last executing test programs:

5m57.696501231s ago: executing program 1 (id=601):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38)

5m57.696339858s ago: executing program 1 (id=602):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, 0x84)

5m57.696246904s ago: executing program 1 (id=603):
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

5m57.596439742s ago: executing program 1 (id=604):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x142000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
umount2(&(0x7f0000000280)='./file0/file0\x00', 0x7)

5m57.595941086s ago: executing program 1 (id=605):
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

5m57.277508714s ago: executing program 1 (id=606):
socket$alg(0x26, 0x5, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
socket$unix(0x1, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

5m57.253166052s ago: executing program 32 (id=606):
socket$alg(0x26, 0x5, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
socket$unix(0x1, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

3m52.935424119s ago: executing program 2 (id=1770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)

3m52.844241788s ago: executing program 2 (id=1772):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0)

3m52.774187163s ago: executing program 2 (id=1775):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)

3m52.773643868s ago: executing program 2 (id=1778):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x2})

3m52.704972595s ago: executing program 2 (id=1779):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005a00)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$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")
symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)

3m52.323919828s ago: executing program 2 (id=1788):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

3m36.958909304s ago: executing program 33 (id=1788):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

3m21.101738686s ago: executing program 0 (id=2036):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})
splice(r1, 0x0, r0, 0x0, 0x7fffe000, 0x1)

3m21.027932474s ago: executing program 0 (id=2037):
unshare(0x400)
cachestat(0xffffffffffffffff, 0x0, 0x0, 0xee)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00')
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x308b2, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564)

3m20.922972398s ago: executing program 0 (id=2039):
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x40)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setlease(r0, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x0)

3m20.860802362s ago: executing program 0 (id=2041):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000840)={[{@nomblk_io_submit}, {@noquota}]}, 0x1, 0x489, &(0x7f0000000d40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x8)
getdents(r0, &(0x7f0000000880)=""/232, 0xe8)

3m20.55998816s ago: executing program 0 (id=2044):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040)
sendto(r1, &(0x7f0000000240)="cbfd", 0x2, 0x40, 0x0, 0x0)

3m19.661529183s ago: executing program 0 (id=2049):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20)

3m19.524596731s ago: executing program 34 (id=2049):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20)

52.426689149s ago: executing program 5 (id=3641):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x6, r1, r1, 0x1c, 0x3, 0x2})

52.305408653s ago: executing program 5 (id=3642):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000)
r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x7, 0x28c})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20)

52.206951233s ago: executing program 5 (id=3643):
r0 = fsopen(&(0x7f0000000140)='affs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='usrquota', &(0x7f00000002c0)='./file1\x00', 0xffffffffffffff9c)

52.076553998s ago: executing program 5 (id=3646):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000,\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

51.975666189s ago: executing program 5 (id=3648):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e1d}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9818, 0x2}}]}]}}}, @IFLA_LINK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x44600}, 0x10004000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000044000900000000000000000005000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044)

51.887019549s ago: executing program 5 (id=3649):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000)
unshare(0x62000000)
syz_emit_ethernet(0x3e, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
sync()
r3 = dup(0xffffffffffffffff)
sendmsg$inet_sctp(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x48040)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

36.916620012s ago: executing program 35 (id=3649):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000)
unshare(0x62000000)
syz_emit_ethernet(0x3e, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
sync()
r3 = dup(0xffffffffffffffff)
sendmsg$inet_sctp(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x48040)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.341753463s ago: executing program 4 (id=4138):
select(0x40, &(0x7f0000000000)={0x4, 0x4, 0x10, 0x80, 0x8, 0xa, 0x10001, 0x7}, &(0x7f0000000040)={0x2, 0x7, 0x5, 0x9, 0xff, 0x9, 0x9, 0x9}, 0x0, &(0x7f0000000240)={0x401, 0x9265})

2.291530313s ago: executing program 4 (id=4139):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="696f636861727365743d6d6163677265656b2c0075b26038ff1837c965f9b83e349c9ce965cdec5a1dfcf07fa09e1d6da48000b8"], 0x1, 0x5d32, &(0x7f000000bac0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x109000, 0x0)

1.78153064s ago: executing program 4 (id=4145):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1})
mmap(&(0x7f0000399000/0x4000)=nil, 0x4000, 0x300000a, 0x12, r0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000})

1.581567196s ago: executing program 6 (id=4149):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

1.451779101s ago: executing program 6 (id=4151):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xf6, 0xa1d, &(0x7f0000000d00)="$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")
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1.271690233s ago: executing program 6 (id=4153):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14096, &(0x7f0000001800)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX], 0xfd, 0x1505, &(0x7f0000001a00)="$eJzs3Am4TlX7MPD7XmttjpPhSTLve92bJxkWSRJKkiFJkpDMCUmSJEnikCkJSch4kownZE4nHfM8ZE6SV5IkISHJ+q7T8Pn3Dn/v0Pt5v/fcv+va11n32fte+17PfT3n2Xtf13m+7jqseqMaVeozM/wz9G8D/OVHEgAkAMBAAMgBAAEAlM1ZNmf6/iwak/6pk4h/kwYzrnQF4kqS/mds0v+MTfqfsUn/Mzbpf8Ym/c/YpP8Zm/RfiAwtJd/VsmXcTZ7//39O/SvJ8vmfIeDf2iH9/2+j/6Gjpf8Zm/Q/Y5P+ZzQJv4uk/xlZcKULEFeYvP8zNum/EBnaH/5Mef25K/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4fOOcvMQDw2/hK1yWEEEIIIYQQQog/jn/3SlcghBBCCCGEEEKIfz8EBRoMBJAJMkMCZIFEuAqyQjbIDjkgBldDTrgGcsG1kBvyQF7IB/mhABSEEAgsMERQCApDHK6DInA9FIViUBxKgIOSUApugNJwI5SBm6As3Azl4BYoDxV+Pme626Ey3AFV4E6oCtWgOtSAu6Am3A214B6oDfdCHbgP6sL9UA8egPrQABrCg9AIHoLG0ASaQjNoDi2g5WXyk3P8tfznoQe8AD2hFyRBb+gDL0Jf6Af9YQAMhJdgELwMg+EVGAJDYRi8CsPhNRgBr8NIGAWj4Q0YA2NhHIyHCTARkuFNmARvwWR4+6FsMBWmwXSYATMhBd6BWTAb5sC7MBfmwXxIzrIQFsFieA+WwPuQCh/AUvgQ0mAZLIcVsBJWwWpYA2thHayHDbARNsFm2AJb4SPYBtthB+yEXbAb9sDHsBc+gX3wKezHz/7B/LO/z4duCAioUKFBg5kwEyZgAiZiImbFrJgds2MMY5gTc2IuzIW5MTfmxbyYhPmxIBZEQkJGxkJYCOMYxyJYBItiUSyOxdGhw1JYCkvjjVgGy2BZLIvlsByWxwpYAW/FW7ESVsLKWBmrYBWsilWxOlbHu/AuvBtrYS2sjbWxDtbBulgX62E9rI/1sSE2xEbYCBtjY2yKTbE5NseW2BJbYStsja2xLbbFdtgO22N77IAdsCN2xE7YCTtjZ+yCXbArdsVu+Bw+h8/j8/gCvoC9sKrqjX2wD/bFvtgfB+AAfAkH4cv4Mr6CQ3AoDsNX8VV8DUfgGRyJo3A0jsZKaiyOw/HIaiImYzJmhkk4GSfjFJyKU3E6zsCZmIIpOAtn42x8F+fiPJyHC3ABLsLFuBiX4PuYiqm4FM9iGi7D5bgCV+IqXIlrcC2uwfW4AdfjJtyEW3ALfoQf4XbcjjtxJ+7G3fgxfoyf4Cc4BPfjfjyAB/AgHsRDeAgP42E8gkfwKB7FY3gMj+NxPIEn8RSexNN4Gs/gWTwHAOfxPF7AC3gRL6a/+VU6o4zKpDKpBJWgElWiyqqyquwqu4qpmMqpcqpcKpfKrXKrvCqvyq/yq4KqoCJFilWkCqlCKq7iqogqooqqoqq4Kq6ccqqUKqVKq9KqjCqjyqqbVTl1iyqvKqg27lZ1q6qk2rrK6g5VRVVRVVU1VV3VUDVUTVVT1VK1VG1VW9VRdVRddb+qp3pjf2yg0jvTSA3FxmoYNlXNVHPVQr2GD6tWagS2Vm1UW/WoGoUjsb1q5TqoJ1RHNQ47qafUeHxadVETsat6VnVTz6nu6nnVQ7V2PVUvNQV7qz5qOvZV/VR/NUDNwmoqvWPV1Svq+cxD1TD1qlqEr6kR6nU1Uo1So9Ubaowaq8ap8WqCmqiS1ZtqknpLTVZvqylqqpqmpqsZaqZKUe+oWWq2mqPeVXPVPDVfLVAL1SK1WL2nlqj3Var6QC1VH6o0tUwtVyvUSrVKrVZr1Fq1Tq1XG9RGtUltVlvUVvWR2qa2qx1qp9qldqs96mO1V32i9qlP1X71mTqg/qQOqs/VIfWFOqy+VEfUV+qo+lodU9+o4+pbdUKdVKfUd+q0+l6dUWfVOfWDOq9+VBfUT+qi8go0aqW1NjrQmXRmnaCz6ER9lc6qs+nsOoeO6at1Tn2NzqWv1bl1Hp3X5NP5dQFdUIeatNWsI11IF9ZxfZ0uoq/XRXUxXVyX0E6X1KX0Dbq0vlGX0TfpsvpmXU7fosvrCrqiB32brqRv15X1HbqKvlNX1dV0dV1D36Vr6rt1LX2Prq3v1XX0fbquvl/X0w/o+rqBbqgf1I30Q7qxbqKb6ma6uW6hW+qHdSv9iG6t2+i2+lHdTj+m2+vHdQf9hO6on9Sd9FO6s35ad9HP6K76Wd1NP6e765/0Re11T91LJ+neuo9+UffV/XR/PUAP1C/pQfplPVi/oofooXqYflUP16/pEfp1PVKP0qP1G3qMHqvH6fF6gp6ok/WbepJ+S0/Wb+speqqepqfrGXqm7v/rTHP+jvy3/kr+4J/PvkVv1R/pbXq73qF36l16t96j9+i9eq/ep/fp/Xq/PqAP6IP6oD6kD+nD+rA+oo/oo/qoPqaP6eP6uD6hT+of9Hf6tP5en9Fn9Vn9gz6vz+sLv74GYNAoo40xgclkMpsEk8UkmqtMVpPNZDc5TMxcbXKaa0wuc63JbfKYvCafyW8KmIImNGSsYROZQqawiZvrTBFzvSlqipnipoRxpqQpZW74l/MvV19L09K0Mq1Ma9PatDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PD9DQ9TZJJMn3Mi6av6Wf6mwFmoHnJDDKDzGAz2AwxQ8wwM8wMN8PNCDPCjDQjzWgz2owxY8w4M85MMBNMss9hJplJZrKZbKaYKWbawBxmhplhUkyKmWVmmTlmjplr5pr5Zr5ZaBaaxWaxWWKWmFSTapaapSbNLDPLzAqzwqwyq8was8asM+vMBrPBbDKbTJrZaraabWab2WF2mF1ml9lj9pi9Zq/ZZ/aZ/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlhTphT5pQ5bU6bM+aMOWfOmfPmvLlgLpiL5mL6ZV+gAhWYwASZgkxBQpAQJAaJQdYga5A9yB7EgliQM8gZ5AquDXIHeYK8Qb4gf1AgKBiEAQU24CAKCgWFg3hwXVAkuD4oGhQLigclAheUDEoFNwSlgxuDMsFNQdng5qBccEtQPqgQVAxuDW4LKgW3B5WDO4IqwZ1B1aBaUD2oEdwV1AzuDmoF9wS1g3uDOsF9Qd3g/qBe8EBQP2gQNAweDBoFDwWNgyZB06BZ0DxoEbT8Q+f3/kyeR1zPsFeYFPYO+4Qvhn3DfmH/cEA4MHwpHBS+HA4OXwmHhEPDYeGr4fDwtXBE+Ho4MhwVjg7fCMeEY8Nx4fhwQjgxTA7fDCeFb4WTw7fDKeHUcFowPZwRzgxTwnfCWeHscE74bjg3nBfODxeEC8NFIf5ySQyp4Qfh0vDDMC1cFi4PV4Qrw1Xh6nBNuDZcF64PN4Qbw01lB/1yaLgt3B7uCHeGu8Ld4Z7w43Bv+Em4L/w03B9+Fh4I/xQeDD8PD4VfhIfDL8Mj4Vfh0fDr8Fj4TXg8/DY8EZ4MT4XfhafD78Mz4dnwXPhDeD78MbwQ/hReDH36xX36xzsZMpSJMlECJVAiJVJWykrZKTvFKEY5KSflolyUm3JTXspL+Sk/FaSClI6JqRAVojjFqQgVoaJUlIpTcXLkqBSVotJUmspQGSpLZakclaPyVJ4qUkW6jW6j2+l2uoPuoDvpTqpG1agG1aCaVJNqUS2qTbWpDtWhulSX6lE9qk/1qSE1pEbUiBpTY2pKTak5NaeW1JJaUStqTa2pLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT2oJ/WkJEqiPtSH+lJf6k/9aSANpEE0iAbTYBpCQ2gYDaPhNJxG0AgaSaNoNL1BY2gsjaPxNIEmUjIl0ySaRJNpMk2hKTSNptEMmkEplEKzaBbNoTk0l+bSfJpPC2khLabFtISWUCql0lJaSmmURstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO0wk6QafoFJ2m03SGztA5Okfn6Ue6QD/RRfKUYLPYRHuVzWqz2ew2h/3zOK/NZ/PbAragDW1um+d3MVlri9pitrgtYZ0taUvZG/4iLm8r2Ir2VnubrWRvt5VteZsF/mdc095ta9l7bG17r61h7/pdXMfeZ+vah2w928TWt81sQ9vCNrIP2ca2iW1qm9nmtoVtZx+z7e3jtoN9wna0T/5FvMS+b9fadXa93WD32k/sOfuDPWq/tuftj7an7WUH2pfsIPuyHWxfsUPs0N/HAHa0fcOOsWPtODveTrAT/yKeZqfbGXamTbHv2Fl29l/Ei+17dq5NtfPtArvQLvo5Tq8p1X5gl9oPbZpdZpfbFXalXWVX2zX/t9YVdpPdbLfYPfZju81utzvsTrvL7v45Tl/HPvup3W8/s0fsV/ag/dwessfsYfvlz3H6+o7Zb+xx+609YU/aU/Y7e9p+b8/Ysz+vP33t39mf7EXrLTCyYs2GA87EmTmBs3AiX8VZORtn5xwc46s5J1/Dufhazs15OC/n4/xcgAtyyMSWmSMuxIU5ztdxEb6ei3IxLs4l2HFJLsU3cGm+kcvwTVyWb+ZyfAuX5wpckW/l27gS386V+Q6uwndyVa7G1bkG38U1+W6uxfdwbb6X6/B9XJfv53r8ANfnBtyQH+RG/BA35ibclJtxc27BLflhbsWPcGtuw235UW7Hj3F7fpw78BPckZ/kTvwUd+anuQs/w135We7Gz3F3fp578Avck3txEvfmPvwi9+V+3J8H8EB+iQfxyzyYX+EhPJSH8as8nF/jEfw6j+RRPJrf4DE8lsfxeJ7AEzmZ3+RJ/BZP5rd5Ck/laTydZ/BMTuF3eBbP5jn8Ls/leTyfF/BCXsSL+T1ewu9zKn/AS/lDTuNlvJxX8Epexat5Da/ldbyeN/BG3sSbeQtv5Y94G2/nHbyTd/Fu3sMf817+hPfxp7yfP+MD/Cc+yJ/zIf6CD/OXfIS/4qP8NR/jb/g4f8sn+CSf4u/4NH/PZ/gsn+Mf+Dz/yBf4J77IniHCSEU6MlEQZYoyRwlRligxuirKGmWLskc5olh0dZQzuibKFV0b5Y7yRHmjfFH+qEBUMAojimzEURQVigpH8ei6qEh0fVQ0KhYVj0pELioZlYpuiEpHN0ZlopuistHNUbnolqh8VCGqGN0a3RZVim6PKkd3RFWiO6OqUbWoelQjuiuqGd0d1YruiWpH90ZlovuiutH9Ub3ogah+1CBqGD0YNYoeihpHTaKmUbOoedQiahk9HLWKHolaR22ittGjUbvosah99HjUIXoi6hg9eWl/seCXT9M/258U9Y70r0/I7tEL44vii+PvxZfE34+nxj+IL41/GE+LL4svj6+Ir4yviq+Or4mvja+Lr49viG+Mb4pvjm+Je18jMzhMvxEG4wKXyWV2CS6LS3RXuawum8vucriYu9rldNe4XO5al9vlcXldPpffFXAFXejIWccucoVcYRd317ki7npX1BVzxV0J51xJV8q1cC1dS9fKPeJauzaurXvUPeoec4+5xxN+Ldx1ck+5zu5p18U9455xz7pu7jnX3T3vergXXE/XyyW5JNfH9XF9XV/X3/V3A91AN8gNcoPdYDfEDXHD3DA33A13I9wIN9KNdKPdaDfGjXHj3Dg3wU1wyS7ZTXKT3GQ32U1xU9w0N83NcDNciktxs9wsN8fNcXPdXDffzXcL3UK32C12S9wSl+pS3VK31KW5NLfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va3zW1zO9wOt8vtcnvcHrfX7XX7fmuNO+AOuoPukPvCHXZfuiPuK3fUfe2OuW/ccfetO+FOulPO69Pue3fGnXXn3A/uvPvRXXA/uYvOu+TYm7FJsbdik2Nvx6bEpsamxabHZsRmxlJi78RmxWbH5sTejc2NzYvNjy2ILYwtii2OvRdbEns/lhr7ILY09mEsLbYstjy2IrYytirmfYFtkS/kC/u4v84X8df7or6YL+5LeOdL+lL+Bl/a3+jL+Jt8WX+zL+dv8eV9BV/RN/FNfTPf3LfwLf3DvpV/xLf2bXxb/6hv5x/z7f3jvoN/wnf0T/pO/inf2T/tu/hnfFf/7LxfXwPfw7/ge/pePsn39n38i76v7+f7+wF+oH/JD/Iv+8H+FT/ED/XD/Kt+uH/Nj/Cv+5F+lB/t3/Bj/Fg/zo/3E/xEn+zf9JP8W36yf9tP8VP9ND/dz/AzfYp/x8/ys/0c/66f6+f5+X6BX+gX+cX+Pb/Ev+9T/Qd+qf/Qp/llfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6j/w2v93v8Dv9Lr/b7/Ef+73+E7/Pf+r3+8/8Af8nf9B/7g/5L/xh/6U/4r/yR/3X/pj/xh/33/oT/qQ/5b/zp/33/ow/68/5H/x5/6O/4H/yF+V/1oQQQggh/i76Mvt7/5XfqV+3dH0AINv2fIf/fM6NuX8Z91N7O8YA4IleXRv8tjVokJSU9OuxaRqCwgsAIHYp/+fvH/g1XgZt4THoAG2g9F+tr5+q+PN13/82f/xmgESALL/lpN8eJcKfz3/j35i/yXt8ufkXABQtfCkn/US/xZfmL/M35t/d7jLzZ/k8GaD1/8jJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u/jb9/jy/uZSTGS7Fl7s/v4zKf8QahBBCCCGEEEII8b97+rnujz/coUObzv/Ng8z/GWX8BwwQAP4DypDBvzYA+Pef60r/ZRJCCCGEEEL80S5d9F/pSoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiIzrn/+GMPV3H3yl1yiEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEJcaf8nAAD//zrHUN4=")
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffff46)
ioctl$TIOCMBIC(r3, 0x5415, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)

