T12869] hpfs: filesystem error: unable to find root dir
[  350.507941][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  350.784545][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2800'.
[  350.932760][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec2
[  350.978356][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.991080][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1
[  351.006809][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.054456][T12893] batman_adv: batadv0: Adding interface: macsec1
[  351.073071][T12893] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.119494][T12906] loop6: detected capacity change from 0 to 256
[  351.125041][T12893] batman_adv: batadv0: Interface activated: macsec1
[  351.230086][   T14] kernel read not supported for file /video9 (pid: 14 comm: kworker/0:1)
[  351.393222][   T14] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  351.569519][T12921] loop8: detected capacity change from 0 to 1024
[  351.612528][   T14] usb 5-1: unable to read config index 0 descriptor/start: -71
[  351.633172][   T14] usb 5-1: can't read configurations, error -71
[  351.655218][T12926] loop9: detected capacity change from 0 to 512
[  351.673067][T12921] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  351.694602][T12926] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  351.734567][T12930] device erspan0 entered promiscuous mode
[  351.770757][T12921] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  351.783297][T12921] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  351.829889][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2817'.
[  351.888506][T12926] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  351.915576][T12926] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.973052][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  352.297024][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  352.891978][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2833'.
[  352.926610][T12986] loop8: detected capacity change from 0 to 256
[  353.020568][T12986] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  353.114003][T12972] loop7: detected capacity change from 0 to 32768
[  353.160124][T12972] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2828 (12972)
[  353.233711][T12972] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  353.251937][T12972] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  353.274669][T12972] BTRFS info (device loop7): setting nodatacow, compression disabled
[  353.280333][T12998] loop6: detected capacity change from 0 to 512
[  353.302873][T12972] BTRFS info (device loop7): force clearing of disk cache
[  353.333278][T12972] BTRFS info (device loop7): turning off barriers
[  353.341636][T12972] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8)
[  353.379681][T12972] BTRFS info (device loop7): use lzo compression, level 0
[  353.396697][T12972] BTRFS info (device loop7): disabling free space tree
[  353.453489][T12972] BTRFS info (device loop7): enabling ssd optimizations
[  353.460500][T12972] BTRFS info (device loop7): using spread ssd allocation scheme
[  353.512753][T12972] BTRFS info (device loop7): not using ssd optimizations
[  353.531396][T12972] BTRFS info (device loop7): not using spread ssd allocation scheme
[  353.932087][T12972] BTRFS info (device loop7): rebuilding free space tree
[  353.979184][T12972] BTRFS info (device loop7): disabling free space tree
[  354.002661][T12972] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  354.021331][T13036] netdevsim netdevsim10 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  354.031973][T13036] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.040716][T12972] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  354.115115][T12972] BTRFS info (device loop7): checking UUID tree
[  354.350832][ T9283] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  354.369268][T13055] loop4: detected capacity change from 0 to 512
[  354.492401][T13055] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  354.633499][T13055] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  354.656343][T13065] netlink: 'syz.6.2856': attribute type 5 has an invalid length.
[  354.694620][T13055] EXT4-fs (loop4): orphan cleanup on readonly fs
[  354.792131][T13055] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  354.823445][T13055] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  354.852565][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  354.870377][T13055] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  354.908157][T13072] loop7: detected capacity change from 0 to 1024
[  354.922701][T13055] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2852: bg 0: block 15: invalid block bitmap
[  354.960853][T13055] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  354.988115][   T26] audit: type=1800 audit(1791250797.812:70): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2858" name="features" dev="configfs" ino=62677 res=0 errno=0
[  355.004396][T13055] EXT4-fs (loop4): 1 truncate cleaned up
[  355.034046][T13072] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  355.059235][T13055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  355.103341][T13072] EXT4-fs (loop7): Errors on filesystem, clearing orphan list.
[  355.139159][T13072] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  355.148937][T13077] tap0: tun_chr_ioctl cmd 1074025677
[  355.166910][T13077] tap0: linktype set to 768
[  355.179573][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  355.398656][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  355.478649][T13090] loop8: detected capacity change from 0 to 8
[  355.604653][T13094] db_root: cannot open: ./m
[  355.804569][T13101] loop7: detected capacity change from 0 to 512
[  355.849479][T13101] EXT4-fs: inline encryption not supported
[  355.913373][T13101] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.2868: inode #1: comm syz.7.2868: iget: illegal inode #
[  356.033100][T13101] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.2868: error while reading EA inode 1 err=-117
[  356.086491][T13101] EXT4-fs (loop7): 1 orphan inode deleted
[  356.122452][T13101] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  356.209748][T13101] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2868: invalid indirect mapped block 234881024 (level 0)
[  356.392083][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  356.394349][T13124] loop4: detected capacity change from 0 to 1024
[  356.501559][T13124] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  356.527866][T13124] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  356.536188][T13124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  356.598886][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  356.784909][T13136] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2877'.
[  357.055965][T13153] loop6: detected capacity change from 0 to 1024
[  357.174182][T13153] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  357.343724][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  357.448667][T13167] netlink: 236 bytes leftover after parsing attributes in process `syz.9.2899'.
[  358.625982][T13217] program syz.4.2903 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  359.250468][T13225] loop4: detected capacity change from 0 to 32768
[  359.291537][T13225] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2906 (13225)
[  359.354542][T13225] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  359.384367][T13225] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  359.408848][T13225] BTRFS info (device loop4): setting nodatacow, compression disabled
[  359.461390][T13225] BTRFS info (device loop4): force clearing of disk cache
[  359.474031][T13225] BTRFS info (device loop4): turning off barriers
[  359.480510][T13225] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  359.531155][T13225] BTRFS info (device loop4): use lzo compression, level 0
[  359.554009][T13225] BTRFS info (device loop4): disabling free space tree
[  359.585576][T13225] BTRFS info (device loop4): enabling ssd optimizations
[  359.610203][T13225] BTRFS info (device loop4): using spread ssd allocation scheme
[  359.638579][T13225] BTRFS info (device loop4): not using ssd optimizations
[  359.668180][T13225] BTRFS info (device loop4): not using spread ssd allocation scheme
[  359.726124][T13263] loop7: detected capacity change from 0 to 256
[  359.917473][T13282] program syz.7.2921 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  359.948012][T13225] BTRFS info (device loop4): rebuilding free space tree
[  359.973369][T13279] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  359.981152][T13279] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  360.032853][T13225] BTRFS info (device loop4): disabling free space tree
[  360.052173][T13225] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  360.102068][T13225] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  360.132063][ T4289] Bluetooth: hci2: command 0x0c1a tx timeout
[  360.137065][T13184] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  360.155763][T13225] BTRFS info (device loop4): checking UUID tree
[  360.427237][ T4277] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  360.817280][T13293] loop9: detected capacity change from 0 to 32768
[  360.899818][T13293] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  360.919274][T13184] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  360.952897][T13293] JBD2: Ignoring recovery information on journal
[  361.049734][T13293] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  361.183728][T13184] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  361.194477][T13184] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  361.226286][T13184] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  361.247222][T13184] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  361.307506][T13184] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  361.347504][T13184] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  361.372062][T13184] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  361.407709][T13184] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  361.431091][T13184] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  361.436043][ T9389] ocfs2: Unmounting device (7,9) on (node local)
[  361.452068][T13184] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  361.523966][T13184] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  361.581267][ T4263] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop4 scanned by udevd (4263)
[  362.020740][T13329] loop6: detected capacity change from 0 to 4096
[  362.134758][T13329] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  362.178078][T13329] UDF-fs: Scanning with blocksize 512 failed
[  362.209965][T13329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  362.219135][ T4289] Bluetooth: hci2: command 0x0406 tx timeout
[  362.288773][T13329] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[  362.324005][T13329] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0
[  362.435847][T13320] loop7: detected capacity change from 0 to 32768
[  362.694762][ T9105] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[  362.801966][ T9105] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0
[  362.844870][ T9105] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[  362.898872][ T9105] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0
[  363.068251][T13358] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2940'.
