last executing test programs:

6m36.396727526s ago: executing program 32 (id=364):
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
chroot(&(0x7f0000000180)='./file0\x00')
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0, 0x1000)

6m12.142108636s ago: executing program 33 (id=643):
mkdir(&(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./cfg\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./cfg/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './cfg/usb_gadget/g1'}, 0x17)

5m47.015302558s ago: executing program 34 (id=874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94)

5m29.416881415s ago: executing program 35 (id=1026):
r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x3, 0x3, 0x2})

5m23.956681852s ago: executing program 36 (id=954):
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x26020480)
pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x4000000000, 0x800, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

5m21.602064611s ago: executing program 0 (id=1074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000000b05000000000000000000030000050800024000000005090001006d61726b00000000080003"], 0x7c}}, 0x80)

5m21.520598822s ago: executing program 0 (id=1075):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip6_vti0\x00'})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@remote, 0x1234, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x40, @local, @remote, [], "3b00123400000000"}}}}}}}, 0x0)

5m21.112292139s ago: executing program 0 (id=1076):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff})
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0)

5m21.01485933s ago: executing program 0 (id=1078):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
inotify_init()
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000103c9f00010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080801006c6f67000c000280060002407d0000000900010073707a30000000000900020073797a3200000000140000001100010000000000000000000000000aa71370076b4f922c3adc34f17aa013ece5c9fe52716c084b45ff48363ad57f3420046848a786a25f0c7cd7882a508ec9635484860a951abe611b83589c0dda94626c4bc4798e65ce1c26a5a1313400c35fde6f9a04586a3e0dc6417c"], 0x70}}, 0x0)

5m20.551289557s ago: executing program 0 (id=1083):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)

5m20.112457054s ago: executing program 0 (id=1087):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==")
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)

5m20.069687429s ago: executing program 37 (id=1087):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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")
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)

5m10.506506753s ago: executing program 8 (id=1139):
r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0xfbffffff, 0xa741)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x400, 0x0, 0x1009, 0x2222, 0x1, 0x4001c251, 0x9, 0x1})

5m10.506130725s ago: executing program 8 (id=1141):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="3200330020180600080211000000080211000001ffffffffffff640000020800080211000000000602020202020201021ba4000004006c"], 0x74}}, 0xc8c4)

5m10.380713258s ago: executing program 8 (id=1144):
msgrcv(0x0, 0x0, 0x31, 0x1, 0x4800)

5m10.333997983s ago: executing program 8 (id=1145):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)

5m10.333638096s ago: executing program 8 (id=1146):
syz_emit_ethernet(0x56, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f700", 0x1c, 0x2c, 0x0, @private0, @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0)

5m8.053830371s ago: executing program 8 (id=1169):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pread64(r0, 0x0, 0x0, 0xfffffff7)

5m7.932873435s ago: executing program 38 (id=1169):
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pread64(r0, 0x0, 0x0, 0xfffffff7)

5m7.831793805s ago: executing program 6 (id=1174):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18)

5m6.893008486s ago: executing program 6 (id=1185):
request_key(0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @empty, @empty, 0x7, 0x8000, 0x40, 0x400, 0x5, 0x18c0012, r2})

5m6.818082133s ago: executing program 6 (id=1187):
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})

5m6.579677712s ago: executing program 6 (id=1190):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@shortname_mixed}, {@utf8no}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@flush}, {@shortname_winnt}, {@rodir}]}, 0x0, 0x2be, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

5m6.443874692s ago: executing program 6 (id=1191):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mlock2(&(0x7f000052f000/0x1000)=nil, 0x1000, 0x0)

5m6.122324082s ago: executing program 6 (id=1194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="18005e800c000121ffffffff000000e007000200"], 0x34}}, 0x0)

5m5.994305715s ago: executing program 39 (id=1194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="18005e800c000121ffffffff000000e007000200"], 0x34}}, 0x0)

3m38.781105099s ago: executing program 1 (id=2124):
r0 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback={0xffffffffffffff91}, 0xdbb}, 0x1c)

3m38.730024124s ago: executing program 1 (id=2126):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

3m38.671073485s ago: executing program 1 (id=2129):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80182, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0)

3m38.621607308s ago: executing program 1 (id=2133):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000027c0)=ANY=[], 0x5}}, 0x4080)

3m38.560180043s ago: executing program 1 (id=2135):
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff70)

3m38.352729444s ago: executing program 1 (id=2140):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86)

3m23.246314646s ago: executing program 40 (id=2140):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86)

1m22.849596671s ago: executing program 9 (id=3663):
unshare(0x20000400)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)

1m22.772178301s ago: executing program 9 (id=3665):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x5ee, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1m21.840987889s ago: executing program 9 (id=3675):
unshare(0x400)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)

1m21.732856725s ago: executing program 9 (id=3678):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}])

1m21.287750832s ago: executing program 9 (id=3687):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000002dd9000085000000ab0000009500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m20.913364449s ago: executing program 9 (id=3693):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, r0, 0x2)

1m20.732601855s ago: executing program 41 (id=3693):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, r0, 0x2)

41.96282418s ago: executing program 7 (id=4151):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x35314152}})

41.962665786s ago: executing program 7 (id=4152):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000280)=[{0x33, '\x00', @buffer={"b3c8dda98a5b60ae6030ec6f58ab9fcb24e64f4eb20774108867a166cb86ccea", 0x20}, 0xffff8000}, {0x30, '\x00', @buffer={"8400000000ea8f2737551a930e27ca3a60a72bf7f1b800", 0x20}, 0x1}, {0x19, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x3, @uvalue=0x1}, {0x2, @svalue=0x9}, {0x1, @uvalue=0x5}]}, 0x1ff}, {0x9, '\x00', @st={0x4, [{0x3, @uvalue=0x1}, {0x0, @svalue=0x80000001}, {0x3, @uvalue=0x6}, {0x0, @uvalue=0x8}]}, 0xfffffff8}]})

41.86275215s ago: executing program 7 (id=4153):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000002c0))

41.862637243s ago: executing program 7 (id=4154):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000580)={[{@nomblk_io_submit}, {@nobh}, {@prjquota}, {@bsdgroups}, {@nodiscard}, {@sysvgroups}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@discard}, {@bh}, {@nodelalloc}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x4cd, &(0x7f0000000b40)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)

41.752371253s ago: executing program 7 (id=4155):
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020)

41.289895828s ago: executing program 7 (id=4157):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x4, 'lo\x00'})

41.026435662s ago: executing program 42 (id=4157):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x4, 'lo\x00'})

27.822176141s ago: executing program 3 (id=4271):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000088000000b"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)

27.76044894s ago: executing program 3 (id=4272):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
keyctl$set_reqkey_keyring(0xe, 0x2)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rmdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)

27.622354196s ago: executing program 3 (id=4274):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0)

27.520202538s ago: executing program 3 (id=4276):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5d9, &(0x7f00000010c0)="$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")
mkdir(&(0x7f0000000000)='config\x00', 0x1ff)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffd9)

27.193132976s ago: executing program 3 (id=4277):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="400052f606001040f3"], 0x24}}, 0x0)

26.946784319s ago: executing program 3 (id=4279):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0)
write(r0, 0x0, 0x0)

26.833975048s ago: executing program 43 (id=4279):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0)
write(r0, 0x0, 0x0)

3.870799239s ago: executing program 4 (id=4546):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4)
read(r0, &(0x7f0000000180)=""/171, 0xab)

3.664474677s ago: executing program 4 (id=4549):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)="7a67b645fb3228ef0bacdde862e1e368bb0be2b830468baacc18337c7c", 0x1d}], 0x2)

3.663371423s ago: executing program 4 (id=4551):
setns(0xc9, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

3.552757296s ago: executing program 4 (id=4553):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, 0x0})
syz_usb_disconnect(r0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