856.822183ms ago: executing program 4 (id=4155):
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x22}, @l2cap_cid_signaling={{0x1e}, [@l2cap_conf_rsp={{0x5, 0x29, 0x6}, {0xfffc, 0x32}}, @l2cap_conn_req={{0x2, 0x4, 0x4}, {0x7, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x2, 0x8, 0x1, 0xe}}]}}, 0x27)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x41100, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x79e85d2f96ac883c}, 0x48)

855.322209ms ago: executing program 3 (id=4156):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/104, 0x5f}}], 0x4000008, 0x40012041, 0x0)

678.298027ms ago: executing program 3 (id=4157):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0x3b0, 0x228, 0x310, 0x190, 0x310, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@empty, @broadcast, 0xffffffff, 0xff000000, 'bond_slave_0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x11, 0x3, 0x64}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x7ff, @local, 0x4e23}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffff00, 'vcan0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x84, 0x3, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x4}}, @common=@addrtype={{0x30}, {0x8, 0x800, 0x0, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x5}}}, {{@ip={@remote, @remote, 0xffffff00, 0xffffffff, 'wg0\x00', 'pim6reg\x00', {0xff}, {}, 0x5c, 0x2, 0x4}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0xffffff00, 0xffffff00, 'ip6gretap0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x33, 0x2, 0x43}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x200007, 0x3, @multicast2, 0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)

560.357625ms ago: executing program 3 (id=4158):
syz_read_part_table(0x1051, &(0x7f00000010c0)="$eJzsz7GVwjAQBNCR7bN9ETRHPTihCTqAnIgK6IBu4MmGBxUAwf/JaqWZQOGrzsM82mZZSz1nyin5v6SU5W54b0w5ZJ9cb23+knSrse0fT3XW7PgKl2T9XEoydf1u2M7FJiWb40c+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7h4AAP//0ZAJ5g==")

395.949118ms ago: executing program 4 (id=4159):
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3)

395.667291ms ago: executing program 3 (id=4160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0)

305.280502ms ago: executing program 6 (id=4161):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x16, 0x2, 0x0, "dd3e1ddbc8e90cb57346e6c94dfa5bf04abc3e8fc2976136531a27a41db375d7"})

197.480354ms ago: executing program 4 (id=4162):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

197.298202ms ago: executing program 3 (id=4163):
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x3, 0x1, 0x2, @generic=0x4})

131.560705ms ago: executing program 6 (id=4164):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x8, 0x4)

131.347347ms ago: executing program 3 (id=4165):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000bc0)={0x0, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 6 (id=4166):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==")
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x176)
getdents(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x40)
fsync(r1)

kernel console output (not intermixed with test programs):