[  363.240550][T13363] loop6: detected capacity change from 0 to 512
[  363.251780][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout
[  363.258006][ T4289] Bluetooth: hci4: command 0x0c1a tx timeout
[  363.282561][T13363] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  363.412215][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout
[  363.491605][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout
[  363.710256][T13379] bonding: bond0 is being deleted...
[  363.945416][T13389] loop8: detected capacity change from 0 to 128
[  363.991678][T13389] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  364.024171][T13389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  364.107015][   T26] audit: type=1800 audit(1791250806.933:71): pid=13389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2954" name="file1" dev="loop8" ino=94 res=0 errno=0
[  364.142081][T13379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.183942][T13400] loop6: detected capacity change from 0 to 128
[  364.190651][T13379] device bond_slave_0 left promiscuous mode
[  364.266844][T13400] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  364.278284][T13379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.289275][T13400] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  364.314789][T13400] fscrypt (loop6, inode 12): Unsupported encryption flags (0x10)
[  364.383453][T13379] device bond_slave_1 left promiscuous mode
[  364.409358][T13379] bond0 (unregistering): Released all slaves
[  364.410678][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  364.916271][T13425] tap0: tun_chr_ioctl cmd 1074025677
[  364.927552][T13428] loop6: detected capacity change from 0 to 2048
[  364.941544][T13425] tap0: linktype set to 776
[  364.979146][T13428] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  365.049498][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  365.154335][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2969'.
[  365.161644][ T5476] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  365.189451][   T26] audit: type=1400 audit(1791250808.013:72): apparmor="STATUS" operation="profile_load" profile="unconfined" name=222F6F pid=13435 comm="syz.4.2970"
[  365.331510][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  365.331584][ T4273] Bluetooth: hci3: command 0x0406 tx timeout
[  365.371573][ T5476] usb 8-1: Using ep0 maxpacket: 16
[  365.384126][ T5476] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  365.403531][ T5476] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.412231][ T5476] usb 8-1: Product: syz
[  365.416496][ T5476] usb 8-1: Manufacturer: syz
[  365.421169][ T5476] usb 8-1: SerialNumber: syz
[  365.491613][ T4273] Bluetooth: hci1: command 0x0406 tx timeout
[  365.573180][ T4273] Bluetooth: hci0: command 0x0406 tx timeout
[  365.649560][ T5476] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  365.649950][T13458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2978'.
[  365.674838][ T5476] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  365.695735][ T5476] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  365.715788][ T5476] usb 8-1: media controller created
[  365.748417][T13458] device vlan2 entered promiscuous mode
[  365.771559][T13458] device dummy0 entered promiscuous mode
[  365.781327][ T5476] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  366.043927][ T5476] zl10353_read_register: readreg error (reg=127, ret==-110)
[  366.108102][T13476] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  366.136240][ T5476] dvb_usb_gl861: probe of 8-1:157.0 failed with error -5
[  366.174249][ T5476] usb 8-1: USB disconnect, device number 8
[  366.394806][T13485] loop6: detected capacity change from 0 to 512
[  366.468602][T13485] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  366.514691][T13485] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  366.532700][T13485] EXT4-fs (loop6): orphan cleanup on readonly fs
[  366.542817][T13485] Quota error (device loop6): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  366.578241][T13494] block2mtd: illegal erase size
[  366.581502][T13485] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  366.604666][T13485] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  366.639476][T13485] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.2987: bg 0: block 15: invalid block bitmap
[  366.761294][T13485] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  366.807411][T13485] EXT4-fs (loop6): 1 truncate cleaned up
[  366.831234][T13485] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  366.985095][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  367.177746][T13514] loop4: detected capacity change from 0 to 512
[  367.295145][T13514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  367.311371][T13514] ext4 filesystem being mounted at /631/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  367.411127][ T4273] Bluetooth: hci3: command 0x0406 tx timeout
[  367.571182][ T4289] Bluetooth: hci1: command 0x0406 tx timeout
[  367.596126][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  367.625850][T13512] loop6: detected capacity change from 0 to 32768
[  367.651126][ T4273] Bluetooth: hci0: command 0x0406 tx timeout
[  367.734438][T13512] XFS (loop6): Mounting V5 Filesystem
[  367.847861][T13512] XFS (loop6): Ending clean mount
[  367.860327][   T26] audit: type=1400 audit(1791250810.683:73): apparmor="STATUS" operation="profile_replace" profile="unconfined" name=222F6F pid=13536 comm="syz.7.3001"
[  368.029395][ T9105] XFS (loop6): Unmounting Filesystem
[  368.182481][T13553] loop7: detected capacity change from 0 to 16
[  368.200862][T13553] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  368.221018][   T14] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  368.341707][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3009'.
[  368.401005][   T14] usb 9-1: Using ep0 maxpacket: 8
[  368.410170][   T14] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  368.431141][   T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.439412][   T14] usb 9-1: Product: syz
[  368.444246][   T14] usb 9-1: Manufacturer: syz
[  368.471108][   T14] usb 9-1: SerialNumber: syz
[  368.488921][   T14] usb 9-1: config 0 descriptor??
[  368.508480][T13560] 9pnet: p9_errstr2errno: server reported unknown error 
[  368.698867][   T14] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  368.751433][   T14] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71
[  368.787410][   T14] usb 9-1: USB disconnect, device number 4
[  369.018477][T13562] loop6: detected capacity change from 0 to 32768
[  369.101113][T13562] JBD2: Ignoring recovery information on journal
[  369.182916][T13562] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  369.422611][ T9105] ocfs2: Unmounting device (7,6) on (node local)
[  369.537362][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3022'.
[  369.569662][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3022'.