2.582571032s ago: executing program 5 (id=4557):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x91ea6c1af182532)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]})
openat(r0, &(0x7f00000003c0)='./bus\x00', 0x102, 0x1)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2})

1.692142244s ago: executing program 5 (id=4565):
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

1.4383594s ago: executing program 5 (id=4566):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}, {&(0x7f0000000300)="9e7f49b3", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0)

1.435986306s ago: executing program 5 (id=4568):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="7400000009060102000000000000007fffffff000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x4048001}, 0xc894)

1.340530906s ago: executing program 2 (id=4570):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000003b40)=ANY=[], 0x1, 0x105ea, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0)

1.005364385s ago: executing program 5 (id=4571):
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRESOCT, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='Y', 0x1)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)

712.704ms ago: executing program 2 (id=4572):
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)

462.054304ms ago: executing program 4 (id=4573):
set_mempolicy(0x1, &(0x7f0000000040)=0x4, 0x4)

402.264269ms ago: executing program 4 (id=4574):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r2 = socket$inet(0x2, 0x80001, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000)
setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0)
dup(r0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000900)={<r4=>0x0, 0x5, 0x0, [0x6, 0xfb4, 0x6, 0x1, 0x8000000000000000], [0x3, 0xc8, 0x3, 0x4, 0x6, 0x3, 0x2, 0xdca6, 0x5, 0x6, 0x0, 0x1, 0xf, 0x1, 0x2, 0x7f, 0x0, 0x4, 0x1, 0x1c000000, 0x2, 0x7, 0x100, 0x5, 0x4, 0x40000000000, 0x100000000, 0x2, 0x8, 0x10000, 0xb4c4, 0x3, 0x5, 0x4, 0x7818, 0x6, 0x8, 0x98, 0xb, 0x9, 0x8, 0x1, 0x1, 0x7ff, 0x80000000, 0x8, 0x9, 0xffffffff, 0x10000, 0x8, 0x4, 0x5, 0x4, 0x3, 0x1000, 0xcf0e, 0x80000001, 0x1187cd22, 0x8, 0x400, 0x9, 0xc00, 0xc5, 0x8a8, 0x101, 0x5, 0x8, 0x4, 0x4, 0x3, 0x8000000000000000, 0x2000000, 0x2, 0x8001, 0x5a, 0x1, 0x6, 0xb, 0x1, 0x5, 0x6, 0x6, 0x2, 0x2, 0x5, 0x7fffffffffffffff, 0x8, 0x1, 0x0, 0x3, 0x4, 0x7, 0x5, 0x100, 0x0, 0x1, 0x3, 0xaaf, 0x3, 0xffffffffffffbcdd, 0x2, 0x2, 0xda, 0x0, 0x11a, 0x2, 0x8, 0x801, 0x7, 0x4, 0x101, 0x7, 0x5bec, 0x7, 0x9, 0xf, 0x7fffffffffffffff, 0xfffffffffffffe01, 0x4, 0x1, 0x1]})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000d40)={<r5=>0x0, 0x3, 0x1, [0xf, 0xfffffffffffffffd, 0x7, 0x5, 0x6], [0x2, 0x0, 0x4000, 0x4, 0x7fff, 0x3, 0xf5, 0x3d18b423, 0x100000000, 0x8, 0x101, 0xb, 0x1, 0x7, 0x6, 0xfffffffffffffff9, 0x4, 0x24000, 0x8, 0x5, 0x5, 0x7, 0x3c3, 0x81, 0x9fb3, 0x800, 0xa4, 0x6, 0x9, 0x9e, 0x7a0c, 0x7, 0x400000000000, 0x7, 0xe03, 0xc16, 0x3, 0xffffffffffffff7f, 0x4, 0x4, 0x7fffffffffffffff, 0x100, 0x8, 0x7, 0x0, 0x7fffffffffffffff, 0x80000001, 0x4, 0x9, 0x9, 0x401, 0x4, 0xffff, 0x1, 0x5, 0x9, 0x6, 0x204000000000, 0x6, 0xffff, 0x9, 0x8, 0x80000, 0x6, 0x3, 0x9, 0x2, 0x2, 0x5, 0x7, 0x8, 0x2, 0xac90, 0xa8c, 0x5, 0x9, 0x8, 0x6, 0x0, 0xe8, 0x1, 0xff, 0x0, 0x7, 0x2, 0x8000000000000001, 0x5, 0x5e, 0x7fffffffffffffff, 0x7ff, 0x6, 0x7fff, 0x5, 0x6, 0x1, 0x4, 0x8000000000000001, 0x50, 0x80000001, 0x9, 0x6, 0x7, 0xffffffffffffffff, 0x0, 0xffffffff, 0xf6, 0x1c000000, 0xe77, 0x2, 0x0, 0x1c, 0xffffffffffffff8f, 0x6cc, 0x7fffffff, 0xfffff00000000000, 0x7fffffffffffffff, 0x3, 0xb, 0x1, 0x80000000, 0x7]})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002540)={0x8, 0x5, {0x5, @struct={0x0, 0x4}, r4, 0x6, 0x4, 0xfffffffffffffffa, 0x5, 0x6, 0x440, @usage=0x5, 0x800, 0x96f, [0x0, 0x9, 0x6, 0x2f, 0x0, 0x2]}, {0x2, @usage=0x7, 0x0, 0xa03e, 0x8, 0x67, 0x7f, 0x9, 0xa0, @struct={0x6, 0x2}, 0x8, 0x0, [0x0, 0x9, 0x2, 0x1, 0xdc2, 0x1020]}, {0x81, @struct={0x0, 0x2}, r5, 0x2, 0x1, 0x7, 0x3, 0x1, 0x41, @usage=0x8, 0x0, 0x7, [0x0, 0x3, 0x5, 0x480d05f2, 0x7763, 0x30000000]}, {0x56, 0x100, 0x6}})
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r9, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000003c0)}, 0x400000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/212, 0xd4}, 0x400800}], 0x4, 0x20000, 0x0)

341.996075ms ago: executing program 2 (id=4575):
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000)
r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)

242.509591ms ago: executing program 2 (id=4576):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/161, 0xa1}, 0x6}], 0x1, 0x22061, 0x0)

152.556008ms ago: executing program 2 (id=4577):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
pread64(r0, &(0x7f0000001600)=""/4073, 0x19, 0x12)

41.830672ms ago: executing program 2 (id=4578):
munlockall()
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
r1 = memfd_secret(0x80000)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x4, 0x1ff}})
ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x4, 0xeffffe01, 0x7fff, 0xff, "fe67e23fb5533a39eb5c0b319b7d34441000", 0x6, 0x10})
ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000))
ioctl$TIOCSTI(r6, 0x5412, 0x0)
r7 = msgget$private(0x0, 0x7fc)
msgrcv(r7, 0xffffffffffffffff, 0x0, 0x0, 0x1000)
openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97)

0s ago: executing program 5 (id=4579):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pread64(r0, &(0x7f00000001c0)=""/234, 0xea, 0x80)

kernel console output (not intermixed with test programs):