pe=1326 audit(1776621841.044:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.3.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  370.220327][   T34] audit: type=1326 audit(1776621841.054:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.3.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  370.250919][   T34] audit: type=1326 audit(1776621841.054:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.3.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  370.267083][   T34] audit: type=1326 audit(1776621841.054:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.3.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  370.285901][   T34] audit: type=1326 audit(1776621841.054:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.3.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  370.304365][   T34] audit: type=1326 audit(1776621841.054:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.3.2886" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  370.736999][T13510] syz.5.2891 (13510): drop_caches: 2
[  370.851923][T13527] loop5: detected capacity change from 0 to 256
[  371.351575][T13545] loop4: detected capacity change from 0 to 512
[  371.372233][T13545] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  371.391865][T13545] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2908: Invalid block bitmap block 0 in block_group 0
[  371.411617][T13545] loop4: lost filesystem error report for type 5 error -117
[  371.414286][T13545] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  371.420308][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  371.420325][    C1] EXT4-fs (loop4): initial error at time 1776621842: ext4_read_block_bitmap_nowait:483
[  371.420379][    C1] EXT4-fs (loop4): last error at time 1776621842: ext4_read_block_bitmap_nowait:483
[  371.459683][T13545] loop4: lost filesystem error report for type 5 error -117
[  371.460084][T13545] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.2908: attempt to clear invalid blocks 983261 len 1
[  371.478251][T13545] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  371.478781][T13545] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.2908: Invalid inode table block 0 in block_group 0
[  371.487065][T13545] loop4: lost filesystem error report for type 5 error -117
[  371.487777][T13545] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  371.509739][T13545] loop4: lost filesystem error report for type 5 error -117
[  371.510134][T13545] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  371.515930][T13545] loop4: lost filesystem error report for type 5 error -117
[  371.516292][T13545] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.2908: Invalid inode table block 0 in block_group 0
[  371.534145][T13545] loop4: lost filesystem error report for type 5 error -117
[  371.534521][T13545] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  371.554525][T13545] loop4: lost filesystem error report for type 5 error -117
[  371.554894][T13545] EXT4-fs error (device loop4): ext4_truncate:4587: inode #11: comm syz.4.2908: mark_inode_dirty error
[  371.564682][T13545] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  371.565029][T13545] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  371.579541][T13545] loop4: lost filesystem error report for type 5 error -117
[  371.579957][T13545] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.2908: Invalid inode table block 0 in block_group 0
[  371.597239][T13545] loop4: lost filesystem error report for type 5 error -117
[  371.597671][T13545] EXT4-fs (loop4): 1 truncate cleaned up
[  371.603835][T13545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.690036][T10967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.794972][T13553] loop4: detected capacity change from 0 to 1024
[  371.892198][T13555] syz.4.2912 (13555): drop_caches: 2
[  372.484288][T13575] /dev/nullb0: Can't open blockdev
[  373.117466][T13581] sp0: Synchronizing with TNC
[  374.054921][T13601] comedi comedi0: aio_iiro_16: I/O port conflict (0x1c,8)
[  374.176019][T13605] loop5: detected capacity change from 0 to 2048
[  374.198169][T13606] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  374.262983][T13606] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  374.268005][T13606] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  374.280882][T13606] Remounting filesystem read-only
[  374.283409][T11383] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  374.917401][T13633] loop5: detected capacity change from 0 to 512
[  374.935835][T13633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  374.952357][T13633] EXT4-fs error (device loop5): ext4_xattr_block_list:766: inode #15: comm syz.5.2945: corrupted xattr block 32: overlapping e_value 
[  374.989045][T11383] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.120421][ T5910] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  375.310501][T12309] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  375.411139][ T5910] usb 5-1: Using ep0 maxpacket: 8
[  375.415836][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short
[  375.420597][ T5910] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  375.426357][ T5910] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=2c.a5
[  375.430025][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.432929][ T5910] usb 5-1: Product: syz
[  375.434475][ T5910] usb 5-1: Manufacturer: syz
[  375.437726][ T5910] usb 5-1: SerialNumber: syz
[  375.469677][T12309] usb 6-1: Using ep0 maxpacket: 32
[  375.766346][T12309] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  375.774341][T12309] usb 6-1: config 0 has no interface number 0
[  375.784000][ T5910] usb 5-1: USB disconnect, device number 19
[  375.789582][T12309] usb 6-1: config 0 interface 184 has no altsetting 0
[  375.798224][T12309] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  375.803979][T12309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.807595][T12309] usb 6-1: Product: syz
[  375.811544][T12309] usb 6-1: Manufacturer: syz
[  375.814272][T12309] usb 6-1: SerialNumber: syz
[  375.824970][T12309] usb 6-1: config 0 descriptor??
[  376.855076][T12309] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  377.055553][T12309] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  377.060559][T12309] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  377.063987][T12309] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  377.067807][T12309] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  377.088019][T12309] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  377.100857][T12309] usb 6-1: USB disconnect, device number 14
[  377.125830][T13664] loop4: detected capacity change from 0 to 32768
[  377.143511][T13664] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2959 (13664)
[  377.169902][T13664] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  377.189103][T13664] BTRFS info (device loop4): using sha256 checksum algorithm
[  377.335705][T13664] BTRFS info (device loop4): enabling ssd optimizations
[  377.338253][T13664] BTRFS info (device loop4): turning on async discard
[  377.347367][T13664] BTRFS info (device loop4): enabling free space tree
[  377.465577][T10967] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  377.685284][T13688] loop5: detected capacity change from 0 to 764
[  377.973637][T13696] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2
[  377.997869][   T67] Bluetooth: hci4: Frame reassembly failed (-84)
[  378.011042][T13696] loop4: detected capacity change from 0 to 128
[  378.037750][T13696] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  378.068468][T13696] hpfs: filesystem error: improperly stopped
[  378.072199][T13696] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  378.086935][T13696] hpfs: You really don't want any checks? You are crazy...
[  378.119657][T13696] hpfs: Code page index out of array
[  378.121343][T13696] hpfs: code page support is disabled
[  378.128940][T13696] hpfs: hpfs_map_4sectors(): unaligned read
[  378.140206][T13696] hpfs: hpfs_map_4sectors(): unaligned read
[  378.149493][T13696] hpfs: filesystem error: unable to find root dir
[  379.213457][T13706] loop5: detected capacity change from 0 to 32768
[  379.267490][T13706] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  379.292396][T13706] XFS (loop5): Ending clean mount
[  379.295587][T13706] XFS (loop5): Quotacheck needed: Please wait.
[  379.333303][T13706] XFS (loop5): Quotacheck: Done.
[  379.359907][T13706] XFS (loop5): User initiated shutdown received.
[  379.362307][T13706] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:462).  Shutting down filesystem.
[  379.366499][T13706] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  379.394757][T11383] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  379.800568][ T5910] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  379.949568][ T5910] usb 6-1: Using ep0 maxpacket: 32
[  379.953998][ T5910] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  379.956965][ T5910] usb 6-1: config 0 has no interface number 0
[  379.962346][ T5910] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  379.965743][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.968813][ T5910] usb 6-1: Product: syz
[  379.971028][ T5910] usb 6-1: Manufacturer: syz
[  379.972825][ T5910] usb 6-1: SerialNumber: syz
[  379.985895][ T5910] usb 6-1: config 0 descriptor??
[  379.990881][ T5910] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  380.019615][ T5810] Bluetooth: hci4: command 0x1003 tx timeout
[  380.023298][   T55] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  380.232677][ T5910] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  380.241867][   T55] Bluetooth: hci3: unexpected event for opcode 0x041b
[  380.258876][ T5910] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  380.424582][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 38
[  380.570719][ T5845] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  380.625159][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  380.625552][   T31] usb 6-1: USB disconnect, device number 15
[  380.720642][   T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  380.732448][   T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  380.736667][   T31] quatech2 6-1:0.51: device disconnected
[  380.799524][ T5845] usb 5-1: Using ep0 maxpacket: 16
[  380.821611][ T5845] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  380.824841][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.827220][ T5845] usb 5-1: Product: syz
[  380.872239][ T5845] usb 5-1: Manufacturer: syz
[  380.878255][ T5845] usb 5-1: SerialNumber: syz
[  381.120024][ T5845] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  381.126467][ T5845] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  381.131162][ T5845] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  381.134259][ T5845] usb 5-1: media controller created
[  381.147735][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  381.353462][ T5845] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  381.525040][   T31] usb 5-1: USB disconnect, device number 20
[  381.540623][ T5845] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  381.721765][ T5845] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  381.729501][ T5845] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  381.737577][ T5845] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  381.746265][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  381.749543][ T5845] usb 6-1: SerialNumber: syz
[  381.972371][ T5845] usb 6-1: 0:2 : does not exist
[  382.043116][ T5845] usb 6-1: USB disconnect, device number 16
[  382.114009][T11709] udevd[11709]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  382.920242][T13801] loop5: detected capacity change from 0 to 2048
[  382.923139][T13801] EXT4-fs (loop5): cluster size (2048) smaller than block size (4096)
[  383.003955][T13805] loop4: detected capacity change from 0 to 4096
[  383.019484][T13805] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  383.178378][T13811] loop5: detected capacity change from 0 to 2048
[  383.191154][T13811] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  383.199954][T13811] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  383.210333][T13811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  383.224450][T13813] loop4: detected capacity change from 0 to 1024
[  383.583550][   T34] audit: type=1326 audit(1776621854.464:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.3024" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0c299c819 code=0x0
[  383.784874][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  383.787450][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  384.194983][T13833] usb usb9: usbfs: interface 0 claimed by hub while 'syz.5.3026' sets config #24579
[  384.618787][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3030'.
[  385.530596][T13845] loop5: detected capacity change from 0 to 32768
[  385.539262][T13845] (syz.5.3031,13845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  385.544631][T13845] (syz.5.3031,13845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  385.555947][T13845] (syz.5.3031,13845,1):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[  385.599663][T13845] (syz.5.3031,13845,1):ocfs2_fill_super:1177 ERROR: status = -22
[  386.027647][T13854] loop4: detected capacity change from 0 to 32768
[  386.039291][T13854] JBD2: Ignoring recovery information on journal
[  386.092443][T13854] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  386.213898][T10967] ocfs2: Unmounting device (7,4) on (node local)
[  386.492298][T13867] loop4: detected capacity change from 0 to 256
[  386.501326][T13867] exfat: Deprecated parameter 'utf8'
[  386.514911][T13867] exfat: Deprecated parameter 'namecase'
[  386.534495][T13867] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11a2e9fc, utbl_chksum : 0xe619d30d)
[  387.246498][T13861] loop5: detected capacity change from 0 to 262144
[  387.254383][T13861] F2FS-fs (loop5): invalid crc value
[  387.289525][T13869] loop4: detected capacity change from 0 to 32768
[  387.317558][T13869] JBD2: Ignoring recovery information on journal
[  387.351937][T13861] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  387.362795][T13861] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  387.366729][T13869] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  387.376959][   T34] audit: type=1800 audit(1776621858.254:230): pid=13861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3038" name="file1" dev="loop5" ino=7 res=0 errno=0
[  387.470303][T13869] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  387.470468][T13869] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  387.499708][T13869] OCFS2: File system is now read-only.
[  387.501942][T13869] (syz.4.3041,13869,0):ocfs2_calc_xattr_init:642 ERROR: status = -117
[  387.506929][T13869] (syz.4.3041,13869,0):ocfs2_mknod:338 ERROR: status = -117
[  387.516159][T13869] (syz.4.3041,13869,0):ocfs2_mknod:506 ERROR: status = -117
[  387.527829][T13869] (syz.4.3041,13869,0):ocfs2_create:679 ERROR: status = -117
[  387.623137][T10967] ocfs2: Unmounting device (7,4) on (node local)
[  388.049634][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'.
[  388.383140][T13893] loop4: detected capacity change from 0 to 40427
[  388.388896][T13893] F2FS-fs (loop4): build fault injection rate: 174
[  388.399666][T13893] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  388.413609][T13893] F2FS-fs (loop4): invalid crc value
[  388.486105][T13893] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  388.490493][T13893] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  388.555355][T13893] syz.4.3050: attempt to access beyond end of device
[  388.555355][T13893] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  388.599184][T10967] syz-executor: attempt to access beyond end of device
[  388.599184][T10967] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  388.609246][T10967] CPU: 1 UID: 0 PID: 10967 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  388.609270][T10967] Tainted: [L]=SOFTLOCKUP
[  388.609274][T10967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  388.609282][T10967] Call Trace:
[  388.609287][T10967]  <TASK>
[  388.609293][T10967]  dump_stack_lvl+0xe8/0x150
[  388.609317][T10967]  f2fs_handle_critical_error+0x37c/0x540
[  388.609339][T10967]  f2fs_write_end_io+0x1273/0x1740
[  388.609400][T10967]  __submit_merged_bio+0x256/0x700
[  388.609425][T10967]  __submit_merged_write_cond+0x3c9/0x4e0
[  388.609449][T10967]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  388.609487][T10967]  f2fs_write_data_pages+0x287e/0x34f0
[  388.609537][T10967]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  388.609596][T10967]  ? mod_memcg_lruvec_state+0x209/0x220
[  388.609617][T10967]  ? lru_gen_update_size+0x7c7/0xd10
[  388.609648][T10967]  ? __lock_acquire+0x6b5/0x2cf0
[  388.609680][T10967]  ? filemap_get_folios_tag+0x118/0x720
[  388.609696][T10967]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  388.609716][T10967]  do_writepages+0x32e/0x550
[  388.609743][T10967]  ? do_raw_spin_unlock+0x4d/0x210
[  388.609762][T10967]  filemap_fdatawrite+0x1e9/0x2f0
[  388.609814][T10967]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  388.609870][T10967]  ? do_raw_spin_unlock+0x4d/0x210
[  388.609888][T10967]  f2fs_sync_dirty_inodes+0x30e/0x860
[  388.609920][T10967]  f2fs_write_checkpoint+0x9df/0x26a0
[  388.609967][T10967]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  388.610057][T10967]  kill_f2fs_super+0x314/0x720
[  388.610082][T10967]  ? __pfx_kill_f2fs_super+0x10/0x10
[  388.610111][T10967]  ? lockdep_hardirqs_on+0x7a/0x110
[  388.610142][T10967]  deactivate_locked_super+0xbc/0x130
[  388.610159][T10967]  cleanup_mnt+0x437/0x4d0
[  388.610174][T10967]  ? _raw_spin_unlock_irq+0x23/0x50
[  388.610195][T10967]  task_work_run+0x1d9/0x270
[  388.610214][T10967]  ? __pfx_task_work_run+0x10/0x10
[  388.610236][T10967]  exit_to_user_mode_loop+0xed/0x480
[  388.610252][T10967]  ? rcu_is_watching+0x15/0xb0
[  388.610272][T10967]  do_syscall_64+0x32d/0xf80
[  388.610287][T10967]  ? trace_irq_disable+0x3b/0x150
[  388.610311][T10967]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.610328][T10967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.610341][T10967] RIP: 0033:0x7ff0c299da57
[  388.610355][T10967] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  388.610366][T10967] RSP: 002b:00007ffec01ad9a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  388.610380][T10967] RAX: 0000000000000000 RBX: 00007ff0c2a32048 RCX: 00007ff0c299da57
[  388.610389][T10967] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec01ada60
[  388.610398][T10967] RBP: 00007ffec01ada60 R08: 00007ffec01aea60 R09: 00000000ffffffff