[  369.753830][T13582] loop7: detected capacity change from 0 to 32768
[  369.790018][T13585] loop4: detected capacity change from 0 to 32768
[  369.919192][T13582] XFS (loop7): Mounting V5 Filesystem
[  369.935314][T13585] XFS (loop4): Mounting V5 Filesystem
[  370.009353][T13582] XFS (loop7): Ending clean mount
[  370.054562][T13585] XFS (loop4): Ending clean mount
[  370.080474][ T9283] XFS (loop7): Unmounting Filesystem
[  370.351468][ T4277] XFS (loop4): Unmounting Filesystem
[  370.637938][T13627] loop9: detected capacity change from 0 to 128
[  370.703163][T13627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  370.717364][T13619] loop6: detected capacity change from 0 to 32768
[  370.737614][T13627] System zones: 1-3, 19-19, 35-36
[  370.759675][T13627] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  370.769372][T13627] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  370.798631][T13619] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  370.838867][T13619] JBD2: Ignoring recovery information on journal
[  370.865787][T13627] EXT4-fs warning (device loop9): ext4_group_extend:1870: can't shrink FS - resize aborted
[  370.908161][T13619] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  371.002743][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  371.040293][ T9105] ocfs2: Unmounting device (7,6) on (node local)
[  371.120753][ T5486] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  371.313657][ T5486] usb 8-1: Using ep0 maxpacket: 32
[  371.322747][ T5486] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  371.349199][ T5486] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.372128][ T5486] usb 8-1: config 0 descriptor??
[  371.387784][ T5486] gspca_main: sunplus-2.14.0 probing 041e:400b
[  372.132560][ T5476] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  372.196939][ T5486] gspca_sunplus: reg_w_riv err -71
[  372.210993][ T5486] sunplus: probe of 8-1:0.0 failed with error -71
[  372.230819][ T5486] usb 8-1: USB disconnect, device number 9
[  372.313861][T13674] loop8: detected capacity change from 0 to 256
[  372.331994][ T5476] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  372.344587][T13674] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  372.349311][ T5476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.393809][ T5476] usb 5-1: config 0 descriptor??
[  372.415392][ T5476] cp210x 5-1:0.0: cp210x converter detected
[  372.510603][T13678] loop9: detected capacity change from 0 to 512
[  372.549502][T13678] EXT4-fs (loop9): Test dummy encryption mode enabled
[  372.613250][T13684] netlink: 'syz.8.3050': attribute type 12 has an invalid length.
[  372.630490][T13684] netlink: 'syz.8.3050': attribute type 29 has an invalid length.
[  372.636724][T13678] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.3048: inode has both inline data and extents flags
[  372.642589][T13684] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3050'.
[  372.661918][T13684] netlink: 'syz.8.3050': attribute type 3 has an invalid length.
[  372.664283][T13678] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.3048: couldn't read orphan inode 15 (err -117)
[  372.675176][T13684] netlink: 'syz.8.3050': attribute type 2 has an invalid length.
[  372.689356][T13684] netlink: 35 bytes leftover after parsing attributes in process `syz.8.3050'.
[  372.754443][T13678] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  372.804896][ T5476] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  372.812892][T13689] bonding: bond0 is being deleted...
[  372.944652][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  372.983489][T13689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.036650][ T5476] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71
[  373.044978][ T5476] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  373.079499][ T5476] usb 5-1: cp210x converter now attached to ttyUSB0
[  373.098210][ T5476] usb 5-1: USB disconnect, device number 24
[  373.130617][T13689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.152727][ T5476] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  373.175335][ T5476] cp210x 5-1:0.0: device disconnected
[  373.206538][T13689] bond0 (unregistering): Released all slaves
[  373.446794][T13706] loop7: detected capacity change from 0 to 1024
[  373.457134][T13707] MTRR 2 not used
[  373.504004][T13706] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  373.561526][T13706] EXT4-fs (loop7): orphan cleanup on readonly fs
[  373.601007][T13706] EXT4-fs error (device loop7): ext4_free_blocks:6220: comm syz.7.3059: Freeing blocks not in datazone - block = 0, count = 4096
[  373.635140][T13706] EXT4-fs (loop7): Remounting filesystem read-only
[  373.642998][T13706] EXT4-fs (loop7): 1 orphan inode deleted
[  373.649038][T13706] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  373.750515][   T33] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  373.831678][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  373.940321][   T33] usb 10-1: Using ep0 maxpacket: 8
[  373.947155][   T33] usb 10-1: config 0 has no interfaces?
[  373.962418][   T33] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  373.981829][   T33] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.997444][   T33] usb 10-1: Product: syz
[  374.002797][   T33] usb 10-1: Manufacturer: syz
[  374.007512][   T33] usb 10-1: SerialNumber: syz
[  374.034350][   T33] usb 10-1: config 0 descriptor??
[  374.047624][T13729] loop6: detected capacity change from 0 to 512
[  374.059924][T13729] EXT4-fs: Ignoring removed nomblk_io_submit option
[  374.080628][T13729] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  374.097151][T13729] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.3069: bad orphan inode 131083
[  374.113218][T13729] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  374.128607][T13729] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.3069: Logical block already allocated
[  374.150670][T13729] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.3069: Logical block already allocated
[  374.186046][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  374.244072][ T5483] usb 10-1: USB disconnect, device number 4
[  374.289020][T13736] bonding: bond0 is being deleted...
[  374.369319][T13736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  374.386661][T13736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.405984][T13736] bond0 (unregistering): Released all slaves
[  375.091653][T13760] loop7: detected capacity change from 0 to 32768
[  375.138863][T13760] XFS (loop7): Mounting V5 Filesystem
[  375.196550][T13756] loop9: detected capacity change from 0 to 40427
[  375.224818][T13760] XFS (loop7): Ending clean mount
[  375.237866][T13756] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  375.256230][T13756] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  375.318097][T13756] F2FS-fs (loop9): Found nat_bits in checkpoint
[  375.390589][ T9283] XFS (loop7): Unmounting Filesystem
[  375.499097][T13756] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  375.509935][T13756] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  375.804398][T13785] loop7: detected capacity change from 0 to 512
[  375.862562][T13785] EXT4-fs (loop7): 1 truncate cleaned up
[  375.891640][T13785] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  376.046319][T13785] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3087: bg 0: block 465: padding at end of block bitmap is not set
[  376.087884][T13785] EXT4-fs (loop7): Remounting filesystem read-only
[  376.093524][T13796] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3087: bg 0: block 465: padding at end of block bitmap is not set
[  376.167333][T13796] EXT4-fs (loop7): Remounting filesystem read-only
[  376.174192][T13796] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  376.192290][T13796] EXT4-fs (loop7): Remounting filesystem read-only
[  376.203484][T13796] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3087: invalid indirect mapped block 234881024 (level 0)
[  376.237054][T13796] EXT4-fs (loop7): Remounting filesystem read-only
[  376.322331][T13800] bridge0: port 2(bridge_slave_1) entered listening state
[  376.347257][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  376.363968][T13800] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.817070][T13808] loop4: detected capacity change from 0 to 32768
[  376.922186][T13808] XFS (loop4): Mounting V5 Filesystem
[  376.933596][T13819] loop8: detected capacity change from 0 to 512
[  377.002898][T13819] EXT4-fs (loop8): Test dummy encryption mode enabled
[  377.057746][T13808] XFS (loop4): Ending clean mount
[  377.076848][T13819] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.3100: inode has both inline data and extents flags
[  377.129470][T13808] XFS (loop4): User initiated shutdown received.
[  377.146073][T13808] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  377.167164][T13819] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.3100: couldn't read orphan inode 15 (err -117)
[  377.181512][T13808] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  377.192309][T13819] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  377.203112][T13829] sctp: [Deprecated]: syz.7.3102 (pid 13829) Use of struct sctp_assoc_value in delayed_ack socket option.