T16590] apparmor_bprm_creds_for_exec: label build failed
[  433.359574][T16591] profile_transition: unconfined exec no attachment
[  433.359587][T16591] apparmor_bprm_creds_for_exec: label build failed
[  433.449433][T16593] profile_transition: unconfined exec no attachment
[  433.449446][T16593] apparmor_bprm_creds_for_exec: label build failed
[  433.998819][T16601] loop3: detected capacity change from 0 to 40427
[  434.011027][T16601] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  434.013622][T16601] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  434.016638][T16601] F2FS-fs (loop3): invalid crc value
[  434.049200][T16601] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  434.054372][T16601] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  434.056545][T16601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  434.171062][T16614] fuse: fd is not a fuse device
[  434.176721][T16601] syz.3.3935: attempt to access beyond end of device
[  434.176721][T16601] loop3: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  434.319816][T16599] loop2: detected capacity change from 0 to 32768
[  434.372525][T16599] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  434.399821][T16599] XFS (loop2): Ending clean mount
[  434.522895][T12388] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  434.562676][T16638] overlayfs: failed to clone upperpath
[  435.024019][T16656] program syz.2.3953 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  435.463220][T16667] loop2: detected capacity change from 0 to 4096
[  435.480958][T16667] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096)
[  435.701032][T16677] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  435.861768][T16683] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3965'.
[  435.991328][T16681] loop2: detected capacity change from 0 to 32768
[  435.998129][T16681] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3962 (16681)
[  436.027903][T16690] profile_transition: unconfined exec no attachment
[  436.027921][T16690] apparmor_bprm_creds_for_exec: label build failed
[  436.030918][T16681] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  436.042253][T16681] BTRFS info (device loop2): using crc32c checksum algorithm
[  436.100868][T16681] BTRFS info (device loop2): setting nodatasum
[  436.106628][T16681] BTRFS info (device loop2): enabling ssd optimizations
[  436.110821][T16681] BTRFS info (device loop2): disabling tree log
[  436.119176][T16681] BTRFS info (device loop2): turning on async discard
[  436.124800][T16681] BTRFS info (device loop2): enabling free space tree
[  436.128869][T16681] BTRFS info (device loop2): enabling auto defrag
[  436.183547][T12388] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  436.342105][T16711] smc: net device lo applied user defined pnetid SYZ0
[  436.344341][T16711] smc: smcd device lo applied user defined pnetid SYZ0
[  436.558727][T16721] loop2: detected capacity change from 0 to 512
[  436.562900][T16721] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  436.602153][ T5667] kernel write not supported for file /input/mice (pid: 5667 comm: kworker/1:6)
[  436.618719][T16721] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3976: bg 0: block 64: padding at end of block bitmap is not set
[  436.624627][T16721] loop2: lost filesystem error report for type 5 error -117
[  436.627740][T16721] Quota error (device loop2): write_blk: dquota write failed
[  436.632431][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  436.632440][    C1] EXT4-fs (loop2): initial error at time 1787679677: ext4_validate_block_bitmap:441
[  436.632451][    C1] EXT4-fs (loop2): last error at time 1787679677: ext4_validate_block_bitmap:441
[  436.640790][T16721] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  436.644063][T16721] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.3976: Failed to acquire dquot type 0
[  436.647511][T16721] loop2: lost filesystem error report for type 5 error -117
[  436.647790][T16721] EXT4-fs (loop2): 1 truncate cleaned up
[  436.653879][T16721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.689137][T16721] Quota error (device loop2): write_blk: dquota write failed
[  436.695300][T16721] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  436.699983][T16721] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.3976: Failed to acquire dquot type 0
[  436.725306][T12388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.804808][T16732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3979'.
[  437.313508][   T32] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  437.473323][   T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  437.477290][   T32] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  437.480892][   T32] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  437.485855][   T32] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[  437.489583][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.519879][   T32] snd-ua101 3-1:1.0: probe with driver snd-ua101 failed with error -2
[  437.701005][  T796] usb 3-1: USB disconnect, device number 40
[  437.871831][   T32] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  438.026710][   T32] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  438.030307][   T32] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  438.033383][   T32] usb 4-1: Product: syz
[  438.035126][   T32] usb 4-1: Manufacturer: syz
[  438.036991][   T32] usb 4-1: SerialNumber: syz
[  438.044978][   T32] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  438.516633][   T32] vp7045: USB control message 'in' went wrong.
[  438.519468][   T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  438.527298][   T32] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  438.588190][   T32] usb 4-1: USB disconnect, device number 11
[  439.182209][T16785] profile_transition: unconfined exec no attachment
[  439.182229][T16785] apparmor_bprm_creds_for_exec: label build failed
[  439.439067][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  439.681737][   T32] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  439.834333][   T32] usb 3-1: unable to get BOS descriptor or descriptor too short
[  439.839830][   T32] usb 3-1: not running at top speed; connect to a high speed hub
[  439.845723][   T32] usb 3-1: config 4 has an invalid interface number: 106 but max is 0
[  439.849882][   T32] usb 3-1: config 4 has no interface number 0
[  439.855280][   T32] usb 3-1: config 4 interface 106 has no altsetting 0
[  439.859914][   T32] usb 3-1: language id specifier not provided by device, defaulting to English
[  439.868026][   T32] usb 3-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91
[  439.872735][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.879689][   T32] usb 3-1: Product: syz
[  439.882292][   T32] usb 3-1: Manufacturer: 朎㢶
[  439.886724][   T32] usb 3-1: SerialNumber: syz
[  439.945551][T16800] fuse: fd is not a fuse device
[  439.954194][T16801] profile_transition: unconfined exec no attachment
[  439.954212][T16801] apparmor_bprm_creds_for_exec: label build failed
[  440.022459][T16804] profile_transition: unconfined exec no attachment
[  440.022473][T16804] apparmor_bprm_creds_for_exec: label build failed
[  440.113531][   T32] uvcvideo 3-1:4.106: Found UVC 0.00 device syz (0408:4033)
[  440.118552][   T32] uvcvideo 3-1:4.106: Forcing UVC version to 1.0a
[  440.124238][   T32] uvcvideo 3-1:4.106: No valid video chain found.
[  440.131086][   T32] usb 3-1: USB disconnect, device number 41
[  440.142985][T16808] loop3: detected capacity change from 0 to 512
[  440.179496][T16808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.186197][T16808] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.272311][T15903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.133246][T16838] loop3: detected capacity change from 0 to 736
[  441.196637][T16842] 9p: Bad value for 'rfdno'
[  441.825316][T16877] loop2: detected capacity change from 0 to 16
[  441.836981][T16877] erofs (device loop2): mounted with root inode @ nid 36.
[  441.859604][T16873] loop3: detected capacity change from 0 to 32768
[  441.864055][T16873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4041 (16873)
[  441.882352][T16877] syz.2.4042: attempt to access beyond end of device
[  441.882352][T16877] loop2: rw=0, sector=0, nr_sectors = 1025 limit=16
[  441.889550][T16878] profile_transition: unconfined exec no attachment