[  388.610407][T10967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec01aeaf0
[  388.610415][T10967] R13: 00007ff0c2a32048 R14: 000000000005ed82 R15: 00007ffec01aeb30
[  388.610439][T10967]  </TASK>
[  388.772226][T10967] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  389.290323][T13929] loop4: detected capacity change from 0 to 32768
[  389.359210][T13929] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  389.400217][T13929] XFS (loop4): Ending clean mount
[  389.551794][T10967] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  390.004867][T13975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3083'.
[  390.051367][T13975] geneve1: entered promiscuous mode
[  390.431404][T13983] QAT: Device 4 not found
[  391.532066][T14007] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[  391.593276][T14011] loop5: detected capacity change from 0 to 16
[  391.633258][T14011] erofs (device loop5): mounted with root inode @ nid 36.
[  391.840497][T14019] syz.5.3098: attempt to access beyond end of device
[  391.840497][T14019] loop5: rw=8388608, sector=1936876908, nr_sectors = 1 limit=16
[  391.851248][T14019] syz.5.3098: attempt to access beyond end of device
[  391.851248][T14019] loop5: rw=8388608, sector=3955228672, nr_sectors = 1 limit=16
[  392.163540][T14025] support for the xor transformation has been removed.
[  392.222975][T14027] loop4: detected capacity change from 0 to 1024
[  392.252179][T14027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  392.256084][T14027] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.261859][T14027] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks
[  392.263983][T14027] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  392.275890][T10967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  392.912073][T14048] bond1 (unregistering): Released all slaves
[  393.533745][T14059] loop4: detected capacity change from 0 to 128
[  393.548824][T14059] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  393.575385][T14059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  394.030042][    C1] net_ratelimit: 3321 callbacks suppressed
[  394.030054][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  394.120581][T14064] loop5: detected capacity change from 0 to 32768
[  394.129565][T14064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3122 (14064)
[  394.145206][T14064] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  394.149308][T14064] BTRFS info (device loop5): using sha256 checksum algorithm
[  394.174316][   T34] audit: type=1326 audit(1776621865.054:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.3.3127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  394.193147][   T34] audit: type=1326 audit(1776621865.064:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.3.3127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  394.209516][   T34] audit: type=1326 audit(1776621865.064:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.3.3127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  394.221659][   T34] audit: type=1326 audit(1776621865.064:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.3.3127" exe="/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  394.231006][   T34] audit: type=1326 audit(1776621865.064:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.3.3127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  394.239769][   T34] audit: type=1326 audit(1776621865.074:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.3.3127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  394.247641][   T34] audit: type=1326 audit(1776621865.074:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.3.3127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  394.256085][   T34] audit: type=1326 audit(1776621865.074:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.3.3127" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  394.264237][   T34] audit: type=1326 audit(1776621865.074:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.3.3127" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f744639c819 code=0x7ffc0000
[  394.316878][T14064] BTRFS info (device loop5): allowing degraded mounts
[  394.337775][T14064] BTRFS info (device loop5): enabling ssd optimizations
[  394.349510][T14064] BTRFS info (device loop5): disabling tree log
[  394.351842][T14064] BTRFS info (device loop5): turning on sync discard
[  394.360951][T14064] BTRFS info (device loop5): enabling free space tree
[  394.364681][T14065] loop4: detected capacity change from 0 to 32768
[  394.368449][T14065] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 89c40897-f41d-4ccc-8874-7d563e378f54
[  394.373056][T14065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3121 (14065)
[  394.400080][T14065] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  394.404862][T14065] BTRFS info (device loop4): using sha256 checksum algorithm
[  394.500423][T14065] BTRFS info (device loop4): enabling ssd optimizations
[  394.516872][T14065] BTRFS info (device loop4): turning on async discard
[  394.518767][T14065] BTRFS info (device loop4): enabling free space tree
[  394.528126][T11383] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  394.751014][T10967] BTRFS info (device loop4): last unmount of filesystem 89c40897-f41d-4ccc-8874-7d563e378f54
[  394.863363][T14128] 9p: Bad value for 'rfdno'
[  395.006462][T14134] overlayfs: failed to resolve './file0': -2
[  395.400027][  T882] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  395.559497][  T882] usb 5-1: Using ep0 maxpacket: 8
[  395.591620][  T882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  395.594839][  T882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  395.600415][  T882] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40
[  395.609640][  T882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.629474][  T882] usb 5-1: Product: syz
[  395.631026][  T882] usb 5-1: Manufacturer: syz
[  395.632472][  T882] usb 5-1: SerialNumber: syz
[  395.892554][  T882] usb 5-1: USB disconnect, device number 21
[  395.928589][T11709] udevd[11709]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  396.346788][T14156] loop5: detected capacity change from 0 to 32768
[  396.412882][T14156] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  396.462176][T14156] XFS (loop5): Ending clean mount
[  396.471277][T14156] XFS (loop5): Quotacheck needed: Please wait.
[  396.524870][T14168] loop4: detected capacity change from 0 to 16
[  396.529760][T14156] XFS (loop5): Quotacheck: Done.
[  396.535686][T14168] erofs (device loop4): mounted with root inode @ nid 36.
[  396.572731][T14168] syz.4.3151: attempt to access beyond end of device
[  396.572731][T14168] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[  396.601381][   T34] audit: type=1800 audit(1776621867.474:240): pid=14171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3149" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  396.641690][T14168] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  396.657672][T14168] erofs (device loop4): read error -117 @ 0 of nid 89
[  397.748163][T11383] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  398.448911][T14195] hub 8-0:1.0: USB hub found
[  398.461724][T14195] hub 8-0:1.0: 1 port detected
[  398.605462][T14199] overlayfs: failed to clone upperpath
[  399.446934][T14242] netlink: 'syz.5.3185': attribute type 32 has an invalid length.
[  399.793396][ T5845] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  399.953859][T14253] loop4: detected capacity change from 0 to 32768
[  399.967085][ T5845] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  399.970749][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.978511][ T5845] usb 6-1: Product: syz
[  399.993005][T14253] blkno = 8ed2c, nblocks = 1
[  399.995476][T14253] ERROR: (device loop4): dbFree: block to be freed is outside the map
[  399.995476][T14253] 
[  399.999300][ T5845] usb 6-1: Manufacturer: syz
[  400.001883][ T5845] usb 6-1: SerialNumber: syz
[  400.006093][T14253] ERROR: (device loop4): remounting filesystem as read-only
[  400.008681][T14253] ialloc: diAlloc returned -17!
[  400.541220][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  400.546107][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  400.709577][  T882] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  400.859493][  T882] usb 5-1: Using ep0 maxpacket: 16
[  400.862905][  T882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  400.867164][  T882] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  400.877242][  T882] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  400.888774][  T882] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  400.892499][  T882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  400.894809][  T882] usb 5-1: SerialNumber: syz
[  400.911125][T14255] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  401.130252][  T882] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  401.139234][  T882] usb 5-1: USB disconnect, device number 22
[  401.225595][ T5810] Bluetooth: hci3: command 0x2016 tx timeout
[  401.559523][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  401.562994][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  401.570644][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  401.581585][ T5845] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  401.589670][ T5845] usb 6-1: USB disconnect, device number 17
[  401.810796][T14275] loop4: detected capacity change from 0 to 512
[  401.839681][T14275] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  401.842637][T14275] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  401.853699][T14275] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[  401.876914][T14275] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.3199: inode #15: comm syz.4.3199: iget: illegal inode #
[  401.885840][T14275] loop4: lost filesystem error report for type 5 error -117
[  401.886353][T14275] EXT4-fs (loop4): Remounting filesystem read-only
[  401.890730][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  401.890742][    C0] EXT4-fs (loop4): initial error at time 1776621872: ext4_orphan_get:1391
[  401.890753][    C0] EXT4-fs (loop4): last error at time 1776621872: ext4_orphan_get:1391
[  401.911063][T14275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.934326][T10967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.045842][T14279] loop4: detected capacity change from 0 to 4096
[  402.068619][T14281] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  402.170699][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3201'.
[  402.589495][ T5910] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  402.743952][ T5910] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.747563][ T5910] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  402.760184][ T5910] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  402.767060][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  402.781069][ T5910] usb 6-1: SerialNumber: syz
[  402.994286][ T5910] usb 6-1: 0:2 : does not exist
[  403.064034][ T5910] usb 6-1: USB disconnect, device number 18
[  403.111287][T11709] udevd[11709]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  403.737666][   T34] kauditd_printk_skb: 1 callbacks suppressed
[  403.737681][   T34] audit: type=1326 audit(1776621874.614:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.762214][   T34] audit: type=1326 audit(1776621874.624:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.791233][   T34] audit: type=1326 audit(1776621874.624:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.799163][   T34] audit: type=1326 audit(1776621874.634:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.808723][   T34] audit: type=1326 audit(1776621874.634:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.834844][   T34] audit: type=1326 audit(1776621874.634:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.853997][   T34] audit: type=1326 audit(1776621874.634:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.864121][T14327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3220'.
[  403.872349][   T34] audit: type=1326 audit(1776621874.634:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.891170][   T34] audit: type=1326 audit(1776621874.634:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.898878][   T34] audit: type=1326 audit(1776621874.634:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14323 comm="syz.5.3218" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  403.936415][T14331] loop4: detected capacity change from 0 to 8
[  403.941757][T14331] squashfs image failed sanity check
[  404.904303][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3234'.
[  404.929301][T14369] loop5: detected capacity change from 0 to 4096
[  404.938539][T14369] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  404.957945][T14369] ntfs3(loop5): $Secure::$SII is corrupted.
[  404.962033][T14370] 8021q: adding VLAN 0 to HW filter on device bond1
[  404.990706][T14369] ntfs3(loop5): Failed to initialize $Secure (-22).
[  405.298657][T14383] loop4: detected capacity change from 0 to 128
[  405.324690][T14383] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  405.337535][T14383] ext4 filesystem being mounted at /409/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  405.398341][T10967] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  405.476773][T14377] loop5: detected capacity change from 0 to 32768
[  405.806287][T14402] Invalid logical block size (18)
[  405.929629][T12309] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  406.106646][T12309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  406.114920][T12309] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  406.118193][T12309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.132158][T12309] usb 5-1: config 0 descriptor??
[  406.140008][T14392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  406.585296][T12309] hid (null): nested delimiters
[  406.614164][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.622232][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.628455][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.636922][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.642533][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.647637][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.654595][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.659928][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.662105][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.664761][T12309] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  406.676045][T12309] asus 0003:0B05:1ABE.000C: nested delimiters
[  406.678087][T12309] asus 0003:0B05:1ABE.000C: item 0 2 2 10 parsing failed
[  406.681152][T12309] asus 0003:0B05:1ABE.000C: Asus hid parse failed: -22
[  406.683585][T12309] asus 0003:0B05:1ABE.000C: probe with driver asus failed with error -22
[  406.805399][T12309] usb 5-1: USB disconnect, device number 23
[  407.671181][T14429] loop5: detected capacity change from 0 to 128
[  407.719847][T14429] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  407.730502][T14429] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  407.824900][T11383] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  408.642863][T14452] overlayfs: failed to resolve './file0': -2
[  408.816183][T14455] loop4: detected capacity change from 0 to 32768
[  408.829040][T14455] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  408.833462][T14455] JBD2: Ignoring recovery information on journal
[  408.849070][T14460] loop5: detected capacity change from 0 to 128
[  408.853407][T14455] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  408.864139][T14460] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  408.886042][T14460] hpfs: filesystem error: improperly stopped
[  408.893719][T14460] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  408.894232][T14455] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1
[  408.902797][T14460] hpfs: You really don't want any checks? You are crazy...
[  408.902997][T14460] hpfs: hpfs_map_sector(): read error
[  408.909912][T14455] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  408.911763][T14460] hpfs: code page support is disabled
[  408.913484][T14455] OCFS2: File system is now read-only.
[  408.913501][T14455] (syz.4.3271,14455,0):ocfs2_search_chain:1888 ERROR: status = -30
[  408.919606][T14460] hpfs: hpfs_map_4sectors(): unaligned read
[  408.924253][T14460] hpfs: hpfs_map_4sectors(): unaligned read
[  408.924941][T14455] (syz.4.3271,14455,0):ocfs2_search_chain:2011 ERROR: status = -30
[  408.928809][T14460] hpfs: filesystem error: unable to find root dir
[  408.929344][T14455] (syz.4.3271,14455,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30
[  408.934722][T14455] (syz.4.3271,14455,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30
[  408.937898][T14455] (syz.4.3271,14455,0):__ocfs2_claim_clusters:2532 ERROR: status = -30
[  408.941206][T14455] (syz.4.3271,14455,0):__ocfs2_claim_clusters:2540 ERROR: status = -30
[  408.944233][T14455] (syz.4.3271,14455,0):ocfs2_local_alloc_new_window:1197 ERROR: status = -30
[  408.947395][T14455] (syz.4.3271,14455,0):ocfs2_local_alloc_new_window:1222 ERROR: status = -30
[  408.951290][T14455] (syz.4.3271,14455,0):ocfs2_local_alloc_slide_window:1296 ERROR: status = -30
[  408.954979][T14455] (syz.4.3271,14455,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30
[  408.958707][T14455] (syz.4.3271,14455,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  408.962154][T14455] (syz.4.3271,14455,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  408.963325][T14460] hpfs: hpfs_map_4sectors(): unaligned read
[  408.965967][T14455] (syz.4.3271,14455,0):ocfs2_reserve_clusters_with_limit:1241 ERROR: status = -30
[  408.966035][T14455] (syz.4.3271,14455,0):ocfs2_reserve_clusters_with_limit:1290 ERROR: status = -30
[  408.975166][T14455] (syz.4.3271,14455,0):ocfs2_symlink:1927 ERROR: status = -30
[  408.978119][T14455] (syz.4.3271,14455,0):ocfs2_symlink:2081 ERROR: status = -30
[  408.982091][T14460] hpfs: hpfs_map_sector(): read error
[  409.079993][T10967] ocfs2: Unmounting device (7,4) on (node local)
[  409.580576][T14473] loop4: detected capacity change from 0 to 32768
[  409.589986][T14473] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3278 (14473)
[  409.604360][T14479] loop5: detected capacity change from 0 to 4096
[  409.616731][T14473] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  409.652748][T14473] BTRFS info (device loop4): using sha256 checksum algorithm
[  409.661866][T14483] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  409.706139][T14479] NILFS (loop5): nilfs_palloc_freev (ino=3): entry number 32 already freed
[  409.711183][T14479] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  409.746756][T14473] BTRFS info (device loop4): setting nodatasum