[  377.203112][T13829] Use struct sctp_sack_info instead
[  377.271543][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  377.302768][ T4277] XFS (loop4): Unmounting Filesystem
[  377.593241][T13838] bonding: bond0 is being deleted...
[  377.855793][T13838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.933220][T13838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.981212][T11667] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  378.062758][T13838] bond0 (unregistering): Released all slaves
[  378.151482][T13848] loop9: detected capacity change from 0 to 512
[  378.165411][T13848] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  378.180341][T11667] usb 8-1: Using ep0 maxpacket: 16
[  378.189987][T11667] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 225, changing to 7
[  378.232052][T11667] usb 8-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[  378.248313][T11667] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.263097][T11667] usb 8-1: Product: syz
[  378.271646][T11667] usb 8-1: Manufacturer: syz
[  378.289320][T13852] loop6: detected capacity change from 0 to 128
[  378.301618][T11667] usb 8-1: SerialNumber: syz
[  378.374388][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.381450][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.400704][T13854] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3116'.
[  378.554642][T11667] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  378.564605][T13859] loop6: detected capacity change from 0 to 512
[  378.582669][T11667] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  378.615093][T11667] usb 8-1: USB disconnect, device number 10
[  378.625165][T13859] EXT4-fs (loop6): Test dummy encryption mode enabled
[  378.695388][T13859] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.3118: inode has both inline data and extents flags
[  378.730120][T13859] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.3118: couldn't read orphan inode 15 (err -117)
[  378.775070][T13859] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  378.848050][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  378.921667][ T9310] udevd[9310]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  378.988222][T13875] loop9: detected capacity change from 0 to 512
[  379.002483][T13876] loop8: detected capacity change from 0 to 512
[  379.030358][T13876] EXT4-fs: Ignoring removed i_version option
[  379.056782][T13876] EXT4-fs: Ignoring removed oldalloc option
[  379.081499][T13875] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.3124: inode has both inline data and extents flags
[  379.098017][T13881] loop4: detected capacity change from 0 to 64
[  379.112391][T13876] EXT4-fs (loop8): Test dummy encryption mode enabled
[  379.149969][T13875] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.3124: couldn't read orphan inode 15 (err -117)
[  379.160116][T13876] EXT4-fs (loop8): 1 truncate cleaned up
[  379.168305][T13881] MINIX-fs: mounting file system with errors, running fsck is recommended
[  379.179831][T13875] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  379.206121][T13881] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  379.215728][T13876] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  379.257556][T13881] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  379.327120][T13876] EXT4-fs (loop8): re-mounted. Quota mode: none.
[  379.407140][T13876] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[  379.489359][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  379.495288][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  379.669424][   T26] audit: type=1400 audit(1791250822.495:74): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=13898 comm="syz.8.3135" name="//o" offset=61
[  379.813094][T13905] loop8: detected capacity change from 0 to 1024
[  379.866543][T13905] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 2: comm syz.8.3140: lblock 2 mapped to illegal pblock 2 (length 1)
[  379.893221][T13905] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  379.906875][ T5483] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  379.938827][T13905] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 48: comm syz.8.3140: lblock 0 mapped to illegal pblock 48 (length 1)
[  379.964964][T13905] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  380.016853][T13905] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.3140: Failed to acquire dquot type 0
[  380.080048][T13905] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  380.109688][ T5483] usb 5-1: Using ep0 maxpacket: 16
[  380.121436][ T5483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.137617][T13905] EXT4-fs error (device loop8): ext4_evict_inode:281: inode #11: comm syz.8.3140: mark_inode_dirty error
[  380.149314][ T5483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.156837][T13905] EXT4-fs warning (device loop8): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  380.188091][ T5483] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  380.212143][T13905] EXT4-fs (loop8): 1 orphan inode deleted
[  380.218254][ T5483] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  380.228256][T13905] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  380.240751][ T5483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.264913][   T57] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  380.288725][ T5483] usb 5-1: config 0 descriptor??
[  380.313627][   T57] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  380.322765][   T57] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0
[  380.366556][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  380.383008][   T57] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  380.409428][   T57] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  380.424902][   T57] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0
[  380.432338][T13918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002]
[  380.447927][ T9337] EXT4-fs error (device loop8): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  380.476863][T13918] System zones: 1-12
[  380.482198][T13918] EXT4-fs (loop6): orphan cleanup on readonly fs
[  380.489554][ T9337] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  380.506074][ T9337] EXT4-fs error (device loop8): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  380.533115][T13918] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:984: inode #11: comm syz.6.3145: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  380.558343][T13918] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.6.3145: ea_inode dec ref err=-117
[  380.571850][T13918] EXT4-fs (loop6): 1 orphan inode deleted
[  380.577674][T13918] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  380.617764][T13921] ima: rule for LSM 'unconfined_t' is undefined
[  380.628738][   T26] audit: type=1807 audit(1791250823.445:75): action=measure func=FILE_CHECK obj_type=unconfined_t res=0
[  380.644170][T13920] ima: policy update failed
[  380.649561][   T26] audit: type=1802 audit(1791250823.475:76): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.3146" res=0 errno=0
[  380.693874][   T26] audit: type=1802 audit(1791250823.475:77): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.3146" res=0 errno=0
[  380.715445][T13895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.750676][T13895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.764545][ T5483] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  380.773326][ T5483] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  380.790178][ T5483] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  380.797564][ T5483] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0
[  380.807559][ T9105] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  380.822096][ T5483] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000D/input/input22
[  380.846356][ T9105] EXT4-fs error (device loop6): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag
[  380.883741][ T9105] EXT4-fs error (device loop6): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag
[  380.905551][ T5483] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  381.075004][ T5483] usb 5-1: USB disconnect, device number 25
[  381.176612][T13928] fido_id[13928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  381.273269][T13938] set_capacity_and_notify: 1 callbacks suppressed
[  381.273283][T13938] loop7: detected capacity change from 0 to 2048
[  381.312752][ T9105] EXT4-fs (loop6): unmounting filesystem.
[  381.366825][T13938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  381.534281][ T4301] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.722398][ T4301] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.916869][ T4301] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.114918][ T4301] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.556588][T13967] loop4: detected capacity change from 0 to 2048
[  382.615457][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.642787][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.657247][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.669132][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.677597][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  382.693940][T13973] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  382.703542][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.102359][T13988] loop8: detected capacity change from 0 to 512
[  383.167745][T13969] chnl_net:caif_netlink_parms(): no params data found
[  383.215192][T13988] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  383.246135][T13988] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.297505][T13973] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  383.328268][T13973] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  383.451034][ T9337] EXT4-fs (loop8): unmounting filesystem.