[  441.889561][T16878] apparmor_bprm_creds_for_exec: label build failed
[  441.895820][T16873] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  441.896679][T16877] erofs (device loop2): read error -5 @ 0 of nid 36
[  441.901296][T16873] BTRFS info (device loop3): using crc32c checksum algorithm
[  441.911327][T16879] syz.2.4042: attempt to access beyond end of device
[  441.911327][T16879] loop2: rw=0, sector=0, nr_sectors = 1025 limit=16
[  441.927695][T16879] erofs (device loop2): read error -5 @ 0 of nid 36
[  441.944960][T16877] syz.2.4042: attempt to access beyond end of device
[  441.944960][T16877] loop2: rw=0, sector=0, nr_sectors = 1025 limit=16
[  441.950296][T16873] BTRFS info (device loop3): enabling ssd optimizations
[  441.957458][T16873] BTRFS info (device loop3): turning on flush-on-commit
[  441.962233][T16877] erofs (device loop2): read error -5 @ 0 of nid 36
[  441.963237][T16873] BTRFS info (device loop3): enabling free space tree
[  441.971835][T16873] BTRFS info (device loop3): enabling auto defrag
[  441.975986][T16873] BTRFS info (device loop3): use lzo compression, level 1
[  441.984481][T16873] BTRFS info (device loop3): max_inline set to 4096
[  442.087309][T15903] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  442.119124][T16896] profile_transition: unconfined exec no attachment
[  442.119137][T16896] apparmor_bprm_creds_for_exec: label build failed
[  442.160655][T16898] profile_transition: unconfined exec no attachment
[  442.160668][T16898] apparmor_bprm_creds_for_exec: label build failed
[  442.350366][T16905] loop3: detected capacity change from 0 to 256
[  442.414007][T16905] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  442.448541][   T33] audit: type=1800 audit(1787679683.419:270): pid=16905 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.4044" name="file1" dev="loop3" ino=1048764 res=0 errno=0
[  442.481675][   T33] audit: type=1800 audit(1787679683.429:271): pid=16905 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.4044" name="file1" dev="loop3" ino=1048764 res=0 errno=0
[  442.649946][T16910] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  442.661464][T16910] FAT-fs (loop3): Filesystem has been set read-only
[  442.667799][T16910] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  442.832186][T16920] loop2: detected capacity change from 0 to 1024
[  442.834868][T16920] EXT4-fs: Ignoring removed oldalloc option
[  442.837390][T16920] EXT4-fs (loop2): inodes count not valid: 1 vs 32
[  442.889210][T16923] ieee802154 phy1 wpan1: encryption failed: -22
[  442.998653][T16928] loop2: detected capacity change from 0 to 4096
[  443.007274][T16928] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  443.012929][T16928] EXT4-fs (loop2): Test dummy encryption mode enabled
[  443.017479][T16928] EXT4-fs (loop2): bs(8192) > ps(4096) unsupported for encrypt
[  443.206139][T16926] loop3: detected capacity change from 0 to 40427
[  443.210776][T16926] F2FS-fs (loop3): Corrupted extension count (33554469 + 1 > 64)
[  443.216292][T16926] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  443.220809][T16926] F2FS-fs (loop3): invalid crc value
[  443.300107][T16926] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  443.310382][T16926] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30
[  443.313445][T16926] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  443.567280][T16945] loop3: detected capacity change from 0 to 512
[  443.587225][T16945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  443.600381][T16945] System zones: 1-12
[  443.609751][T16945] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.4060: missing EA_INODE flag
[  443.621682][T16945] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  443.622159][T16945] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4060: error while reading EA inode 12 err=-117
[  443.631656][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  443.634305][    C0] EXT4-fs (loop3): initial error at time 1787679684: ext4_xattr_inode_iget:441: inode 12
[  443.638164][    C0] EXT4-fs (loop3): last error at time 1787679684: ext4_xattr_inode_iget:441: inode 12
[  443.645350][T16945] loop3: lost filesystem error report for type 5 error -117
[  443.645696][T16945] EXT4-fs (loop3): 1 orphan inode deleted
[  443.657611][T16945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.792495][T15903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.110193][T16971] loop2: detected capacity change from 0 to 2048
[  444.141226][T16971] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  444.163392][T16971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  444.199136][T16971] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  444.300924][T16977] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  444.333606][T16977] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  444.351814][T16977] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  444.362237][T16977] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  444.374737][T16977] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  444.394659][T16977] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  444.414390][T16977] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  444.418499][T16977] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  444.424320][T16977] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  446.496554][T17004] syz.2.4091 (17004): drop_caches: 2
[  446.912323][T17031] profile_transition: unconfined exec no attachment
[  446.912337][T17031] apparmor_bprm_creds_for_exec: label build failed
[  446.929001][T17032] profile_transition: unconfined exec no attachment
[  446.929014][T17032] apparmor_bprm_creds_for_exec: label build failed
[  446.985796][T17037] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4105'.
[  446.998083][T17037] ipvlan2: entered allmulticast mode
[  446.999822][T17037] syz_tun: entered allmulticast mode
[  447.205233][T17044] netlink: 'syz.7.4108': attribute type 10 has an invalid length.
[  447.208522][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4108'.
[  447.926160][T17056] loop2: detected capacity change from 0 to 128
[  447.947192][T17056] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  447.966357][T17056] ext4 filesystem being mounted at /598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  447.994151][T17056] affs: Unknown parameter 'us}quota/8"϶ǫ77}ē'
[  448.007607][T17060] netlink: 'syz.3.4112': attribute type 6 has an invalid length.
[  448.029124][T12388] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  448.099995][   T33] audit: type=1326 audit(1787679689.069:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.120597][   T33] audit: type=1326 audit(1787679689.079:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.177771][   T33] audit: type=1326 audit(1787679689.089:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.188221][   T33] audit: type=1326 audit(1787679689.089:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.198254][   T33] audit: type=1326 audit(1787679689.089:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.206865][   T33] audit: type=1326 audit(1787679689.089:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.219644][   T33] audit: type=1326 audit(1787679689.089:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.228166][   T33] audit: type=1326 audit(1787679689.089:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.244827][   T33] audit: type=1326 audit(1787679689.089:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.261058][   T33] audit: type=1326 audit(1787679689.089:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17061 comm="syz.2.4114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc419e0d9 code=0x7ffc0000
[  448.275216][T17067] loop2: detected capacity change from 0 to 512
[  448.300299][T17067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.313946][T17067] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.339775][T17067] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  448.466264][T12388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.563053][T17080] netlink: 'syz.2.4121': attribute type 2 has an invalid length.
[  448.575331][T17080] netlink: 'syz.2.4121': attribute type 11 has an invalid length.
[  448.584764][T17080] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4121'.