[  409.748470][T14473] BTRFS info (device loop4): enabling ssd optimizations
[  409.752397][T14473] BTRFS info (device loop4): turning on sync discard
[  409.760534][T14473] BTRFS info (device loop4): enabling free space tree
[  409.762552][T14473] BTRFS info (device loop4): force zlib compression, level 3
[  409.790847][T10967] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  410.238387][T14517] loop5: detected capacity change from 0 to 4096
[  410.258466][T14517] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  410.306700][T14517] ntfs3(loop5): ino=1a, mi_enum_attr
[  410.309914][  T882] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  410.311082][T14517] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  410.331531][T14517] ntfs3(loop5): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  410.462398][  T882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.466516][  T882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.470761][  T882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  410.474440][  T882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  410.477118][  T882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.481367][  T882] usb 5-1: config 0 descriptor??
[  410.699548][ T5910] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  410.849511][ T5910] usb 6-1: Using ep0 maxpacket: 8
[  410.858669][ T5910] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  410.861468][ T5910] usb 6-1: config 179 has no interface number 0
[  410.863927][ T5910] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  410.879052][ T5910] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  410.884001][ T5910] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  410.886925][ T5910] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  410.908498][ T5910] usb 6-1: config 179 interface 65 has no altsetting 0
[  410.914515][  T882] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  410.918095][ T5910] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  410.929450][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.149139][ T5910] usb 6-1: USB disconnect, device number 19
[  411.986634][T14561] loop5: detected capacity change from 0 to 8
[  412.037958][T14561] SQUASHFS error: xz decompression failed, data probably corrupt
[  412.056583][T14561] SQUASHFS error: Failed to read block 0x108: -5
[  412.065533][T14561] SQUASHFS error: Unable to read metadata cache entry [106]
[  412.071325][T14561] SQUASHFS error: Unable to read inode 0x11f
[  412.596019][T14580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3317'.
[  413.049846][   T31] usb 5-1: USB disconnect, device number 24
[  414.440357][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  414.589559][   T10] usb 5-1: Using ep0 maxpacket: 32
[  414.592790][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  414.597703][   T10] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  414.603065][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.605376][   T10] usb 5-1: Product: syz
[  414.606524][   T10] usb 5-1: Manufacturer: syz
[  414.607749][   T10] usb 5-1: SerialNumber: syz
[  414.645008][ T5910] kernel read not supported for file /vcs (pid: 5910 comm: kworker/0:6)
[  414.715780][   T34] audit: type=1326 audit(1776621885.594:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14633 comm="syz.5.3340" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf91b9c819 code=0x0
[  414.843054][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  414.926965][   T10] usb 5-1: USB disconnect, device number 25
[  414.973983][T10939] udevd[10939]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  415.747120][T14647] loop4: detected capacity change from 0 to 32768
[  415.794726][T14647] JBD2: Ignoring recovery information on journal
[  415.847342][T14647] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  415.915583][T10967] ocfs2: Unmounting device (7,4) on (node local)
[  415.982230][T14659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3352'.
[  416.019749][   T31] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  416.169554][   T31] usb 6-1: Using ep0 maxpacket: 8
[  416.184111][   T31] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  416.187407][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  416.199702][   T31] usb 6-1: Product: syz
[  416.201128][   T31] usb 6-1: Manufacturer: syz
[  416.202560][   T31] usb 6-1: SerialNumber: syz
[  416.220137][   T31] usb 6-1: config 0 descriptor??
[  416.230972][   T31] gspca_main: sq905-2.14.0 probing 2770:9120
[  416.674188][T14691] loop4: detected capacity change from 0 to 256
[  416.709079][T14691] FAT-fs (loop4): Directory bread(block 64) failed
[  416.723574][T14691] FAT-fs (loop4): Directory bread(block 65) failed
[  416.726411][T14691] FAT-fs (loop4): Directory bread(block 66) failed
[  416.730250][T14691] FAT-fs (loop4): Directory bread(block 67) failed
[  416.733084][T14691] FAT-fs (loop4): Directory bread(block 68) failed
[  416.735938][T14691] FAT-fs (loop4): Directory bread(block 69) failed
[  416.738826][T14691] FAT-fs (loop4): Directory bread(block 70) failed
[  416.747594][T14691] FAT-fs (loop4): Directory bread(block 71) failed
[  416.750884][T14691] FAT-fs (loop4): Directory bread(block 72) failed
[  416.753614][T14691] FAT-fs (loop4): Directory bread(block 73) failed
[  416.829541][   T31] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  416.832458][   T31] sq905 6-1:0.0: probe with driver sq905 failed with error -71
[  416.852619][   T31] usb 6-1: USB disconnect, device number 20
[  417.157582][T14693] loop4: detected capacity change from 0 to 32768
[  417.162062][T14693] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3367 (14693)
[  417.178304][T14693] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  417.188370][T14693] BTRFS info (device loop4): using sha256 checksum algorithm
[  417.319224][T14693] BTRFS info (device loop4): enabling ssd optimizations
[  417.325032][T14693] BTRFS info (device loop4): turning on async discard
[  417.329964][T14693] BTRFS info (device loop4): enabling free space tree
[  417.413792][T10967] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  417.941287][T14727] overlayfs: failed to clone upperpath
[  417.975044][T14717] loop5: detected capacity change from 0 to 32768
[  418.005132][T14717] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3372 (14717)
[  418.026299][T14717] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  418.029116][T14717] BTRFS info (device loop5): using blake2b checksum algorithm
[  418.091290][T14717] BTRFS info (device loop5): enabling ssd optimizations
[  418.093495][T14717] BTRFS info (device loop5): turning on async discard
[  418.095505][T14717] BTRFS info (device loop5): enabling free space tree
[  418.097502][T14717] BTRFS info (device loop5): use zstd compression, level 3
[  418.131915][   T34] audit: type=1800 audit(1776621889.014:253): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3372" name="file1" dev="loop5" ino=260 res=0 errno=0
[  418.159703][   T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  418.200027][T11383] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  418.336400][   T31] usb 5-1: Using ep0 maxpacket: 32
[  418.340170][   T31] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  418.355251][   T31] usb 5-1: config 0 has no interface number 0
[  418.357195][   T31] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  418.362844][   T31] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  418.375915][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.378422][   T31] usb 5-1: Product: syz
[  418.380102][   T31] usb 5-1: Manufacturer: syz
[  418.381816][   T31] usb 5-1: SerialNumber: syz
[  418.394562][   T31] usb 5-1: config 0 descriptor??
[  418.397142][T14725] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  418.617387][T14725] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  418.854799][   T31] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  418.859981][T12309] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  418.863841][   T31] asix 5-1:0.188: probe with driver asix failed with error -71
[  418.872430][   T31] usb 5-1: USB disconnect, device number 26
[  419.029620][T12309] usb 6-1: Using ep0 maxpacket: 8
[  419.032750][T12309] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  419.035095][T12309] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  419.041478][T12309] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  419.044328][T12309] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  419.047253][T12309] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  419.065478][T12309] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  419.067997][T12309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.315057][T12309] usb 6-1: usb_control_msg returned -32
[  419.316864][T12309] usbtmc 6-1:16.0: can't read capabilities
[  419.896956][T14762] loop4: detected capacity change from 0 to 40427
[  419.903059][T14762] F2FS-fs (loop4): Corrupted extension count (33554469 + 1 > 64)
[  419.905388][T14762] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  419.919919][T14762] F2FS-fs (loop4): invalid crc value
[  419.949492][T14762] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  419.952348][T14762] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30
[  419.954501][T14762] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  420.037740][T14769] usbtmc 6-1:16.0: usb_control_msg returned -32
[  420.239153][   T10] usb 6-1: USB disconnect, device number 21
[  420.998453][T14782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.161318][T14789] netlink: 'syz.4.3396': attribute type 2 has an invalid length.
[  421.176642][T14789] netlink: 'syz.4.3396': attribute type 8 has an invalid length.
[  421.205410][T14789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3396'.
[  421.272565][T14799] veth1_macvtap: left promiscuous mode
[  421.324922][   T34] audit: type=1326 audit(1776621892.204:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.4.3402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c299c819 code=0x7ffc0000
[  421.349859][   T34] audit: type=1326 audit(1776621892.214:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.4.3402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c299c819 code=0x7ffc0000
[  421.383048][   T34] audit: type=1326 audit(1776621892.214:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.4.3402" exe="/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff0c299c819 code=0x7ffc0000
[  421.401816][   T34] audit: type=1326 audit(1776621892.214:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.4.3402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c299c819 code=0x7ffc0000
[  421.413825][   T34] audit: type=1326 audit(1776621892.214:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.4.3402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c299c819 code=0x7ffc0000
[  421.536561][T14813] netlink: 'syz.4.3408': attribute type 1 has an invalid length.
[  421.592961][T14816] loop4: detected capacity change from 0 to 512
[  421.610002][T14816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  421.635512][T14816] EXT4-fs (loop4): 1 truncate cleaned up
[  421.653716][T14816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.690015][T14806] loop5: detected capacity change from 0 to 32768
[  421.699680][ T5810] Bluetooth: hci2: command 0x0406 tx timeout
[  421.738239][T14806] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  421.760337][T14806] XFS (loop5): Ending clean mount
[  421.772155][T10967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.823921][T11383] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  421.984664][T14829] orangefs_devreq_open: device cannot be opened in blocking mode
[  422.310009][   T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  422.466243][   T34] audit: type=1326 audit(1776621893.344:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.5.3416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  422.496100][   T34] audit: type=1326 audit(1776621893.354:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.5.3416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  422.532914][   T34] audit: type=1326 audit(1776621893.364:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.5.3416" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  422.572561][   T34] audit: type=1326 audit(1776621893.364:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.5.3416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  422.597704][   T34] audit: type=1326 audit(1776621893.364:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14840 comm="syz.5.3416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x7ffc0000
[  423.425354][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  423.436324][   T10] usb 5-1: config 2 has an invalid interface number: 212 but max is 1
[  423.440272][   T10] usb 5-1: config 2 has an invalid interface number: 226 but max is 1
[  423.443819][   T10] usb 5-1: config 2 has no interface number 0
[  423.446677][   T10] usb 5-1: config 2 has no interface number 1
[  423.449894][   T10] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  423.454152][   T10] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  423.458790][   T10] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 45, changing to 9
[  423.472252][   T10] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 33649, setting to 1024
[  423.488949][   T10] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  424.461554][   T10] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  424.468511][   T10] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  424.478644][   T10] usb 5-1: config 2 interface 212 has no altsetting 0
[  424.489281][   T10] usb 5-1: string descriptor 0 read error: -22
[  424.494664][   T10] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  424.606071][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.629266][   T10] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input15
[  424.661120][    C1] xpad 5-1:2.226: xpad_irq_in - usb_submit_urb failed with result -1
[  424.886399][T12309] usb 5-1: USB disconnect, device number 27
[  425.119520][   T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  425.272505][   T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  425.276044][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.281444][   T10] usb 6-1: config 0 descriptor??
[  425.286026][   T10] cp210x 6-1:0.0: cp210x converter detected
[  425.458353][T14857] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  425.696239][   T10] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  425.922917][   T10] usb 6-1: cp210x converter now attached to ttyUSB0
[  426.115424][   T10] usb 6-1: USB disconnect, device number 22
[  426.134439][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  426.150083][   T10] cp210x 6-1:0.0: device disconnected
[  426.614111][T14882] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3434'.
[  426.746631][T14889] xt_hashlimit: size too large, truncated to 1048576
[  426.759619][ T5845] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  426.957037][ T5845] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  426.961456][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.965233][ T5845] usb 5-1: config 0 has no interface number 0
[  426.978008][ T5845] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  426.988135][ T5845] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  427.000785][ T5845] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  427.004152][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.007085][ T5845] usb 5-1: Product: syz
[  427.019018][ T5845] usb 5-1: Manufacturer: syz
[  427.021186][ T5845] usb 5-1: SerialNumber: syz
[  427.025267][ T5845] usb 5-1: config 0 descriptor??
[  427.446996][ T5845] usb 5-1: USB disconnect, device number 28
[  428.114669][T14938] tipc: Started in network mode
[  428.124006][T14938] tipc: Node identity , cluster identity 4711
[  428.419730][   T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  428.598870][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[  428.605319][   T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  428.610226][   T31] usb 6-1: too many endpoints for config 1 interface 2 altsetting 224: 255, using maximum allowed: 30
[  428.614580][   T31] usb 6-1: config 1 interface 2 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  428.624161][   T31] usb 6-1: config 1 interface 2 has no altsetting 1
[  428.630329][   T31] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  428.633590][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.635982][   T31] usb 6-1: Product: syz
[  428.638819][   T31] usb 6-1: Manufacturer: syz
[  428.643614][   T31] usb 6-1: SerialNumber: syz
[  428.884041][   T31] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  429.005499][   T31] usb 6-1: USB disconnect, device number 23
[  429.128086][T11709] udevd[11709]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  429.913759][   T31] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  430.070705][   T31] usb 5-1: Using ep0 maxpacket: 8
[  430.074556][   T31] usb 5-1: config index 0 descriptor too short (expected 26, got 18)
[  430.080704][   T31] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  430.084179][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.087091][   T31] usb 5-1: Product: syz
[  430.093991][   T31] usb 5-1: Manufacturer: syz
[  430.095795][   T31] usb 5-1: SerialNumber: syz
[  430.105137][   T31] usb 5-1: config 0 descriptor??
[  430.108502][   T31] gspca_main: sq930x-2.14.0 probing 2770:930c
[  430.320151][   T31] gspca_sq930x: reg_r 001f failed -71
[  430.327977][   T31] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  430.337180][   T31] usb 5-1: USB disconnect, device number 29
[  430.938825][T15004] loop4: detected capacity change from 0 to 512
[  430.955468][T15004] EXT4-fs (loop4): 1 truncate cleaned up
[  430.958095][T15004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.014920][T10967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.016977][T15023] loop4: detected capacity change from 0 to 131072
[  432.023059][T15023] F2FS-fs (loop4): Test dummy encryption mode enabled
[  432.026090][T15023] F2FS-fs (loop4): invalid crc value
[  432.066859][T15023] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  432.081281][T15023] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  432.195296][T15044] loop5: detected capacity change from 0 to 512
[  432.203172][T15044] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  432.213383][T15044] EXT4-fs (loop5): 1 truncate cleaned up
[  432.218654][T15044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.254662][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'.
[  432.282745][T11383] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.489642][T15055] netlink: 'syz.5.3511': attribute type 6 has an invalid length.