[  383.476983][T13973] Remounting filesystem read-only
[  383.482771][ T4277] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  383.617707][T14013] loop8: detected capacity change from 0 to 8
[  383.658303][T14013] SQUASHFS error: Failed to read block 0x1000629: -5
[  383.708307][T14013] SQUASHFS error: Unable to read metadata cache entry [1000629]
[  383.757086][T14013] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  383.795355][T14018] loop7: detected capacity change from 0 to 512
[  383.834356][T14018] ext3: Unknown parameter 'context'
[  383.918039][T13969] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.934902][T13969] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.977952][T13969] device bridge_slave_0 entered promiscuous mode
[  384.181978][T13969] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.199470][T13969] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.207607][T13969] device bridge_slave_1 entered promiscuous mode
[  384.217593][T14032] input: syz1 as /devices/virtual/input/input23
[  384.442943][T14041] loop8: detected capacity change from 0 to 256
[  384.496839][T13969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.540531][T13969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.717267][T13969] team0: Port device team_slave_0 added
[  384.769471][ T4283] Bluetooth: hci4: command 0x0409 tx timeout
[  384.879038][T14052] i2c i2c-0: new_device: Can't parse I2C address
[  385.083427][T13969] team0: Port device team_slave_1 added
[  385.132385][T14065] loop4: detected capacity change from 0 to 128
[  385.177015][T13969] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.198677][T14065] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  385.203973][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.245449][T14065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  385.267173][T14065] ext2 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  385.317645][T14070] ACPI: EC: Assuming SCI_EVT clearing on event reads
[  385.342067][T13969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.355992][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  385.566052][T13969] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.596125][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.687145][T13969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.754559][T14074] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3204'.
[  385.838093][T14086] loop4: detected capacity change from 0 to 512
[  385.859979][ T4301] device hsr_slave_0 left promiscuous mode
[  385.891365][T14059] loop9: detected capacity change from 0 to 32768
[  385.899201][ T4301] device hsr_slave_1 left promiscuous mode
[  385.905955][T14086] EXT4-fs (loop4): Test dummy encryption mode enabled
[  385.919088][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.926716][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.970985][T14086] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  385.991788][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.006467][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.017128][T14093] ima: Unable to open file: /e (-2)
[  386.017769][T14092] ima: policy update failed
[  386.045159][   T26] audit: type=1802 audit(1791250828.875:78): pid=14092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3211" res=0 errno=0
[  386.064918][T14086] EXT4-fs (loop4): 1 truncate cleaned up
[  386.070832][T14086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  386.081475][ T4301] device bridge_slave_1 left promiscuous mode
[  386.087775][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.186851][ T4301] device bridge_slave_0 left promiscuous mode
[  386.219439][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.326671][ T4301] device veth0_to_bond left promiscuous mode
[  386.363203][ T4301] device veth1_macvtap left promiscuous mode
[  386.389155][ T4301] device veth0_macvtap left promiscuous mode
[  386.410461][ T4301] device veth1_vlan left promiscuous mode
[  386.428145][ T4301] device veth0_vlan left promiscuous mode
[  386.546197][T14086] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  386.731679][ T4277] EXT4-fs (loop4): unmounting filesystem.
[  386.855368][ T4283] Bluetooth: hci4: command 0x041b tx timeout
[  387.194352][T14128] loop7: detected capacity change from 0 to 512
[  387.237842][T14128] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.3223: missing EA_INODE flag
[  387.268966][T14128] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.3223: error while reading EA inode 2 err=-117
[  387.326396][T14128] EXT4-fs (loop7): 1 orphan inode deleted
[  387.363105][T14128] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  387.409464][T14128] syz.7.3223 (pid 14128) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  387.460707][T14133] loop9: detected capacity change from 0 to 512
[  387.518339][T14133] EXT4-fs error (device loop9): ext4_find_inline_data_nolock:164: inode #15: comm syz.9.3224: inline data xattr refers to an external xattr inode
[  387.536240][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  387.619122][T14133] EXT4-fs (loop9): Remounting filesystem read-only
[  387.645418][T14133] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.3224: couldn't read orphan inode 15 (err -117)
[  387.664613][T14133] EXT4-fs (loop9): Remounting filesystem read-only
[  387.673561][T14133] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  388.261623][ T4301] team0 (unregistering): Port device team_slave_1 removed
[  388.374236][ T4301] team0 (unregistering): Port device team_slave_0 removed
[  388.482398][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  388.935341][ T4283] Bluetooth: hci4: command 0x040f tx timeout
[  390.041337][T14160] loop9: detected capacity change from 0 to 512
[  390.078751][T14160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002]
[  390.089607][T14160] System zones: 1-12
[  390.102859][T14160] EXT4-fs (loop9): orphan cleanup on readonly fs
[  390.122397][T14160] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:984: inode #11: comm syz.9.3234: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  390.140847][T14160] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.9.3234: ea_inode dec ref err=-117
[  390.154380][T14160] EXT4-fs (loop9): 1 orphan inode deleted
[  390.161063][T14160] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  390.207773][ T9389] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  390.247767][ T9389] EXT4-fs error (device loop9): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag
[  390.289064][ T9389] EXT4-fs error (device loop9): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag
[  390.703092][T13969] device hsr_slave_0 entered promiscuous mode
[  390.716264][T13969] device hsr_slave_1 entered promiscuous mode
[  390.836008][ T9389] EXT4-fs (loop9): unmounting filesystem.
[  391.018252][ T4283] Bluetooth: hci4: command 0x0419 tx timeout
[  391.683732][T14199] loop7: detected capacity change from 0 to 2048
[  391.767746][T14199] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  391.782411][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3248'.
[  391.825022][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3248'.
[  391.935314][ T9283] EXT4-fs error (device loop7): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /314/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0
[  392.006132][ T9283] EXT4-fs error (device loop7): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /314/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0
[  392.042679][ T9283] EXT4-fs error (device loop7): empty_inline_dir:1912: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0
[  392.094999][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.104607][ T4301] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.110225][ T9283] EXT4-fs error (device loop7): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /314/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0
[  392.148463][ T9283] EXT4-fs error (device loop7): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /314/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0
[  392.198363][ T9283] EXT4-fs error (device loop7): empty_inline_dir:1912: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0
[  392.275750][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.317553][ T9283] EXT4-fs error (device loop7): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /314/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0
[  392.339419][ T9283] EXT4-fs error (device loop7): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /314/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0
[  392.363124][ T9283] EXT4-fs error (device loop7): empty_inline_dir:1912: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0
[  392.383449][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.385622][ T4301] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.402249][ T9283] EXT4-fs error (device loop7): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /314/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0
[  392.436396][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.452413][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.476893][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.500360][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.535537][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.569789][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.595056][ T4301] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.617287][ T9283] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  392.757287][   T26] audit: type=1400 audit(1791250835.586:79): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=14219 comm="syz.8.3255" name="//o" offset=35
[  392.779519][ T4301] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.927144][T13969] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  392.958818][T13969] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  393.002166][T13969] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  393.041398][T13969] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  393.385041][T13969] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.410722][ T9283] EXT4-fs (loop7): unmounting filesystem.