[  449.050414][T17111] sch_tbf: burst 0 is lower than device batadv_slave_0 mtu (1514) !
[  449.202395][T17118] overlayfs: failed to clone upperpath
[  449.292572][T17113] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4135'.
[  450.323290][ T5667] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  450.501969][ T5667] usb 3-1: Using ep0 maxpacket: 8
[  450.508680][ T5667] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  450.512504][ T5667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.515086][ T5667] usb 3-1: Product: syz
[  450.516493][ T5667] usb 3-1: Manufacturer: syz
[  450.518044][ T5667] usb 3-1: SerialNumber: syz
[  450.523769][ T5667] usb 3-1: config 0 descriptor??
[  450.543130][ T5667] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  450.963268][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  451.190868][T17151] profile_transition: unconfined exec no attachment
[  451.190932][T17151] apparmor_bprm_creds_for_exec: label build failed
[  451.215184][ T5637] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  451.232783][ T5637] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.419603][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  451.437887][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  451.444243][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  451.445904][ T5637] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  451.452664][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  451.454215][ T5637] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.460513][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  451.523817][T17158] profile_transition: unconfined exec no attachment
[  451.523830][T17158] apparmor_bprm_creds_for_exec: label build failed
[  451.558814][T17159] profile_transition: unconfined exec no attachment
[  451.558833][T17159] apparmor_bprm_creds_for_exec: label build failed
[  451.655216][ T5637] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  451.658531][ T5637] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.701231][T17160] profile_transition: unconfined exec no attachment
[  451.701250][T17160] apparmor_bprm_creds_for_exec: label build failed
[  451.733486][T17161] profile_transition: unconfined exec no attachment
[  451.733498][T17161] apparmor_bprm_creds_for_exec: label build failed
[  451.752126][ T5667] gspca_sonixj: reg_w1 err -71
[  451.793458][ T5637] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  451.801579][ T5637] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.830525][T17162] profile_transition: unconfined exec no attachment
[  451.830537][T17162] apparmor_bprm_creds_for_exec: label build failed
[  451.852276][ T5667] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  451.855160][T17163] profile_transition: unconfined exec no attachment
[  451.855170][T17163] apparmor_bprm_creds_for_exec: label build failed
[  451.866691][ T5667] usb 3-1: USB disconnect, device number 42
[  451.908656][T17164] profile_transition: unconfined exec no attachment
[  451.908669][T17164] apparmor_bprm_creds_for_exec: label build failed
[  451.928585][T17165] profile_transition: unconfined exec no attachment
[  451.928597][T17165] apparmor_bprm_creds_for_exec: label build failed
[  452.003562][T17157] loop3: detected capacity change from 0 to 32768
[  452.012240][T17157] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4160 (17157)
[  452.024439][T17166] profile_transition: unconfined exec no attachment
[  452.024450][T17166] apparmor_bprm_creds_for_exec: label build failed
[  452.045868][T17157] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  452.061719][T17157] BTRFS info (device loop3): using blake2b checksum algorithm
[  452.135535][T17157] BTRFS info (device loop3): enabling ssd optimizations
[  452.141455][T17157] BTRFS info (device loop3): turning on async discard
[  452.146408][T17157] BTRFS info (device loop3): enabling free space tree
[  452.219712][T15903] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  452.376730][ T5637] bond1: left allmulticast mode
[  452.386172][ T5637] bond1: left promiscuous mode
[  452.388858][ T5637] bridge0: port 1(bond1) entered disabled state
[  452.465998][ T5637] tipc: Resetting bearer <eth:ip_vti0>
[  452.655290][ T5637] team0: Port device xfrm0 removed
[  452.663436][ T5637] tipc: Disabling bearer <eth:ip_vti0>
[  452.838330][ T5637] bond1 (unregistering): Released all slaves
[  452.936368][ T5637] tipc: Left network mode
[  452.950684][T17190] profile_transition: unconfined exec no attachment
[  452.950701][T17190] apparmor_bprm_creds_for_exec: label build failed
[  453.047840][T17192] profile_transition: unconfined exec no attachment
[  453.047859][T17192] apparmor_bprm_creds_for_exec: label build failed
[  453.094667][T17196] profile_transition: unconfined exec no attachment
[  453.094680][T17196] apparmor_bprm_creds_for_exec: label build failed
[  453.157018][T17199] profile_transition: unconfined exec no attachment
[  453.157037][T17199] apparmor_bprm_creds_for_exec: label build failed
[  453.264226][T17201] profile_transition: unconfined exec no attachment
[  453.264239][T17201] apparmor_bprm_creds_for_exec: label build failed
[  453.337963][T17205] profile_transition: unconfined exec no attachment
[  453.337977][T17205] apparmor_bprm_creds_for_exec: label build failed
[  453.403978][ T5637] hsr_slave_0: left promiscuous mode
[  453.418145][T17195] loop3: detected capacity change from 0 to 32768
[  453.424670][T17195] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  453.439972][T17195] JBD2: Ignoring recovery information on journal
[  453.461998][ T5637] hsr_slave_1: left promiscuous mode
[  453.508792][ T5637] veth0_macvtap: left promiscuous mode
[  453.510995][ T5637] veth1_vlan: left promiscuous mode
[  453.511967][T17211] profile_transition: unconfined exec no attachment
[  453.518024][T17211] apparmor_bprm_creds_for_exec: label build failed
[  453.518972][ T5637] veth0_vlan: left promiscuous mode
[  453.535514][T17195] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  453.603502][ T5599] Bluetooth: hci1: command tx timeout
[  453.732154][ T5667] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  453.894028][T15903] ocfs2: Unmounting device (7,3) on (node local)
[  453.902159][ T5667] usb 3-1: Using ep0 maxpacket: 8
[  453.905988][ T5667] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  453.935805][ T5667] usb 3-1: config 0 interface 0 has no altsetting 0
[  453.953964][ T5667] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  453.957823][ T5667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.966422][ T5667] usb 3-1: config 0 descriptor??
[  454.379133][ T5667] hid (null): report_id 13214 is invalid
[  454.382977][ T5667] hid (null): global environment stack underflow
[  454.425162][ T5667] hid_parser_main: 6 callbacks suppressed
[  454.425174][ T5667] nintendo 0003:057E:200E.001F: unknown main item tag 0x0
[  454.430928][ T5667] nintendo 0003:057E:200E.001F: report_id 13214 is invalid
[  454.433611][ T5667] nintendo 0003:057E:200E.001F: item 0 2 1 8 parsing failed
[  454.448394][ T5667] nintendo 0003:057E:200E.001F: HID parse failed
[  454.482811][ T5667] nintendo 0003:057E:200E.001F: probe - fail = -22
[  454.488775][ T5667] nintendo 0003:057E:200E.001F: probe with driver nintendo failed with error -22
[  454.590587][ T5667] usb 3-1: USB disconnect, device number 43
[  454.630676][ T5343] 8021q: adding VLAN 0 to HW filter on device eth9
[  454.691166][T17154] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.693808][T17154] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.708776][T17154] bridge_slave_0: entered allmulticast mode
[  454.714142][T17154] bridge_slave_0: entered promiscuous mode
[  454.717518][T17154] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.720186][T17154] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.739595][T17154] bridge_slave_1: entered allmulticast mode
[  454.744759][T17220] profile_transition: unconfined exec no attachment
[  454.744773][T17220] apparmor_bprm_creds_for_exec: label build failed
[  454.750665][T17154] bridge_slave_1: entered promiscuous mode
[  454.816613][T17154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.831064][T17154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.933042][T17154] team0: Port device team_slave_0 added
[  454.951362][T17154] team0: Port device team_slave_1 added