[  432.497832][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3511'.
[  432.502020][T15058] netlink: 'syz.3.3512': attribute type 2 has an invalid length.
[  432.508922][T15058] netlink: 'syz.3.3512': attribute type 8 has an invalid length.
[  432.538507][T15058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3512'.
[  432.620538][T15060] loop5: detected capacity change from 0 to 1024
[  432.623490][T15060] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  432.723856][T15046] loop4: detected capacity change from 0 to 32768
[  432.765668][T15046] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  432.852170][T15046] XFS (loop4): Ending clean mount
[  432.883122][T15046] XFS (loop4): User initiated shutdown received.
[  432.885029][T15046] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  432.888827][T15046] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  432.954063][T10967] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  433.323595][T15093] loop5: detected capacity change from 0 to 512
[  433.330147][T15093] EXT4-fs: Ignoring removed bh option
[  433.346597][T15093] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  433.359062][T15093] EXT4-fs (loop5): 1 truncate cleaned up
[  433.365674][T15093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  433.405131][T11383] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.799545][   T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  433.963166][   T10] usb 6-1: config 5 has an invalid interface number: 52 but max is 0
[  433.965494][   T10] usb 6-1: config 5 has no interface number 0
[  433.967219][   T10] usb 6-1: config 5 interface 52 has no altsetting 0
[  433.983836][   T10] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=37.9f
[  433.986583][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.999449][   T10] usb 6-1: Product: syz
[  434.001251][   T10] usb 6-1: Manufacturer: syz
[  434.003025][   T10] usb 6-1: SerialNumber: syz
[  434.462509][   T10] pegasus 6-1:5.52: Missing or invalid endpoints
[  434.466529][   T10] usb 6-1: USB disconnect, device number 24
[  435.264040][T15135] loop4: detected capacity change from 0 to 40427
[  435.267322][T15135] F2FS-fs: heap/no_heap options were deprecated
[  435.294698][T15135] F2FS-fs (loop4): build fault injection rate: 19
[  435.297130][T15135] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  435.313286][T15135] F2FS-fs (loop4): invalid crc value
[  435.338864][T15135] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  435.392218][T15135] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  435.400279][T15135] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  435.403929][T15135] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  435.417593][T15135] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060
[  435.425890][T15135] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  435.430999][T15135] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xae0
[  435.449295][T10967] syz-executor: attempt to access beyond end of device
[  435.449295][T10967] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  435.459847][T10967] CPU: 0 UID: 0 PID: 10967 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  435.459863][T10967] Tainted: [L]=SOFTLOCKUP
[  435.459866][T10967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  435.459871][T10967] Call Trace:
[  435.459875][T10967]  <TASK>
[  435.459878][T10967]  dump_stack_lvl+0xe8/0x150
[  435.459895][T10967]  f2fs_handle_critical_error+0x37c/0x540
[  435.459909][T10967]  f2fs_write_end_io+0x1273/0x1740
[  435.459930][T10967]  __submit_merged_bio+0x256/0x700
[  435.459942][T10967]  __submit_merged_write_cond+0x3c9/0x4e0
[  435.459955][T10967]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  435.459974][T10967]  f2fs_write_data_pages+0x287e/0x34f0
[  435.460000][T10967]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  435.460030][T10967]  ? mod_memcg_lruvec_state+0x209/0x220
[  435.460044][T10967]  ? __lock_acquire+0x6b5/0x2cf0
[  435.460061][T10967]  ? __lock_acquire+0x6b5/0x2cf0
[  435.460096][T10967]  ? do_raw_spin_lock+0x12b/0x2f0
[  435.460111][T10967]  ? do_raw_spin_unlock+0x4d/0x210
[  435.460119][T10967]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  435.460130][T10967]  do_writepages+0x32e/0x550
[  435.460147][T10967]  ? do_raw_spin_unlock+0x4d/0x210
[  435.460157][T10967]  filemap_fdatawrite+0x1e9/0x2f0
[  435.460171][T10967]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  435.460201][T10967]  ? do_raw_spin_unlock+0x4d/0x210
[  435.460210][T10967]  f2fs_sync_dirty_inodes+0x30e/0x860
[  435.460229][T10967]  f2fs_write_checkpoint+0x9df/0x26a0
[  435.460253][T10967]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  435.460286][T10967]  kill_f2fs_super+0x314/0x720
[  435.460300][T10967]  ? __pfx_kill_f2fs_super+0x10/0x10
[  435.460317][T10967]  ? lockdep_hardirqs_on+0x7a/0x110
[  435.460333][T10967]  deactivate_locked_super+0xbc/0x130
[  435.460343][T10967]  cleanup_mnt+0x437/0x4d0
[  435.460352][T10967]  ? _raw_spin_unlock_irq+0x23/0x50
[  435.460363][T10967]  task_work_run+0x1d9/0x270
[  435.460374][T10967]  ? __pfx_task_work_run+0x10/0x10
[  435.460386][T10967]  exit_to_user_mode_loop+0xed/0x480
[  435.460395][T10967]  ? rcu_is_watching+0x15/0xb0
[  435.460409][T10967]  do_syscall_64+0x32d/0xf80
[  435.460420][T10967]  ? trace_irq_disable+0x3b/0x150
[  435.460431][T10967]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.460441][T10967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.460448][T10967] RIP: 0033:0x7ff0c299da57
[  435.460457][T10967] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  435.460464][T10967] RSP: 002b:00007ffec01ad9a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  435.460473][T10967] RAX: 0000000000000000 RBX: 00007ff0c2a32048 RCX: 00007ff0c299da57
[  435.460478][T10967] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec01ada60
[  435.460484][T10967] RBP: 00007ffec01ada60 R08: 00007ffec01aea60 R09: 00000000ffffffff
[  435.460489][T10967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec01aeaf0
[  435.460494][T10967] R13: 00007ff0c2a32048 R14: 000000000006a489 R15: 00007ffec01aeb30
[  435.460507][T10967]  </TASK>
[  435.460510][T10967] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  435.714133][T15168] program syz.4.3557 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  436.172618][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3562'.
[  436.433787][T15188] loop5: detected capacity change from 0 to 256
[  436.500930][T15188] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  436.636853][T15188] block nbd5: not configured, cannot reconfigure
[  437.349727][ T5845] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  437.390824][T15203] loop5: detected capacity change from 0 to 4096
[  437.396566][T15203] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  437.408096][T15203] ntfs3(loop5): ino=3, mi_enum_attr
[  437.509526][ T5845] usb 5-1: Using ep0 maxpacket: 16
[  437.514832][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.524296][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.527979][ T5845] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  437.541904][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.550382][ T5845] usb 5-1: config 0 descriptor??
[  437.961803][ T5845] hid_parser_main: 301 callbacks suppressed
[  437.961815][ T5845] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0
[  437.965595][ T5845] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0
[  437.967597][ T5845] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0
[  437.979735][ T5845] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0
[  437.981712][ T5845] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0
[  437.990145][ T5845] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0
[  438.214417][T15223] netlink: 'syz.5.3580': attribute type 10 has an invalid length.
[  438.217270][T15223] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3580'.
[  438.324547][T15227] batman_adv: batadv0: Adding interface: dummy0
[  438.326466][T15227] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.335161][T15227] batman_adv: batadv0: Interface activated: dummy0
[  438.358914][T15227] batadv0: mtu less than device minimum
[  438.361964][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.366128][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.370187][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.374042][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.377556][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.381587][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.385537][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.389157][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.393657][T15227] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  438.413370][   T31] usb 5-1: USB disconnect, device number 30
[  439.054101][T15241] vlan2: entered allmulticast mode
[  439.056267][T15241] macsec0: entered allmulticast mode
[  439.720886][   T55] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10
[  439.720904][   T55] Bluetooth: unknown link type 10
[  439.724837][   T55] Bluetooth: hci3: connection err: -111
[  439.781302][T15260] loop5: detected capacity change from 0 to 512
[  439.794965][T15260] EXT4-fs: Ignoring removed i_version option
[  439.822044][T15260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.897025][T11383] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.209875][ T5845] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  441.370221][ T5845] usb 5-1: Using ep0 maxpacket: 8
[  441.381981][ T5845] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  441.385340][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  441.390790][ T5845] usb 5-1: Product: syz
[  441.392376][ T5845] usb 5-1: Manufacturer: syz
[  441.393957][ T5845] usb 5-1: SerialNumber: syz
[  441.402602][ T5845] usb 5-1: config 0 descriptor??
[  441.410970][ T5845] usbtest 5-1:0.0: FX2 device
[  441.429557][ T5845] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  441.618276][   T31] usb 5-1: USB disconnect, device number 31
[  441.748134][T15322] loop5: detected capacity change from 0 to 32768
[  441.763931][T15322] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  441.797107][T15322] XFS (loop5): Ending clean mount
[  441.807761][T15322] XFS (loop5): Quotacheck needed: Please wait.
[  441.847089][T15322] XFS (loop5): Quotacheck: Done.
[  441.879274][T11383] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  442.385672][   T34] kauditd_printk_skb: 27 callbacks suppressed
[  442.385683][   T34] audit: type=1326 audit(1776621913.264:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.5.3632" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf91b9c819 code=0x0
[  442.500938][T15341] loop4: detected capacity change from 0 to 32768
[  442.521660][T15341] XFS (loop4): Cannot mount filesystem with identical rtdev and ddev/logdev.
[  443.714708][T15382] loop5: detected capacity change from 0 to 128
[  443.730496][T15382] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  443.734725][T15382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  443.988791][T15394] overlayfs: failed to clone upperpath
[  444.009527][T12309] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  444.390620][T12309] usb 5-1: Using ep0 maxpacket: 32
[  444.395695][T12309] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  444.401631][T12309] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  444.405001][T12309] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  444.408041][T12309] usb 5-1: Product: syz
[  444.419497][T12309] usb 5-1: Manufacturer: syz
[  444.421424][T12309] usb 5-1: SerialNumber: syz
[  444.430313][T12309] usb 5-1: config 0 descriptor??
[  444.433534][T15380] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  444.657950][T12309] usb 5-1: USB disconnect, device number 32
[  445.233589][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  445.268483][ T5910] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  445.287217][ T5910] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  445.579682][T15418] kAFS: unable to lookup cell '/'
[  445.752408][T15416] loop4: detected capacity change from 0 to 32768
[  445.780968][T15416] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3659 (15416)
[  445.794524][T15416] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  445.798103][T15416] BTRFS info (device loop4): using blake2b checksum algorithm
[  445.823779][T15416] BTRFS info (device loop4): enabling ssd optimizations
[  445.826393][T15416] BTRFS info (device loop4): turning on async discard
[  445.829211][T15416] BTRFS info (device loop4): enabling free space tree
[  445.952232][T10967] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  447.094440][T15471] overlayfs: failed to clone upperpath
[  447.143731][T15473] loop4: detected capacity change from 0 to 256
[  448.575736][T15485] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3684'.
[  448.578279][T15485] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3684'.
[  449.013602][T15497] loop4: detected capacity change from 0 to 32768
[  449.016164][T15497] xfs: Deprecated parameter 'noikeep'
[  449.023496][T15497] XFS: noikeep mount option is deprecated.
[  449.029752][T15497] xfs: Deprecated parameter 'ikeep'
[  449.035987][T15497] XFS: ikeep mount option is deprecated.
[  449.080372][T15497] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  449.090865][T15497] XFS (loop4): Ending clean mount
[  449.106548][T10967] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  449.611238][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'.
[  449.817601][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3703'.
[  449.820280][T15535] net_ratelimit: 10 callbacks suppressed
[  449.820289][T15535] openvswitch: netlink: Key type 153 is out of range max 32
[  450.050228][ T5638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.053658][ T5638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.414253][ T5638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.428027][ T5638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.542825][ T5638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.546669][ T5638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.698413][ T5638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.719484][ T5638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.751141][   T55] Bluetooth: hci3: unexpected event for opcode 0x0404
[  450.933825][T15557] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3714'.
[  451.040063][ T5638] bridge_slave_1: left allmulticast mode
[  451.042249][ T5638] bridge_slave_1: left promiscuous mode
[  451.044432][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.088547][ T5638] bridge_slave_0: left allmulticast mode
[  451.090865][ T5638] bridge_slave_0: left promiscuous mode
[  451.093081][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.106856][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3718'.
[  451.112979][T15567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3718'.
[  451.390899][ T5638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  451.396678][ T5638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  451.402074][ T5638] bond0 (unregistering): Released all slaves
[  451.486133][ T5638] tipc: Left network mode
[  451.564174][T15583] loop4: detected capacity change from 0 to 256
[  451.572291][T15583] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  451.834966][T15590] openvswitch: netlink: Missing valid actions attribute.
[  451.841621][T15590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  451.959226][T15592] overlayfs: conflicting options: userxattr,redirect_dir=on
[  451.972081][ T5638] hsr_slave_0: left promiscuous mode
[  451.975143][ T5638] hsr_slave_1: left promiscuous mode
[  451.977847][ T5638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.997569][ T5638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.002106][ T5638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.004971][ T5638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.045703][ T5638] veth1_macvtap: left promiscuous mode
[  452.047786][ T5638] veth0_macvtap: left promiscuous mode
[  452.051444][ T5638] veth1_vlan: left promiscuous mode
[  452.054694][ T5638] veth0_vlan: left promiscuous mode
[  452.208990][T15600] loop4: detected capacity change from 0 to 1024
[  452.227979][T15600] EXT4-fs: Ignoring removed nomblk_io_submit option
[  452.240552][T15600] EXT4-fs (loop4): stripe (14) is not aligned with cluster size (16), stripe is disabled
[  452.264536][T15600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.327153][T10967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.406084][T15611] loop4: detected capacity change from 0 to 256
[  452.408788][T15611] exfat: Deprecated parameter 'namecase'
[  452.412184][T15611] exfat: Deprecated parameter 'utf8'
[  452.419063][T15611] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d)
[  452.517779][ T5638] team0 (unregistering): Port device team_slave_1 removed
[  452.541859][ T5638] team0 (unregistering): Port device team_slave_0 removed
[  452.665711][T15617] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3738'.
[  452.669167][T15617] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  453.006012][T15630] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  453.008382][T15630] overlayfs: failed to set xattr on upper
[  453.010116][T15630] overlayfs: ...falling back to redirect_dir=nofollow.
[  453.012106][T15630] overlayfs: ...falling back to index=off.
[  453.013885][T15630] overlayfs: ...falling back to uuid=null.
[  453.053777][T15631] overlayfs: failed to resolve './file1/file0': -2
[  453.272387][ T5638] IPVS: stop unused estimator thread 0...
[  453.709546][T12309] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  453.869692][T12309] usb 5-1: Using ep0 maxpacket: 8
[  453.873960][T12309] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  453.877078][T12309] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  453.881365][T12309] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  453.884687][T12309] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  453.888055][T12309] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  453.891526][T12309] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  453.895754][T12309] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  453.898316][T12309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.106268][T12309] usb 5-1: usb_control_msg returned -32
[  454.107914][T12309] usbtmc 5-1:16.0: can't read capabilities
[  454.463582][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  454.467758][T15664] usbtmc 5-1:16.0: Unable to send data, error -71
[  454.470496][T15664] usbtmc 5-1:16.0: usb_control_msg returned -32