[  393.413264][T13969] 8021q: adding VLAN 0 to HW filter on device team0
[  393.456473][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  393.492474][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  393.597311][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  393.616381][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  393.628743][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.635882][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.657246][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  393.736448][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  393.759145][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  393.768106][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.775212][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.783035][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  393.792967][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  393.829346][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  393.839985][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  393.849483][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  393.884273][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  393.893653][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  393.902610][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  393.911975][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  393.925019][T13969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  393.937483][T13969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  393.982641][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  393.991183][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  394.301430][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  394.316046][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  394.329134][T13969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.395650][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  394.410181][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  394.540804][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  394.550114][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  394.560429][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  394.576816][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  394.598011][T13969] device veth0_vlan entered promiscuous mode
[  394.652818][T13969] device veth1_vlan entered promiscuous mode
[  394.665181][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  394.763274][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  394.772707][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  394.785071][T13969] device veth0_macvtap entered promiscuous mode
[  394.795931][T13969] device veth1_macvtap entered promiscuous mode
[  394.833285][ T4301] device hsr_slave_0 left promiscuous mode
[  394.839797][ T4301] device hsr_slave_1 left promiscuous mode
[  394.846085][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.853988][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.866501][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.874273][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.882267][ T4301] batman_adv: batadv0: Interface deactivated: macsec1
[  394.889250][ T4301] batman_adv: batadv0: Removing interface: macsec1
[  394.898759][ T4301] device bridge_slave_1 left promiscuous mode
[  394.904944][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.913994][ T4301] device bridge_slave_0 left promiscuous mode
[  394.920713][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.945428][ T4301] device veth1_macvtap left promiscuous mode
[  394.951586][ T4301] device veth0_macvtap left promiscuous mode
[  394.957638][ T4301] device veth1_vlan left promiscuous mode
[  394.963556][ T4301] device veth0_vlan left promiscuous mode
[  395.063129][ T4301] bond1 (unregistering): Released all slaves
[  395.686093][ T4301] team0 (unregistering): Port device team_slave_1 removed
[  395.749669][ T4301] team0 (unregistering): Port device team_slave_0 removed
[  395.804207][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  395.861725][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  396.305818][ T4301] bond0 (unregistering): Released all slaves
[  396.398631][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  396.413282][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  396.426991][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.444460][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.484801][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.495727][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.506234][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.517091][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.530151][T13969] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.548557][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  396.573273][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  396.617142][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.628710][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.644233][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.656320][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.666619][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.677384][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.689608][T13969] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.697338][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  396.706935][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  396.720224][T13969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.729814][T13969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.739706][T13969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.748853][T13969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.894919][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.914755][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.924052][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  397.002284][ T9258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.016581][ T9258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.028048][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  397.250384][ T9258] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.325160][ T9258] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.449304][ T9258] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.525475][ T9258] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.723227][ T9258] device hsr_slave_0 left promiscuous mode
[  398.733202][ T9258] device hsr_slave_1 left promiscuous mode
[  398.739751][ T9258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.747180][ T9258] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.756164][ T9258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.763878][ T9258] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.772064][ T9258] batman_adv: batadv0: Interface deactivated: macvtap1
[  398.779691][ T9258] batman_adv: batadv0: Removing interface: macvtap1
[  398.786994][ T9258] batman_adv: batadv0: Interface deactivated: macsec2
[  398.794193][ T9258] batman_adv: batadv0: Removing interface: macsec2
[  398.802153][ T9258] device bridge_slave_1 left promiscuous mode
[  398.811061][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.819764][ T9258] device bridge_slave_0 left promiscuous mode
[  398.826002][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.872426][ T9258] device batadv_slave_0 left promiscuous mode
[  398.879596][ T9258] device veth1_macvtap left promiscuous mode
[  398.885665][ T9258] device veth0_macvtap left promiscuous mode
[  398.891834][ T9258] device veth1_vlan left promiscuous mode
[  398.901735][ T9258] device veth0_vlan left promiscuous mode
[  399.043892][ T9258] bond1 (unregistering): Released all slaves
[  400.008568][ T9258] team0 (unregistering): Port device team_slave_1 removed
[  400.112413][ T9258] team0 (unregistering): Port device team_slave_0 removed
[  439.805040][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.811376][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.238024][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.244368][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  508.434790][ T4283] Bluetooth: hci4: command 0x0406 tx timeout
[  534.512024][   T27] INFO: task kworker/u4:0:9 blocked for more than 143 seconds.