[  455.008259][T17154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.012313][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.041711][T17154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.046641][T17154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.048884][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.064156][T17154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.110479][T17154] hsr_slave_0: entered promiscuous mode
[  455.115234][T17154] hsr_slave_1: entered promiscuous mode
[  455.117956][T17154] debugfs: 'hsr0' already exists in 'hsr'
[  455.120305][T17154] Cannot create hsr debugfs directory
[  455.168637][ T5343] 8021q: adding VLAN 0 to HW filter on device eth10
[  455.417379][ T5343] 8021q: adding VLAN 0 to HW filter on device eth11
[  455.479885][T17239] loop3: detected capacity change from 0 to 4096
[  455.526750][T17243] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  455.667847][ T5343] 8021q: adding VLAN 0 to HW filter on device eth12
[  455.681989][ T5599] Bluetooth: hci1: command tx timeout
[  455.833563][ T5666] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  455.957309][T17154] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  455.962590][T17154] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  455.965423][T17154] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  455.969408][T17154] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  455.972544][T17154] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  455.976283][T17154] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  455.979086][T17154] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  455.983476][T17154] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  455.995988][ T5666] usb 4-1: unable to get BOS descriptor or descriptor too short
[  456.001228][ T5666] usb 4-1: not running at top speed; connect to a high speed hub
[  456.007712][ T5666] usb 4-1: config 14 has an invalid interface number: 118 but max is 0
[  456.011580][ T5666] usb 4-1: config 14 has no interface number 0
[  456.016549][ T5666] usb 4-1: config 14 interface 118 has no altsetting 0
[  456.024051][ T5666] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=66.4d
[  456.029734][ T5666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.039116][ T5666] usb 4-1: Product: syz
[  456.044046][ T5666] usb 4-1: Manufacturer: syz
[  456.048667][ T5666] usb 4-1: SerialNumber: syz
[  456.099170][T17154] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.120634][T17154] 8021q: adding VLAN 0 to HW filter on device team0
[  456.127710][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.130291][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.147600][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.149940][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.266953][ T5666] ch9200 4-1:14.118: probe with driver ch9200 failed with error -22
[  456.274552][T17279] loop2: detected capacity change from 0 to 4096
[  456.289653][ T5666] usb 4-1: USB disconnect, device number 12
[  456.321546][T17279] ntfs3(loop2): ino=0, mi_enum_attr
[  456.335019][T17279] ntfs3(loop2): ino=0, mi_enum_attr
[  456.338360][T17279] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  456.348802][T17279] ntfs3(loop2): ino=0, mi_enum_attr
[  456.503553][T17154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.669664][T17154] veth0_vlan: entered promiscuous mode
[  456.692574][T17154] veth1_vlan: entered promiscuous mode
[  456.710235][T17154] veth0_macvtap: entered promiscuous mode
[  456.714137][T17154] veth1_macvtap: entered promiscuous mode
[  456.723195][T17154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.733382][T17154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.746304][ T5637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.751408][ T5637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.758323][ T5637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.764229][ T5637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.862938][ T5667] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  456.918252][T15726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.935651][T15726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.000807][T15736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.004676][T15736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.035630][T17327] profile_transition: 60 callbacks suppressed
[  457.035643][T17327] profile_transition: unconfined exec no attachment
[  457.045849][T17327] apparmor_bprm_creds_for_exec: 60 callbacks suppressed
[  457.045861][T17327] apparmor_bprm_creds_for_exec: label build failed
[  457.065243][ T5667] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  457.069172][ T5667] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  457.081858][ T5667] usb 3-1: Product: syz
[  457.084160][ T5667] usb 3-1: Manufacturer: syz
[  457.086218][ T5667] usb 3-1: SerialNumber: syz
[  457.090639][ T5667] usb 3-1: config 0 descriptor??
[  457.128473][T17331] profile_transition: unconfined exec no attachment
[  457.128486][T17331] apparmor_bprm_creds_for_exec: label build failed
[  457.157529][T17334] loop3: detected capacity change from 0 to 256
[  457.171190][T17334] exfat: Deprecated parameter 'namecase'
[  457.218459][T17336] profile_transition: unconfined exec no attachment
[  457.218472][T17336] apparmor_bprm_creds_for_exec: label build failed
[  457.227167][T17334] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  457.267194][T17337] profile_transition: unconfined exec no attachment
[  457.267213][T17337] apparmor_bprm_creds_for_exec: label build failed
[  457.307309][ T5667] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v196 fw v58.0.0 (1 channels)
[  457.367199][T17343] profile_transition: unconfined exec no attachment
[  457.367220][T17343] apparmor_bprm_creds_for_exec: label build failed
[  457.398331][T17341] sl0: compressed packet ignored
[  457.409938][T17344] profile_transition: unconfined exec no attachment
[  457.409957][T17344] apparmor_bprm_creds_for_exec: label build failed
[  457.463469][T17345] profile_transition: unconfined exec no attachment
[  457.463483][T17345] apparmor_bprm_creds_for_exec: label build failed
[  457.510294][ T5667] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  457.516301][  T796] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  457.523657][ T5667] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71)
[  457.545252][T17347] profile_transition: unconfined exec no attachment
[  457.545264][T17347] apparmor_bprm_creds_for_exec: label build failed
[  457.626748][T17352] profile_transition: unconfined exec no attachment
[  457.626761][T17352] apparmor_bprm_creds_for_exec: label build failed
[  457.633030][ T5667] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[  457.643630][ T5667] usb 3-1: USB disconnect, device number 44
[  457.669621][T17354] profile_transition: unconfined exec no attachment
[  457.669633][T17354] apparmor_bprm_creds_for_exec: label build failed
[  457.693339][  T796] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  457.698626][  T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.708407][  T796] usb 5-1: config 0 has no interface number 0
[  457.710477][  T796] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  457.725760][  T796] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  457.732744][  T796] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  457.742163][  T796] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  457.745458][  T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.752046][ T5599] Bluetooth: hci1: command tx timeout
[  457.752077][  T796] usb 5-1: Product: syz
[  457.761693][  T796] usb 5-1: Manufacturer: syz
[  457.763677][  T796] usb 5-1: SerialNumber: syz
[  457.781171][  T796] usb 5-1: config 0 descriptor??
[  457.826612][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  457.826625][   T33] audit: type=1326 audit(1787679698.799:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17360 comm="syz.3.4193" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f556019e0d9 code=0x0
[  458.196426][  T796] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71
[  458.202325][  T796] usb 5-1: USB disconnect, device number 8
[  458.312432][   T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  458.462170][   T10] usb 3-1: Using ep0 maxpacket: 8
[  458.466290][   T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  458.469673][   T10] usb 3-1: config 179 has no interface number 0