[  454.474272][T12309] usb 5-1: USB disconnect, device number 33
[  455.719540][ T5910] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  455.885561][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  455.905913][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.924424][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  455.927733][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.930862][ T5910] usb 5-1: Product: syz
[  455.932460][ T5910] usb 5-1: Manufacturer: syz
[  455.934289][ T5910] usb 5-1: SerialNumber: syz
[  455.951979][ T5910] usb 5-1: config 0 descriptor??
[  455.956712][ T5910] uvcvideo 5-1:0.0: Found UVC 0.00 device syz (046d:0721)
[  455.959315][ T5910] uvcvideo 5-1:0.0: No valid video chain found.
[  456.165451][T12309] usb 5-1: USB disconnect, device number 34
[  456.802839][T15718] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3770'.
[  456.975464][T15720] loop4: detected capacity change from 0 to 4096
[  457.000226][T15720] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  457.003268][T15720] ntfs3(loop4): ino=3, mi_enum_attr
[  457.006792][T15720] ntfs3(loop4): MFT: r=0, expect seq=1 instead of 0!
[  457.009019][T15720] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  457.011328][T15720] ntfs3(loop4): Failed to load $MFT (-22).
[  457.095869][T15724] netlink: 'syz.3.3773': attribute type 64 has an invalid length.
[  457.320282][ T6122] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  457.491214][ T6122] usb 5-1: unable to get BOS descriptor or descriptor too short
[  457.494655][ T6122] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  457.499150][ T6122] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  457.507634][ T6122] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  457.511089][T15742] hsr0: entered promiscuous mode
[  457.513698][T15742] macvlan3: entered promiscuous mode
[  457.515648][T15742] macvlan3: entered allmulticast mode
[  457.517220][T15742] hsr0: entered allmulticast mode
[  457.518704][T15742] hsr_slave_0: entered allmulticast mode
[  457.522050][ T6122] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  457.527121][ T6122] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  457.530977][ T6122] usb 5-1: config 1 interface 1 has no altsetting 0
[  457.533001][T15742] hsr_slave_1: entered allmulticast mode
[  457.537440][ T6122] usb 5-1: string descriptor 0 read error: -22
[  457.539301][ T6122] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  457.539973][T15742] hsr0: left allmulticast mode
[  457.542668][ T6122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.549555][T15742] hsr_slave_0: left allmulticast mode
[  457.551178][T15742] hsr_slave_1: left allmulticast mode
[  457.951492][ T6122] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  458.394259][ T6122] usb 5-1: USB disconnect, device number 35
[  458.974413][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  458.978609][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  458.983926][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  458.987450][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  458.991643][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  459.182781][T15780] chnl_net:caif_netlink_parms(): no params data found
[  459.260793][T15780] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.263864][T15780] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.266930][T15780] bridge_slave_0: entered allmulticast mode
[  459.271197][T15780] bridge_slave_0: entered promiscuous mode
[  459.276227][T15780] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.279182][T15780] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.279525][ T5910] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  459.282510][T15780] bridge_slave_1: entered allmulticast mode
[  459.288978][T15780] bridge_slave_1: entered promiscuous mode
[  459.319337][T15780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.325948][T15780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.355510][T15780] team0: Port device team_slave_0 added
[  459.362050][T15780] team0: Port device team_slave_1 added
[  459.388323][T15780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.391225][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.399289][T15780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.406855][T15780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.409285][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.419503][T15780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.429581][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  459.435727][ T5910] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  459.440380][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.447253][ T5910] usb 5-1: Product: syz
[  459.449803][ T5910] usb 5-1: Manufacturer: syz
[  459.453407][T15780] hsr_slave_0: entered promiscuous mode
[  459.453914][ T5910] usb 5-1: SerialNumber: syz
[  459.456105][T15780] hsr_slave_1: entered promiscuous mode
[  459.461699][T15780] debugfs: 'hsr0' already exists in 'hsr'
[  459.464268][T15780] Cannot create hsr debugfs directory
[  459.655883][T15780] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  459.664411][T15780] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  459.677161][T15780] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  459.685347][T15780] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  459.720378][T15780] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.723166][T15780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.726029][T15780] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.728747][T15780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.787104][T15780] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.802534][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.806034][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.821384][T15780] 8021q: adding VLAN 0 to HW filter on device team0
[  459.829310][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.832094][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.846944][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.849612][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.029090][T15780] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.228258][T15780] veth0_vlan: entered promiscuous mode
[  460.242704][T15780] veth1_vlan: entered promiscuous mode
[  460.276147][T15780] veth0_macvtap: entered promiscuous mode
[  460.282222][T15780] veth1_macvtap: entered promiscuous mode
[  460.288393][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3808'.
[  460.297278][T15780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.307193][T15780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.316459][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.320663][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.326860][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.331030][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.451645][  T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.453985][  T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.502392][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.506152][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.840684][ T5910] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  460.857983][ T5910] usb 5-1: USB disconnect, device number 36
[  461.059671][   T55] Bluetooth: hci4: command tx timeout
[  461.416340][T15839] netlink: 'syz.4.3813': attribute type 1 has an invalid length.
[  461.433467][T15841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3812'.
[  461.453171][T15841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3812'.
[  461.714307][T15843] loop4: detected capacity change from 0 to 32768
[  461.725265][T15843] (syz.4.3814,15843,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #66: rec_len is too small for name_len - offset=132, inode=71, rec_len=16, name_len=13
[  461.739895][T15843] (syz.4.3814,15843,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  461.743284][T15843] (syz.4.3814,15843,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[  461.743300][T15843] (syz.4.3814,15843,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  461.753558][T15843] (syz.4.3814,15843,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  461.756640][T15843] (syz.4.3814,15843,0):ocfs2_fill_super:1177 ERROR: status = -22
[  463.149975][   T55] Bluetooth: hci4: command tx timeout
[  465.220392][   T55] Bluetooth: hci4: command tx timeout
[  466.165346][T15939] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3845'.
[  467.149922][T15951] loop6: detected capacity change from 0 to 128
[  467.192578][T15951] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  467.209691][T15951] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  467.256567][T15780] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  467.311441][   T55] Bluetooth: hci4: command tx timeout
[  467.536318][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3858'.
[  468.135891][T16000] Cannot find del_set index 2 as target
[  468.339734][T12309] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  468.492382][T12309] usb 5-1: Using ep0 maxpacket: 32
[  468.498789][T12309] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  468.507065][T12309] usb 5-1: config 0 has no interface number 0
[  468.517158][T12309] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  468.525180][T12309] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  468.532258][T12309] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  468.535671][T12309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.540751][T12309] usb 5-1: Product: syz
[  468.543604][T12309] usb 5-1: Manufacturer: syz
[  468.546585][T12309] usb 5-1: SerialNumber: syz
[  468.557887][T12309] usb 5-1: config 0 descriptor??
[  468.655275][T16009] loop6: detected capacity change from 0 to 128
[  468.667253][T16009] EXT4-fs (loop6): Test dummy encryption mode enabled
[  468.680701][T16009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  468.683777][T16009] System zones: 1-3, 19-19, 35-36
[  468.686854][T16009] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  468.691861][T16009] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  468.702488][   T34] audit: type=1800 audit(1776621939.584:292): pid=16009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3878" name="file1" dev="loop6" ino=12 res=0 errno=0
[  468.762325][T15780] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  468.781594][T12309] radio-si470x 5-1:0.35: this is not a si470x device.
[  468.981973][T12309] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  468.992968][T12309] usb 5-1: USB disconnect, device number 37
[  469.855399][T16028] loop4: detected capacity change from 0 to 2048
[  469.893981][T16028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  469.913410][T16028] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  470.305800][T16039] vivid-004: =================  START STATUS  =================
[  470.309205][T16039] vivid-004: Radio HW Seek Mode: Bounded
[  470.311977][T16039] vivid-004: Radio Programmable HW Seek: false
[  470.314255][T16039] vivid-004: RDS Rx I/O Mode: Block I/O
[  470.316311][T16039] vivid-004: Generate RBDS Instead of RDS: false
[  470.318631][T16039] vivid-004: RDS Reception: true
[  470.320615][T16039] vivid-004: RDS Program Type: 0 inactive
[  470.322761][T16039] vivid-004: RDS PS Name:  inactive
[  470.324634][T16039] vivid-004: RDS Radio Text:  inactive
[  470.326689][T16039] vivid-004: RDS Traffic Announcement: false inactive
[  470.329185][T16039] vivid-004: RDS Traffic Program: false inactive
[  470.331667][T16039] vivid-004: RDS Music: false inactive
[  470.333700][T16039] vivid-004: ==================  END STATUS  ==================
[  470.456253][T16045] loop6: detected capacity change from 0 to 4096
[  470.460288][T16045] ntfs3(loop6): Primary boot: unsupported bytes per index 8192.
[  470.463851][T16045] ntfs3(loop6): try to read out of volume at offset 0x1ffe00
[  470.867842][T10967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.105171][T16068] loop4: detected capacity change from 0 to 2048
[  471.111977][T16068] NILFS (loop4): invalid segment: Inconsistency found
[  471.114100][T16068] NILFS (loop4): trying rollback from an earlier position
[  471.121924][T16068] NILFS (loop4): invalid segment: Checksum error in segment payload
[  471.124263][T16068] NILFS (loop4): error -22 while searching super root
[  471.176866][T16070] sctp: [Deprecated]: syz.4.3902 (pid 16070) Use of int in max_burst socket option deprecated.
[  471.176866][T16070] Use struct sctp_assoc_value instead
[  471.630166][T16092] ubi: mtd0 is already attached to ubi16
[  473.025339][T16115] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  473.171940][T16119] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3923'.
[  473.383302][ T5845] usb 5-1: new full-speed USB device number 38 using dummy_hcd
[  473.541921][ T5845] usb 5-1: unable to get BOS descriptor or descriptor too short
[  473.548944][ T5845] usb 5-1: not running at top speed; connect to a high speed hub
[  473.555250][ T5845] usb 5-1: config 1 has an invalid interface number: 8 but max is 2
[  473.560224][ T5845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  473.568069][ T5845] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  473.574493][ T5845] usb 5-1: config 1 has no interface number 0
[  473.578452][ T5845] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  473.587803][ T5845] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  473.593172][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.597770][ T5845] usb 5-1: Product: syz
[  473.601208][ T5845] usb 5-1: Manufacturer: syz
[  473.603717][ T5845] usb 5-1: SerialNumber: syz
[  473.615923][ T5845] usb 5-1: unknown sample rate
[  473.625560][ T5845] usb 5-1: unknown sample rate
[  473.784153][T11709] udevd[11709]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  473.855537][ T5910] usb 5-1: USB disconnect, device number 38
[  473.869140][T16135] loop6: detected capacity change from 0 to 512
[  473.908544][T16135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  473.916009][T16135] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  473.963748][T15780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.168058][T16146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3934'.
[  474.250458][T16150] loop6: detected capacity change from 0 to 128
[  474.269282][T16150] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  474.276080][T16152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3937'.
[  474.283994][T16150] hpfs: filesystem error: improperly stopped
[  474.286162][T16150] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  474.288969][T16150] hpfs: You really don't want any checks? You are crazy...
[  474.305927][T16150] hpfs: hpfs_map_sector(): read error
[  474.307715][T16150] hpfs: code page support is disabled
[  474.319550][T16150] hpfs: hpfs_map_4sectors(): unaligned read
[  474.321916][T16150] hpfs: hpfs_map_4sectors(): unaligned read
[  474.324024][T16150] hpfs: filesystem error: unable to find root dir
[  474.890727][T16164] XFS (nbd6): SB validate failed with error -5.
[  475.405447][T16175] loop4: detected capacity change from 0 to 32768
[  475.425691][T16175] (syz.4.3944,16175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  475.439749][T16175] (syz.4.3944,16175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  475.478475][T16175] JBD2: Ignoring recovery information on journal
[  475.511251][T16175] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  475.542213][T16175] (syz.4.3944,16175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9. Applying ECC.
[  475.547865][T16175] (syz.4.3944,16175,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9
[  475.555829][T16175] (syz.4.3944,16175,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  475.562960][T16175] (syz.4.3944,16175,0):ocfs2_quota_read:201 ERROR: status = -5
[  475.566203][T16175] Quota error (device loop4): find_next_id: Can't read quota tree block 2
[  475.572805][T16175] (syz.4.3944,16175,1):ocfs2_get_next_id:921 ERROR: status = -5
[  475.650931][T10967] ocfs2: Unmounting device (7,4) on (node local)
[  476.059556][ T5845] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  476.889494][ T5845] usb 5-1: Using ep0 maxpacket: 32
[  476.900782][ T5845] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  476.903320][ T5845] usb 5-1: config 0 has no interface number 0
[  476.905098][ T5845] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  476.908199][ T5845] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  476.919495][ T5845] usb 5-1: config 0 interface 85 has no altsetting 0
[  476.925021][ T5845] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  476.928052][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.939633][ T5845] usb 5-1: Product: syz
[  476.941154][ T5845] usb 5-1: Manufacturer: syz
[  476.942761][ T5845] usb 5-1: SerialNumber: syz
[  476.950326][ T5845] usb 5-1: config 0 descriptor??
[  477.114804][T16224] bond2: option mode: invalid value (22)
[  477.121323][T16224] bond2 (unregistering): Released all slaves
[  477.360301][ T5845] appletouch 5-1:0.85: Failed to request geyser raw mode
[  477.365556][ T5845] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  477.373657][ T5845] usb 5-1: USB disconnect, device number 39
[  477.847780][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3969'.
[  477.850856][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3969'.
[  477.853530][T16233] netlink: 'syz.3.3969': attribute type 14 has an invalid length.
[  478.047603][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3973'.
[  478.228753][T16243] binder: 16241:16243 ioctl 4018620d 0 returned -22
[  478.242355][T16243] loop4: detected capacity change from 0 to 256
[  478.874749][T16247] loop6: detected capacity change from 0 to 32768
[  478.955676][T16247] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  479.105266][T16247] XFS (loop6): Ending clean mount
[  479.109024][T16247] XFS (loop6): Quotacheck needed: Please wait.
[  479.229571][T16247] XFS (loop6): Quotacheck: Done.
[  479.242646][   T34] audit: type=1800 audit(1776621950.114:293): pid=16247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3974" name="file1" dev="loop6" ino=6150 res=0 errno=0
[  479.413601][T15780] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  479.891591][T16269] netlink: 'syz.6.3977': attribute type 29 has an invalid length.
[  479.906143][T16269] netlink: 'syz.6.3977': attribute type 29 has an invalid length.
[  479.917527][T16269] netlink: 264 bytes leftover after parsing attributes in process `syz.6.3977'.
[  479.930383][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3980'.
[  479.933033][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3980'.