[  534.519741][   T27]       Not tainted syzkaller #0
[  534.526132][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  534.534950][   T27] task:kworker/u4:0    state:D stack:22352 pid:9     ppid:2      flags:0x00004000
[  534.544223][   T27] Workqueue: writeback wb_workfn (flush-8:0)
[  534.550361][   T27] Call Trace:
[  534.553794][   T27]  <TASK>
[  534.556758][   T27]  __schedule+0x107f/0x4030
[  534.561340][   T27]  ? release_firmware_map_entry+0x187/0x187
[  534.567305][   T27]  ? blk_check_plugged+0x250/0x250
[  534.572727][   T27]  ? blk_check_plugged+0x250/0x250
[  534.577845][   T27]  ? rq_wait_inc_below+0x11b/0x1a0
[  534.583107][   T27]  ? wq_worker_sleeping+0x60/0x280
[  534.588309][   T27]  schedule+0xb9/0x180
[  534.592514][   T27]  io_schedule+0x7c/0xd0
[  534.596776][   T27]  rq_qos_wait+0x227/0x350
[  534.601186][   T27]  ? wbt_inflight_cb+0x3f0/0x3f0
[  534.606444][   T27]  ? rq_depth_scale_down+0x2f0/0x2f0
[  534.611951][   T27]  ? rq_qos_wait+0x350/0x350
[  534.616668][   T27]  ? wbt_exit+0x90/0x90
[  534.620817][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  534.626435][   T27]  ? blk_mq_sched_try_merge+0x187/0x4b0
[  534.632082][   T27]  ? blk_bio_list_merge+0xd0/0xd0
[  534.637129][   T27]  wbt_wait+0x384/0x650
[  534.641277][   T27]  ? rwb_trace_step+0x3c0/0x3c0
[  534.646183][   T27]  ? dd_depth_updated+0x100/0x100
[  534.651317][   T27]  ? rwb_trace_step+0x3c0/0x3c0
[  534.656448][   T27]  __rq_qos_throttle+0x61/0xa0
[  534.661236][   T27]  blk_mq_submit_bio+0x8ef/0x2100
[  534.666321][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  534.672446][   T27]  ? blk_mq_try_issue_list_directly+0x4a0/0x4a0
[  534.678720][   T27]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[  534.685073][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  534.690319][   T27]  ? ktime_get+0x7b/0x270
[  534.694727][   T27]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  534.700985][   T27]  __submit_bio+0x1a2/0x290
[  534.705593][   T27]  ? trace_raw_output_block_rq_remap+0x240/0x240
[  534.712196][   T27]  submit_bio_noacct_nocheck+0x79b/0xaa0
[  534.717850][   T27]  ? should_fail_request+0x70/0x70
[  534.723127][   T27]  ext4_io_submit+0xd8/0x140
[  534.728185][   T27]  ext4_writepages+0x9f4/0x2e70
[  534.733280][   T27]  ? pagevec_lookup_range_tag+0x36/0x80
[  534.738984][   T27]  ? ext4_read_folio+0x370/0x370
[  534.744080][   T27]  ? __lock_acquire+0x142d/0x7ea0
[  534.749136][   T27]  ? verify_lock_unused+0x140/0x140
[  534.759910][   T27]  ? writeback_sb_inodes+0x44d/0x17f0
[  534.765408][   T27]  ? ext4_read_folio+0x370/0x370
[  534.770364][   T27]  do_writepages+0x3c6/0x640
[  534.775020][   T27]  ? __writepage+0x130/0x130
[  534.779654][   T27]  ? writeback_sb_inodes+0x6d1/0x17f0
[  534.785094][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  534.790126][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  534.795260][   T27]  __writeback_single_inode+0x153/0x1170
[  534.800938][   T27]  writeback_sb_inodes+0xad5/0x17f0
[  534.806215][   T27]  ? reacquire_held_locks+0x31b/0x5c0
[  534.811615][   T27]  ? queue_io+0x570/0x570
[  534.816028][   T27]  __writeback_inodes_wb+0x12a/0x3f0
[  534.821333][   T27]  wb_writeback+0x484/0xd40
[  534.826106][   T27]  ? percpu_ref_tryget+0x250/0x250
[  534.831712][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  534.837738][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  534.842886][   T27]  wb_workfn+0xb68/0xee0
[  534.847156][   T27]  ? inode_wait_for_writeback+0x220/0x220
[  534.852954][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  534.858967][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  534.864157][   T27]  ? read_lock_is_recursive+0x10/0x10
[  534.869538][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  534.875490][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  534.880698][   T27]  ? process_one_work+0x7b4/0x1160
[  534.885958][   T27]  process_one_work+0x8ab/0x1160
[  534.890925][   T27]  ? worker_detach_from_pool+0x240/0x240
[  534.896615][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  534.901719][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  534.907294][   T27]  ? wq_worker_running+0x97/0x190
[  534.912377][   T27]  worker_thread+0xaf5/0x12a0
[  534.917087][   T27]  kthread+0x29d/0x330
[  534.921143][   T27]  ? worker_clr_flags+0x1a0/0x1a0
[  534.926545][   T27]  ? kthread_blkcg+0xd0/0xd0
[  534.931145][   T27]  ret_from_fork+0x1f/0x30
[  534.936293][   T27]  </TASK>
[  534.939435][   T27] INFO: task syz.4.3238:14171 blocked for more than 143 seconds.
[  534.947210][   T27]       Not tainted syzkaller #0
[  534.952359][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  534.961031][   T27] task:syz.4.3238      state:D stack:27600 pid:14171 ppid:4277   flags:0x00004004
[  534.970332][   T27] Call Trace:
[  534.973664][   T27]  <TASK>
[  534.976621][   T27]  __schedule+0x107f/0x4030
[  534.981158][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  534.987285][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  534.992462][   T27]  ? release_firmware_map_entry+0x187/0x187
[  534.998617][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  535.004659][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  535.009885][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  535.016067][   T27]  ? _raw_spin_unlock+0x40/0x40
[  535.020928][   T27]  ? lock_chain_count+0x20/0x20
[  535.028526][   T27]  schedule+0xb9/0x180
[  535.032691][   T27]  io_schedule+0x7c/0xd0
[  535.037090][   T27]  bit_wait_io+0xd/0xc0
[  535.041266][   T27]  __wait_on_bit_lock+0xbe/0x560
[  535.046380][   T27]  ? bit_wait+0xc0/0xc0
[  535.050586][   T27]  out_of_line_wait_on_bit_lock+0x138/0x190
[  535.056552][   T27]  ? bit_wait+0xc0/0xc0
[  535.060718][   T27]  ? __wait_on_bit_lock+0x560/0x560
[  535.066881][   T27]  ? bit_waitqueue+0x30/0x30
[  535.071658][   T27]  ? jbd2_write_access_granted+0x69/0x300
[  535.077522][   T27]  do_get_write_access+0x1bc/0xf20
[  535.082830][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  535.088846][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  535.095250][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  535.101437][   T27]  ? rcu_is_watching+0x11/0xa0
[  535.106463][   T27]  ext4_reserve_inode_write+0x201/0x290
[  535.112144][   T27]  __ext4_mark_inode_dirty+0x161/0x7b0
[  535.117630][   T27]  ext4_dirty_inode+0xbf/0x100
[  535.122522][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  535.128383][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  535.133568][   T27]  __file_update_time+0x21d/0x240
[  535.138787][   T27]  file_update_time+0x2f3/0x370
[  535.143804][   T27]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  535.149109][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  535.154567][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  535.159641][   T27]  ? pte_alloc_one+0x287/0x310
[  535.164555][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  535.170814][   T27]  do_page_mkwrite+0x16b/0x5c0
[  535.175887][   T27]  handle_mm_fault+0x199c/0x3d40
[  535.180842][   T27]  ? mt_find+0x157/0x830
[  535.185237][   T27]  ? numa_migrate_prep+0x250/0x250
[  535.190368][   T27]  ? lock_chain_count+0x20/0x20
[  535.195294][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  535.200588][   T27]  do_user_addr_fault+0x58e/0xb20
[  535.205785][   T27]  exc_page_fault+0x60/0x100
[  535.210389][   T27]  ? clear_bhb_loop+0x60/0xb0
[  535.215194][   T27]  asm_exc_page_fault+0x22/0x30
[  535.220063][   T27] RIP: 0033:0x7f1203c6bae3
[  535.224676][   T27] RSP: 002b:00007fffb084dad0 EFLAGS: 00010246
[  535.230757][   T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2fa64000
[  535.238958][   T27] RDX: 0000001b2fa24000 RSI: 0000000000400000 RDI: 00007f1203fe2708
[  535.247032][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  535.255117][   T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  535.263240][   T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffb084dd60
[  535.271250][   T27]  </TASK>
[  535.275534][   T27] 
[  535.275534][   T27] Showing all locks held in the system:
[  535.283827][   T27] 4 locks held by kworker/u4:0/9:
[  535.289148][   T27]  #0: ffff888141a48138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  535.299883][   T27]  #1: ffffc900000e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  535.311837][   T27]  #2: ffff88814de080e0 (&type->s_umount_key#31){++++}-{3:3}, at: trylock_super+0x1c/0xf0