[  458.474127][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  458.478513][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  458.486279][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  458.490626][   T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  458.495161][   T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  458.500401][   T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  458.504248][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.514452][T17374] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  458.707964][T17380] loop3: detected capacity change from 0 to 64
[  458.750303][   T33] audit: type=1800 audit(1787679699.719:287): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.4196" name="file1" dev="loop3" ino=5 res=0 errno=0
[  459.556034][T17394] loop3: detected capacity change from 0 to 2048
[  459.561700][ T5356] usb 3-1: USB disconnect, device number 45
[  459.561740][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  459.566482][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[  459.599346][T17394]  loop3: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22
[  459.601151][T17394] loop3: p4 start 42112 is beyond EOD, truncated
[  459.638429][T17394] loop3: p5 start 42112 is beyond EOD, truncated
[  459.641233][T17394] loop3: p6 start 42112 is beyond EOD, truncated
[  459.644118][T17394] loop3: p7 start 42112 is beyond EOD, truncated
[  459.646736][T17394] loop3: p8 start 42112 is beyond EOD, truncated
[  459.649327][T17394] loop3: p9 start 42112 is beyond EOD, truncated
[  459.655464][T17394] loop3: p10 start 42112 is beyond EOD, truncated
[  459.658185][T17394] loop3: p11 start 42112 is beyond EOD, truncated
[  459.660822][T17394] loop3: p12 start 42112 is beyond EOD, truncated
[  459.663736][T17394] loop3: p13 start 42112 is beyond EOD, truncated
[  459.666406][T17394] loop3: p14 start 42112 is beyond EOD, truncated
[  459.669153][T17394] loop3: p15 start 42112 is beyond EOD, truncated
[  459.672215][T17394] loop3: p16 start 42112 is beyond EOD, truncated
[  459.674789][T17394] loop3: p17 start 42112 is beyond EOD, truncated
[  459.677350][T17394] loop3: p18 start 42112 is beyond EOD, truncated
[  459.679809][T17394] loop3: p19 start 42112 is beyond EOD, truncated
[  459.692082][T17394] loop3: p20 start 42112 is beyond EOD, truncated
[  459.699254][T17394] loop3: p21 start 42112 is beyond EOD, truncated
[  459.705799][T17394] loop3: p22 start 42112 is beyond EOD, truncated
[  459.712206][T17394] loop3: p23 start 42112 is beyond EOD, truncated
[  459.717772][T17394] loop3: p24 start 42112 is beyond EOD, truncated
[  459.723814][T17394] loop3: p25 start 42112 is beyond EOD, truncated
[  459.726539][T17394] loop3: p26 start 42112 is beyond EOD, truncated
[  459.729308][T17394] loop3: p27 start 42112 is beyond EOD, truncated
[  459.735288][T17394] loop3: p28 start 42112 is beyond EOD, truncated
[  459.738046][T17394] loop3: p29 start 42112 is beyond EOD, truncated
[  459.743531][T17394] loop3: p30 start 42112 is beyond EOD, truncated
[  459.755508][T17394] loop3: p31 start 42112 is beyond EOD, truncated
[  459.767142][T17394] loop3: p32 start 42112 is beyond EOD, truncated
[  459.774020][T17394] loop3: p33 start 42112 is beyond EOD, truncated
[  459.776735][T17394] loop3: p34 start 42112 is beyond EOD, truncated
[  459.780620][T17394] loop3: p35 start 42112 is beyond EOD, truncated
[  459.789886][T17394] loop3: p36 start 42112 is beyond EOD, truncated
[  459.794610][T17394] loop3: p37 start 42112 is beyond EOD, truncated
[  459.797345][T17394] loop3: p38 start 42112 is beyond EOD, truncated
[  459.800930][T17394] loop3: p39 start 42112 is beyond EOD, truncated
[  459.805068][T17394] loop3: p40 start 42112 is beyond EOD, truncated
[  459.807717][T17394] loop3: p41 start 42112 is beyond EOD, truncated
[  459.811582][T17394] loop3: p42 start 42112 is beyond EOD, truncated
[  459.818472][T17394] loop3: p43 start 42112 is beyond EOD, truncated
[  459.821196][T17394] loop3: p44 start 42112 is beyond EOD, truncated
[  459.824841][T17394] loop3: p45 start 42112 is beyond EOD, truncated
[  459.827644][T17394] loop3: p46 start 42112 is beyond EOD, truncated
[  459.830363][T17394] loop3: p47 start 42112 is beyond EOD, truncated
[  459.833211][ T5599] Bluetooth: hci1: command tx timeout
[  459.838055][T17394] loop3: p48 start 42112 is beyond EOD, truncated
[  459.840714][T17394] loop3: p49 start 42112 is beyond EOD, truncated
[  459.849784][T17394] loop3: p50 start 42112 is beyond EOD, truncated
[  459.857594][T17394] loop3: p51 start 42112 is beyond EOD, truncated
[  459.862031][T17394] loop3: p52 start 42112 is beyond EOD, truncated
[  459.864544][T17394] loop3: p53 start 42112 is beyond EOD, truncated
[  459.867132][T17394] loop3: p54 start 42112 is beyond EOD, truncated
[  459.869732][T17394] loop3: p55 start 42112 is beyond EOD, truncated
[  459.876824][T17394] loop3: p56 start 42112 is beyond EOD, truncated
[  459.883000][T17394] loop3: p57 start 42112 is beyond EOD, truncated
[  459.885783][T17394] loop3: p58 start 42112 is beyond EOD, truncated
[  459.888660][T17394] loop3: p59 start 42112 is beyond EOD, truncated
[  459.891383][T17394] loop3: p60 start 42112 is beyond EOD, truncated
[  459.895203][T17394] loop3: p61 start 42112 is beyond EOD, truncated
[  459.898109][T17394] loop3: p62 start 42112 is beyond EOD, truncated
[  459.900791][T17394] loop3: p63 start 42112 is beyond EOD, truncated
[  459.907809][T17394] loop3: p64 start 42112 is beyond EOD, truncated
[  459.910621][T17394] loop3: p65 start 42112 is beyond EOD, truncated
[  459.918708][T17394] loop3: p66 start 42112 is beyond EOD, truncated
[  459.924672][T17394] loop3: p67 start 42112 is beyond EOD, truncated
[  459.927285][T17410] loop4: detected capacity change from 0 to 2048
[  459.930269][T17394] loop3: p68 start 42112 is beyond EOD, truncated
[  459.933146][T17394] loop3: p69 start 42112 is beyond EOD, truncated
[  459.935890][T17394] loop3: p70 start 42112 is beyond EOD, truncated
[  459.938460][T17394] loop3: p71 start 42112 is beyond EOD, truncated
[  459.941113][T17394] loop3: p72 start 42112 is beyond EOD, truncated
[  459.946072][T17394] loop3: p73 start 42112 is beyond EOD, truncated
[  459.948687][T17394] loop3: p74 start 42112 is beyond EOD, truncated
[  459.951384][T17394] loop3: p75 start 42112 is beyond EOD, truncated
[  459.954769][T17394] loop3: p76 start 42112 is beyond EOD, truncated
[  459.957595][T17394] loop3: p77 start 42112 is beyond EOD, truncated
[  459.960424][T17394] loop3: p78 start 42112 is beyond EOD, truncated
[  459.961225][T17410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.964977][T17394] loop3: p79 start 42112 is beyond EOD, truncated
[  459.970725][T17394] loop3: p80 start 42112 is beyond EOD, truncated
[  459.973664][T17394] loop3: p81 start 42112 is beyond EOD, truncated
[  459.976698][T17394] loop3: p82 start 42112 is beyond EOD, truncated
[  459.977531][T17409] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, 
[  459.979394][T17394] loop3: p83 start 42112 is beyond EOD, truncated
[  459.979413][T17394] loop3: p84 start 42112 is beyond EOD, truncated
[  459.979426][T17394] loop3: p85 start 42112 is beyond EOD, truncated
[  459.979437][T17394] loop3: p86 start 42112 is beyond EOD, truncated
[  459.979450][T17394] loop3: p87 start 42112 is beyond EOD, truncated
[  459.979462][T17394] loop3: p88 start 42112 is beyond EOD, truncated
[  459.979475][T17394] loop3: p89 start 42112 is beyond EOD, truncated
[  459.979486][T17394] loop3: p90 start 42112 is beyond EOD, truncated
[  459.979499][T17394] loop3: p91 start 42112 is beyond EOD, truncated
[  459.979510][T17394] loop3: p92 start 42112 is beyond EOD, truncated
[  459.979520][T17394] loop3: p93 start 42112 is beyond EOD, truncated
[  459.979529][T17394] loop3: p94 start 42112 is beyond EOD, truncated
[  459.979540][T17394] loop3: p95 start 42112 is beyond EOD, truncated
[  459.979551][T17394] loop3: p96 start 42112 is beyond EOD, truncated
[  459.979562][T17394] loop3: p97 start 42112 is beyond EOD, truncated
[  459.979580][T17394] loop3: p98 start 42112 is beyond EOD, truncated
[  459.979591][T17394] loop3: p99 start 42112 is beyond EOD, truncated
[  459.979602][T17394] loop3: p100 start 42112 is beyond EOD, truncated
[  459.979614][T17394] loop3: p101 start 42112 is beyond EOD, truncated
[  459.979626][T17394] loop3: p102 start 42112 is beyond EOD, truncated