[  480.179685][   T31] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  480.330857][   T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  480.334027][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.337678][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.349495][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  480.355063][   T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  480.358183][   T31] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  480.360683][   T31] usb 5-1: Manufacturer: syz
[  480.367336][   T31] usb 5-1: config 0 descriptor??
[  480.781246][   T31] appleir 0003:05AC:8243.0010: unknown main item tag 0x0
[  480.793928][   T31] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  481.151152][   T10] usb 5-1: USB disconnect, device number 40
[  482.152797][T16336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4010'.
[  482.631426][T16351] loop4: detected capacity change from 0 to 512
[  482.667146][T16351] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.4017: inode #0: comm syz.4.4017: iget: illegal inode #
[  482.681864][T16351] loop4: lost filesystem error report for type 5 error -117
[  482.682106][T16351] EXT4-fs (loop4): Remounting filesystem read-only
[  482.689474][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  482.691929][    C1] EXT4-fs (loop4): initial error at time 1776621953: ext4_init_orphan_info:583
[  482.695312][    C1] EXT4-fs (loop4): last error at time 1776621953: ext4_init_orphan_info:583
[  482.700724][T16351] EXT4-fs (loop4): get orphan inode failed
[  482.709995][T16351] EXT4-fs (loop4): mount failed
[  483.019460][   T31] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  483.169508][   T31] usb 5-1: Using ep0 maxpacket: 16
[  483.178490][   T31] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  483.185046][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.196251][   T31] usb 5-1: Product: syz
[  483.198685][   T31] usb 5-1: Manufacturer: syz
[  483.206394][   T31] usb 5-1: SerialNumber: syz
[  483.211682][   T31] usb 5-1: config 0 descriptor??
[  483.310361][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4023'.
[  483.421836][   T31] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  483.437566][   T31] usb 5-1: USB disconnect, device number 41
[  484.314964][T16407] loop4: detected capacity change from 0 to 4096
[  484.320733][T16407] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  484.326673][T16407] ntfs3(loop4): ino=3, mi_enum_attr
[  484.335772][T16407] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  484.337970][T16407] ntfs3(loop4): ino=1a, mi_enum_attr
[  484.340680][T16407] ntfs3(loop4): ino=1a, mi_enum_attr
[  484.342538][T16407] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  484.407584][T16409] loop4: detected capacity change from 0 to 16
[  484.410858][T16409] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  484.637537][T16413] loop4: detected capacity change from 0 to 32768
[  484.752233][T16415] loop4: detected capacity change from 0 to 256
[  484.754837][T16415] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  484.766245][T16415] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  484.826171][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'.
[  484.831909][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'.
[  484.857605][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'.
[  484.870015][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'.
[  484.934257][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'.
[  484.936859][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'.
[  485.101185][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4052'.
[  485.388875][T16450] loop4: detected capacity change from 0 to 128
[  485.440111][T16450] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  485.445287][T16450] ext4 filesystem being mounted at /621/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  486.294768][T16457] loop6: detected capacity change from 0 to 256
[  486.305122][T16457] exfat: Unknown parameter '000000000000000000006'
[  486.683533][T10967] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  486.840633][T16464] loop4: detected capacity change from 0 to 4096
[  486.845657][T16464] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  486.857579][T16464] ntfs3(loop4): ino=3, mi_enum_attr
[  486.875784][T16464] ntfs3(loop4): ino=1, mi_enum_attr
[  486.878127][T16464] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  486.884630][T16464] ntfs3(loop4): Failed to load $MFTMirr (-22).
[  486.982594][T16470] overlayfs: upper fs does not support file handles, falling back to index=off.
[  487.239528][ T5845] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  487.394171][ T5845] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  487.397182][ T5845] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  487.409678][ T5845] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  487.413357][ T5845] usb 5-1: config 220 has no interface number 2
[  487.415670][ T5845] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  487.427816][ T5845] usb 5-1: config 220 interface 0 has no altsetting 0
[  487.432488][ T5845] usb 5-1: config 220 interface 76 has no altsetting 0
[  487.435007][ T5845] usb 5-1: config 220 interface 1 has no altsetting 0
[  487.440155][ T5845] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  487.443307][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.446067][ T5845] usb 5-1: Product: syz
[  487.447651][ T5845] usb 5-1: Manufacturer: syz
[  487.456827][ T5845] usb 5-1: SerialNumber: syz
[  487.690822][ T5845] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  487.695592][ T5845] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  487.702265][ T5845] uvcvideo 5-1:220.0: No valid video chain found.
[  487.708247][ T5845] usb 5-1: selecting invalid altsetting 0
[  487.744518][ T5845] usb 5-1: selecting invalid altsetting 0
[  487.746662][ T5845] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  487.753883][ T5845] usb 5-1: USB disconnect, device number 42
[  488.008287][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4073'.
[  488.272160][T16523] loop4: detected capacity change from 0 to 1024
[  488.310586][T16525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.327840][T16523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  488.336489][T16523] ext4 filesystem being mounted at /624/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  488.352603][T16523] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.4080: lblock 3 mapped to illegal pblock 3 (length 3)
[  488.358294][T16523] EXT4-fs (loop4): Remounting filesystem read-only
[  488.378200][T10967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  488.512436][T16535] loop4: detected capacity change from 0 to 128
[  488.543860][T16535] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[  488.547132][T16535] FAT-fs (loop4): Filesystem has been set read-only
[  489.068775][T16550] loop4: detected capacity change from 0 to 2048
[  489.084505][T16550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.659601][   T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  489.809540][   T10] usb 5-1: Using ep0 maxpacket: 32
[  489.814020][   T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  489.819343][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.834952][   T10] usb 5-1: config 0 descriptor??
[  490.043740][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  490.048522][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  490.061463][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  490.064514][   T10] usb 5-1: media controller created
[  490.080001][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  490.215499][   T34] audit: type=1326 audit(1776621961.094:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.6.4103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976b9c819 code=0x7ffc0000
[  490.250796][   T10] az6027: usb out operation failed. (-71)
[  490.253361][   T34] audit: type=1326 audit(1776621961.104:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.6.4103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976b9c819 code=0x7ffc0000
[  490.253385][   T34] audit: type=1326 audit(1776621961.114:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.6.4103" exe="/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7976b9c819 code=0x7ffc0000
[  490.253403][   T34] audit: type=1326 audit(1776621961.114:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.6.4103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976b9c819 code=0x7ffc0000
[  490.253419][   T34] audit: type=1326 audit(1776621961.114:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.6.4103" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7976b9c819 code=0x7ffc0000
[  490.325983][   T10] az6027: usb out operation failed. (-71)
[  490.331213][   T10] stb0899_attach: Driver disabled by Kconfig
[  490.333793][   T10] az6027: no front-end attached
[  490.333793][   T10] 
[  490.337019][   T10] az6027: usb out operation failed. (-71)
[  490.339268][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  490.358070][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19
[  490.369799][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  490.372367][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  490.381418][   T10] usb 5-1: USB disconnect, device number 43
[  490.491225][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  490.605652][T16585] loop6: detected capacity change from 0 to 32768
[  492.004532][T16592] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  492.049283][T16594] loop6: detected capacity change from 0 to 2048
[  492.074798][T16594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  492.086371][T16594] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.094995][T16594] EXT4-fs (loop6): Online resizing not supported with bigalloc
[  492.124914][T15780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.155282][T16603] netlink: 'syz.3.4116': attribute type 29 has an invalid length.
[  492.158352][T16603] netlink: 'syz.3.4116': attribute type 29 has an invalid length.
[  492.982954][T16643] netlink: 'syz.6.4134': attribute type 3 has an invalid length.
[  492.985066][T16635] loop4: detected capacity change from 0 to 32768
[  493.936287][T16656] loop4: detected capacity change from 0 to 32768
[  493.978981][   T34] audit: type=1804 audit(1776621964.854:299): pid=16656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4139" name=2F6E6577726F6F742F3634352F66696C65302F1F dev="loop4" ino=7 res=1 errno=0
[  494.387021][T16679] loop6: detected capacity change from 0 to 1764
[  494.504973][T16683] loop6: detected capacity change from 0 to 256
[  494.524756][T16685] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  494.526412][T16683] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x386365a8, utbl_chksum : 0xe619d30d)
[  494.842466][T16694] exFAT-fs (loop6): valid_size(150994954) is greater than size(10)
[  494.855631][   T55] Bluetooth: Unexpected continuation frame (len 34)
[  495.145872][T16697] xt_TPROXY: Can be used only with -p tcp or -p udp
[  495.794390][T16715] loop6: detected capacity change from 0 to 512
[  495.852216][T16709] loop4: detected capacity change from 0 to 32768
[  495.892560][T16715] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.4166: corrupted inode contents
[  495.896838][T16715] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  495.896854][T16709] read_mapping_page failed!
[  495.902465][T16715] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.4166: mark_inode_dirty error
[  495.906472][T16715] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  495.906750][T16715] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.4166: corrupted inode contents
[  495.910226][    C1] EXT4-fs (loop6): error count since last fsck: 2
[  495.910241][    C1] EXT4-fs (loop6): initial error at time 1776621966: ext4_do_update_inode:5569: inode 16
[  495.910263][    C1] EXT4-fs (loop6): last error at time 1776621966: ext4_dirty_inode:6450: inode 16
[  495.916087][T16709] ERROR: (device loop4): txCommit: 
[  495.916087][T16709] 
[  495.917244][T16715] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  495.926314][T16709] ERROR: (device loop4): remounting filesystem as read-only
[  495.933168][T16715] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.4166: mark_inode_dirty error
[  495.936541][T16715] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  495.937683][T16715] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.4166: corrupted inode contents
[  495.948739][T16715] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  495.949088][T16715] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  495.954758][T16715] loop6: lost filesystem error report for type 5 error -117
[  495.955117][T16715] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.4166: corrupted inode contents
[  495.963157][T16715] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  495.963414][T16715] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.4166: mark_inode_dirty error
[  495.971288][T16715] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  495.971597][T16715] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  495.972492][  T116] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[  495.974422][T16715] loop6: lost filesystem error report for type 5 error -117
[  495.977355][  T116] ------------[ cut here ]------------
[  495.981793][T16715] EXT4-fs (loop6): 1 truncate cleaned up
[  495.983104][  T116] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[  495.985596][T16715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.991621][T16715] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  495.996121][  T116] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  495.997938][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  496.001222][  T116] Tainted: [L]=SOFTLOCKUP
[  496.002377][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  496.005195][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  496.006722][  T116] Code: ca fd 90 0f 0b e8 a1 43 68 fe 48 c7 c7 20 95 0b 8c 48 c7 c6 19 91 0b 8c ba a4 03 00 00 48 c7 c1 20 a2 0b 8c e8 b2 69 ca fd 90 <0f> 0b e8 7a 43 68 fe 48 c7 c7 20 95 0b 8c 48 c7 c6 19 91 0b 8c ba
[  496.012202][  T116] RSP: 0018:ffffc900030e7c48 EFLAGS: 00010246
[  496.013946][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 30f0f9e1ad53ce00
[  496.016592][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  496.018837][  T116] RBP: ffffc90002c4a090 R08: ffffffff9011e8b7 R09: 1ffffffff2023d16
[  496.021565][  T116] R10: dffffc0000000000 R11: fffffbfff2023d17 R12: dffffc0000000000
[  496.023851][  T116] R13: 1ffff1102275ca15 R14: ffff888113ae50a8 R15: 0000000000000000
[  496.026275][  T116] FS:  0000000000000000(0000) GS:ffff8882a9462000(0000) knlGS:0000000000000000
[  496.028706][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  496.030879][  T116] CR2: 0000562fdced5000 CR3: 00000001161c8000 CR4: 00000000000006f0
[  496.033357][  T116] Call Trace:
[  496.034362][  T116]  <TASK>
[  496.035375][  T116]  jfs_lazycommit+0x582/0xaa0
[  496.036680][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  496.038153][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  496.039881][  T116]  ? __kthread_parkme+0x7a/0x1f0
[  496.041318][  T116]  kthread+0x388/0x470
[  496.042500][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  496.043987][  T116]  ? __pfx_kthread+0x10/0x10
[  496.045778][  T116]  ret_from_fork+0x51e/0xb90
[  496.047492][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  496.049336][  T116]  ? __switch_to+0xc7d/0x1450
[  496.051045][  T116]  ? __pfx_kthread+0x10/0x10
[  496.052862][  T116]  ret_from_fork_asm+0x1a/0x30
[  496.054635][  T116]  </TASK>
[  496.055760][  T116] Modules linked in:
[  496.057548][  T116] ---[ end trace 0000000000000000 ]---
[  496.063726][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  496.065905][   T41] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  496.073972][  T116] Code: ca fd 90 0f 0b e8 a1 43 68 fe 48 c7 c7 20 95 0b 8c 48 c7 c6 19 91 0b 8c ba a4 03 00 00 48 c7 c1 20 a2 0b 8c e8 b2 69 ca fd 90 <0f> 0b e8 7a 43 68 fe 48 c7 c7 20 95 0b 8c 48 c7 c6 19 91 0b 8c ba
[  496.080215][   T41] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u10:2: Failed to release dquot type 1
[  496.084244][  T116] RSP: 0018:ffffc900030e7c48 EFLAGS: 00010246
[  496.085703][T15780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.086507][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 30f0f9e1ad53ce00
[  496.093100][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  496.096059][  T116] RBP: ffffc90002c4a090 R08: ffffffff9011e8b7 R09: 1ffffffff2023d16
[  496.098990][  T116] R10: dffffc0000000000 R11: fffffbfff2023d17 R12: dffffc0000000000
[  496.101933][  T116] R13: 1ffff1102275ca15 R14: ffff888113ae50a8 R15: 0000000000000000
[  496.104475][  T116] FS:  0000000000000000(0000) GS:ffff8882a9462000(0000) knlGS:0000000000000000
[  496.120837][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  496.125216][  T116] CR2: 00007f7977a9aff8 CR3: 000000010bd66000 CR4: 00000000000006f0
[  496.133120][  T116] Kernel panic - not syncing: Fatal exception
[  496.135955][  T116] Kernel Offset: disabled
[  496.137608][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:01:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000004 RBX=ffff88816d8b0bc8 RCX=0000000000000002 RDX=0000000000000004
RSI=0000000000000004 RDI=0000000000000000 RBP=ffff88816d8b0ba8 RSP=ffffc900064073c8
R8 =ffffffff824fc0f4 R9 =ffff888114acdcc8 R10=ffffc90006407620 R11=fffff52000c80ef2
R12=0000000000000004 R13=ffff88816d8b0ba8 R14=ffff88816d8b0000 R15=0000000000000002
RIP=ffffffff81a18902 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557da19500 ffffffff 00c00000
GS =0000 ffff88818de62000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555925a6a28 CR3=00000001bc252000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000069462 RDI=0000000000069463 RBP=00000000000003f8 RSP=ffffc90007b17710
R8 =ffff888106ee0237 R9 =1ffff11020ddc046 R10=dffffc0000000000 R11=ffffffff853ee050
R12=dffffc0000000000 R13=ffffffff9a2b4a83 R14=ffffffff9a5cc900 R15=0000000000000000
RIP=ffffffff853ee0cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7977abc6c0 ffffffff 00c00000
GS =0000 ffff8882a9462000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562fdced5000 CR3=00000001161c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=040fffffffffffff 0448100000100008
XMM02=ffffffffcd081080 030fffffffffffff XMM03=64612f6276642f76 65642f01ffffffff
XMM04=77c2002378756d65 642f237265747061 XMM05=0114b09080800800 028080040fffffff
XMM06=ffffff040008000a 1000028080040c01 XMM07=07d2000800028080 031fffffc0800800
XMM08=028080031c801000 0010001080040601 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