[  535.321973][   T27]  #3: ffff88814de0ac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x213/0x2e70
[  535.332603][   T27] 1 lock held by rcu_tasks_kthre/12:
[  535.337895][   T27]  #0: ffffffff8cb2e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  535.348861][   T27] 1 lock held by rcu_tasks_trace/13:
[  535.354331][   T27]  #0: ffffffff8cb2ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  535.365401][   T27] 1 lock held by khungtaskd/27:
[  535.370268][   T27]  #0: ffffffff8cb2d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  535.380424][   T27] 1 lock held by khugepaged/35:
[  535.385333][   T27]  #0: ffff8880755fea58 (&mm->mmap_lock){++++}-{3:3}, at: hpage_collapse_scan_pmd+0x1f68/0x57c0
[  535.395968][   T27] 2 locks held by syz-executor/4258:
[  535.401267][   T27]  #0: ffff88807d088158 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  535.411274][   T27]  #1: ffff88814de08558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  535.421130][   T27] 2 locks held by getty/5812:
[  535.425879][   T27]  #0: ffff88802fa07098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  535.435749][   T27]  #1: ffffc9001cbb32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  535.446378][   T27] 2 locks held by syz-executor/13969:
[  535.451889][   T27]  #0: ffff88814de08460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  535.461073][   T27]  #1: ffff88804786ca38 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  535.472008][   T27] 3 locks held by syz.4.3238/14171:
[  535.477212][   T27]  #0: ffff8880779e7958 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  535.487371][   T27]  #1: ffff88814de08558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  535.497179][   T27]  #2: ffff88814de0c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  535.507022][   T27] 2 locks held by syz-executor/14188:
[  535.512453][   T27]  #0: ffff88814de08460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  535.521652][   T27]  #1: ffff888074b99810 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  535.532373][   T27] 2 locks held by syz.8.3258/14237:
[  535.537569][   T27]  #0: ffff8880755fea58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  535.548091][   T27]  #1: ffff88814de08558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  535.557988][   T27] 
[  535.560468][   T27] =============================================
[  535.560468][   T27] 
[  535.568963][   T27] NMI backtrace for cpu 1
[  535.573325][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  535.580525][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  535.590567][   T27] Call Trace:
[  535.593847][   T27]  <TASK>
[  535.596776][   T27]  dump_stack_lvl+0x188/0x24e
[  535.601444][   T27]  ? show_regs_print_info+0x12/0x12
[  535.606637][   T27]  ? load_image+0x410/0x410
[  535.611131][   T27]  ? vprintk_emit+0x59f/0x6a0
[  535.615814][   T27]  ? printk_sprint+0x460/0x460
[  535.620593][   T27]  nmi_cpu_backtrace+0x3e6/0x460
[  535.625557][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  535.631710][   T27]  ? _printk+0xda/0x130
[  535.635876][   T27]  ? load_image+0x410/0x410
[  535.640381][   T27]  ? load_image+0x410/0x410
[  535.644886][   T27]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  535.650948][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  535.657098][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  535.663080][   T27]  watchdog+0xf0e/0xf50
[  535.667312][   T27]  ? watchdog+0x1ed/0xf50
[  535.671640][   T27]  kthread+0x29d/0x330
[  535.675698][   T27]  ? hungtask_pm_notify+0x40/0x40
[  535.680711][   T27]  ? kthread_blkcg+0xd0/0xd0
[  535.685321][   T27]  ret_from_fork+0x1f/0x30
[  535.689745][   T27]  </TASK>
[  535.693413][   T27] Sending NMI from CPU 1 to CPUs 0:
[  535.698840][    C0] NMI backtrace for cpu 0
[  535.698851][    C0] CPU: 0 PID: 4301 Comm: kworker/u4:5 Not tainted syzkaller #0
[  535.698866][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  535.698875][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  535.698969][    C0] RIP: 0010:debug_lockdep_rcu_enabled+0x25/0x30
[  535.698994][    C0] Code: 00 cc cc 00 00 31 c0 83 3d e7 1a ed 03 00 74 1d 83 3d 72 4e ed 03 00 74 14 65 48 8b 0d 84 af ce 75 31 c0 83 b9 dc 0a 00 00 00 <0f> 94 c0 c3 00 00 cc cc 00 00 cc 48 8b 3c 24 e8 d7 fa ff ff 66 90
[  535.699006][    C0] RSP: 0018:ffffc900040b7678 EFLAGS: 00000246
[  535.699018][    C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802b810000
[  535.699028][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  535.699036][    C0] RBP: ffffc900040b7870 R08: dffffc0000000000 R09: 1ffffffff2166648
[  535.699047][    C0] R10: dffffc0000000000 R11: fffffbfff2166649 R12: 1ffff92000816edc
[  535.699058][    C0] R13: ffffffff89a9f1db R14: ffffc900040b77c0 R15: 000000000000004c
[  535.699068][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  535.699084][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  535.699094][    C0] CR2: 000056170bf47168 CR3: 000000000c88e000 CR4: 00000000003506f0
[  535.699107][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  535.699123][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  535.699132][    C0] Call Trace:
[  535.699137][    C0]  <TASK>
[  535.699141][    C0]  ieee80211_bss_info_update+0x622/0xbf0
[  535.699217][    C0]  ? ieee80211_rx_bss_put+0x60/0x60
[  535.699243][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0
[  535.699260][    C0]  ? ieee80211_vif_get_shift+0x22b/0x290
[  535.699303][    C0]  ? ieee80211_mandatory_rates+0x1c8/0x230
[  535.699347][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0
[  535.699364][    C0]  ? verify_lock_unused+0x140/0x140
[  535.699391][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0
[  535.699410][    C0]  ? ieee80211_ibss_rx_no_sta+0x780/0x780
[  535.699430][    C0]  ? mark_lock+0x94/0x320
[  535.699450][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  535.699470][    C0]  ? __lock_acquire+0x7ea0/0x7ea0
[  535.699489][    C0]  ? lock_chain_count+0x20/0x20
[  535.699506][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  535.699524][    C0]  ? kcov_remote_start+0x87/0x810
[  535.699541][    C0]  ? skb_dequeue+0x120/0x150
[  535.699567][    C0]  ieee80211_iface_work+0x72c/0xc70
[  535.699588][    C0]  cfg80211_wiphy_work+0x224/0x260
[  535.699604][    C0]  ? process_one_work+0x7b4/0x1160
[  535.699622][    C0]  process_one_work+0x8ab/0x1160
[  535.699644][    C0]  ? worker_detach_from_pool+0x240/0x240
[  535.699662][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[  535.699687][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  535.699709][    C0]  ? wq_worker_running+0x97/0x190
[  535.699724][    C0]  worker_thread+0xaf5/0x12a0
[  535.699756][    C0]  kthread+0x29d/0x330
[  535.699767][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[  535.699787][    C0]  ? kthread_blkcg+0xd0/0xd0
[  535.699800][    C0]  ret_from_fork+0x1f/0x30
[  535.699825][    C0]  </TASK>
[  535.705350][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  535.705364][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  535.705382][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  535.705392][   T27] Call Trace:
[  535.705399][   T27]  <TASK>
[  535.705406][   T27]  dump_stack_lvl+0x188/0x24e
[  535.705432][   T27]  ? memcpy+0x3c/0x60
[  535.705520][   T27]  ? show_regs_print_info+0x12/0x12
[  535.705538][   T27]  ? load_image+0x410/0x410
[  535.705571][   T27]  panic+0x2d3/0x710
[  535.705591][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  535.705614][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  535.705634][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  535.705715][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  535.705735][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  535.705756][   T27]  watchdog+0xf4d/0xf50
[  535.705779][   T27]  ? watchdog+0x1ed/0xf50
[  535.705801][   T27]  kthread+0x29d/0x330
[  535.705815][   T27]  ? hungtask_pm_notify+0x40/0x40
[  535.705833][   T27]  ? kthread_blkcg+0xd0/0xd0
[  535.705848][   T27]  ret_from_fork+0x1f/0x30
[  535.705879][   T27]  </TASK>
[  535.706183][   T27] Kernel Offset: disabled
[  536.116432][   T27] Rebooting in 86400 seconds..