[  459.979638][T17394] loop3: p103 start 42112 is beyond EOD, truncated
[  459.979649][T17394] loop3: p104 start 42112 is beyond EOD, truncated
[  459.979662][T17394] loop3: p105 start 42112 is beyond EOD, truncated
[  459.979674][T17394] loop3: p106 start 42112 is beyond EOD, truncated
[  459.979686][T17394] loop3: p107 start 42112 is beyond EOD, truncated
[  459.979698][T17394] loop3: p108 start 42112 is beyond EOD, truncated
[  459.979710][T17394] loop3: p109 start 42112 is beyond EOD, truncated
[  459.979722][T17394] loop3: p110 start 42112 is beyond EOD, truncated
[  459.979733][T17394] loop3: p111 start 42112 is beyond EOD, truncated
[  459.979744][T17394] loop3: p112 start 42112 is beyond EOD, truncated
[  459.979755][T17394] loop3: p113 start 42112 is beyond EOD, truncated
[  459.979766][T17394] loop3: p114 start 42112 is beyond EOD, truncated
[  459.979777][T17394] loop3: p115 start 42112 is beyond EOD, truncated
[  459.979788][T17394] loop3: p116 start 42112 is beyond EOD, truncated
[  459.979800][T17394] loop3: p117 start 42112 is beyond EOD, truncated
[  459.979812][T17394] loop3: p118 start 42112 is beyond EOD, truncated
[  459.979822][T17394] loop3: p119 start 42112 is beyond EOD, truncated
[  459.979834][T17394] loop3: p120 start 42112 is beyond EOD, truncated
[  459.979845][T17394] loop3: p121 start 42112 is beyond EOD, truncated
[  459.979857][T17394] loop3: p122 start 42112 is beyond EOD, truncated
[  459.979896][T17394] loop3: p123 start 42112 is beyond EOD, truncated
[  459.979908][T17394] loop3: p124 start 42112 is beyond EOD, truncated
[  459.979919][T17394] loop3: p125 start 42112 is beyond EOD, truncated
[  459.979930][T17394] loop3: p126 start 42112 is beyond EOD, truncated
[  459.979942][T17394] loop3: p127 start 42112 is beyond EOD, truncated
[  459.979954][T17394] loop3: p128 start 42112 is beyond EOD, truncated
[  459.979966][T17394] loop3: p129 start 42112 is beyond EOD, truncated
[  459.979978][T17394] loop3: p130 start 42112 is beyond EOD, truncated
[  459.979990][T17394] loop3: p131 start 42112 is beyond EOD, truncated
[  459.980000][T17394] loop3: p132 start 42112 is beyond EOD, truncated
[  459.980011][T17394] loop3: p133 start 42112 is beyond EOD, truncated
[  459.980022][T17394] loop3: p134 start 42112 is beyond EOD, truncated
[  459.980034][T17394] loop3: p135 start 42112 is beyond EOD, truncated
[  459.980046][T17394] loop3: p136 start 42112 is beyond EOD, truncated
[  459.980057][T17394] loop3: p137 start 42112 is beyond EOD, truncated
[  459.980069][T17394] loop3: p138 start 42112 is beyond EOD, truncated
[  459.980079][T17394] loop3: p139 start 42112 is beyond EOD, truncated
[  459.980090][T17394] loop3: p140 start 42112 is beyond EOD, truncated
[  459.980102][T17394] loop3: p141 start 42112 is beyond EOD, truncated
[  459.980113][T17394] loop3: p142 start 42112 is beyond EOD, truncated
[  459.980125][T17394] loop3: p143 start 42112 is beyond EOD, truncated
[  459.980136][T17394] loop3: p144 start 42112 is beyond EOD, truncated
[  459.980147][T17394] loop3: p145 start 42112 is beyond EOD, truncated
[  459.980159][T17394] loop3: p146 start 42112 is beyond EOD, truncated
[  459.980170][T17394] loop3: p147 start 42112 is beyond EOD, truncated
[  459.980181][T17394] loop3: p148 start 42112 is beyond EOD, truncated
[  459.980193][T17394] loop3: p149 start 42112 is beyond EOD, truncated
[  459.980204][T17394] loop3: p150 start 42112 is beyond EOD, truncated
[  459.980215][T17394] loop3: p151 start 42112 is beyond EOD, truncated
[  459.980227][T17394] loop3: p152 start 42112 is beyond EOD, truncated
[  459.980238][T17394] loop3: p153 start 42112 is beyond EOD, truncated
[  459.980250][T17394] loop3: p154 start 42112 is beyond EOD, truncated
[  459.980260][T17394] loop3: p155 start 42112 is beyond EOD, truncated
[  459.980272][T17394] loop3: p156 start 42112 is beyond EOD, truncated
[  459.980283][T17394] loop3: p157 start 42112 is beyond EOD, truncated
[  459.980295][T17394] loop3: p158 start 42112 is beyond EOD, truncated
[  459.980305][T17394] loop3: p159 start 42112 is beyond EOD, truncated
[  459.980317][T17394] loop3: p160 start 42112 is beyond EOD, truncated
[  459.980329][T17394] loop3: p161 start 42112 is beyond EOD, truncated
[  459.980340][T17394] loop3: p162 start 42112 is beyond EOD, truncated
[  459.980351][T17394] loop3: p163 start 42112 is beyond EOD, truncated
[  459.980363][T17394] loop3: p164 start 42112 is beyond EOD, truncated
[  459.980374][T17394] loop3: p165 start 42112 is beyond EOD, truncated
[  459.980386][T17394] loop3: p166 start 42112 is beyond EOD, truncated
[  459.980398][T17394] loop3: p167 start 42112 is beyond EOD, truncated
[  459.980408][T17394] loop3: p168 start 42112 is beyond EOD, truncated
[  459.980420][T17394] loop3: p169 start 42112 is beyond EOD, 
[  459.983333][T17409] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  459.995670][T17394] truncated
[  460.174741][T17394] loop3: p170 start 42112 is beyond EOD, truncated
[  460.176941][T17394] loop3: p171 start 42112 is beyond EOD, truncated
[  460.178854][T17394] loop3: p172 start 42112 is beyond EOD, truncated
[  460.181159][T17394] loop3: p173 start 42112 is beyond EOD, truncated
[  460.183228][T17394] loop3: p174 start 42112 is beyond EOD, truncated
[  460.185234][T17394] loop3: p175 start 42112 is beyond EOD, truncated
[  460.187611][T17394] loop3: p176 start 42112 is beyond EOD, truncated
[  460.189988][T17394] loop3: p177 start 42112 is beyond EOD, truncated
[  460.202509][T17154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.202561][T17394] loop3: p178 start 42112 is beyond EOD, truncated
[  460.208040][T17394] loop3: p179 start 42112 is beyond EOD, truncated
[  460.210559][T17394] loop3: p180 start 42112 is beyond EOD, truncated
[  460.212963][T17394] loop3: p181 start 42112 is beyond EOD, truncated
[  460.215047][T17394] loop3: p182 start 42112 is beyond EOD, truncated
[  460.217047][T17394] loop3: p183 start 42112 is beyond EOD, truncated
[  460.218984][T17394] loop3: p184 start 42112 is beyond EOD, truncated
[  460.220968][T17394] loop3: p185 start 42112 is beyond EOD, truncated
[  460.224273][T17394] loop3: p186 start 42112 is beyond EOD, truncated
[  460.226439][T17394] loop3: p187 start 42112 is beyond EOD, truncated
[  460.228549][T17394] loop3: p188 start 42112 is beyond EOD, truncated
[  460.230625][T17394] loop3: p189 start 42112 is beyond EOD, truncated
[  460.232779][T17394] loop3: p190 start 42112 is beyond EOD, truncated
[  460.234919][T17394] loop3: p191 start 42112 is beyond EOD, truncated
[  460.237037][T17394] loop3: p192 start 42112 is beyond EOD, truncated
[  460.239155][T17394] loop3: p193 start 42112 is beyond EOD, truncated
[  460.241304][T17394] loop3: p194 start 42112 is beyond EOD, truncated
[  460.246241][T17394] loop3: p195 start 42112 is beyond EOD, truncated
[  460.248572][T17394] loop3: p196 start 42112 is beyond EOD, truncated
[  460.250590][T17394] loop3: p197 start 42112 is beyond EOD, truncated
[  460.263711][T17394] loop3: p198 start 42112 is beyond EOD, truncated
[  460.266890][T17394] loop3: p199 start 42112 is beyond EOD, truncated
[  460.269008][T17394] loop3: p200 start 42112 is beyond EOD, truncated
[  460.271097][T17394] loop3: p201 start 42112 is beyond EOD, truncated
[  460.274939][T17394] loop3: p202 start 42112 is beyond EOD, truncated
[  460.277075][T17394] loop3: p203 start 42112 is beyond EOD, truncated
[  460.287990][T17394] loop3: p204 start 42112 is beyond EOD, truncated
[  460.301380][T17394] loop3: p205 start 42112 is beyond EOD, truncated
[  460.305394][T17394] loop3: p206 start 42112 is beyond EOD, truncated
[  460.317960][T17394] loop3: p207 start 42112 is beyond EOD, truncated
[  460.320035][T17394] loop3: p208 start 42112 is beyond EOD, truncated
[  460.322667][T17394] loop3: p209 start 42112 is beyond EOD, truncated
[  460.324716][T17394] loop3: p210 start 42112 is beyond EOD, truncated
[  460.326782][T17394] loop3: p211 start 42112 is beyond EOD, truncated
[  460.328925][T17394] loop3: p212 start 42112 is beyond EOD, truncated
[  460.330965][T17394] loop3: p213 start 42112 is beyond EOD, truncated
[  460.333254][T17394] loop3: p214 start 42112 is beyond EOD, truncated
[  460.335302][T17394] loop3: p215 start 42112 is beyond EOD, truncated
[  460.337381][T17394] loop3: p216 start 42112 is beyond EOD, truncated
[  460.339428][T17394] loop3: p217 start 42112 is beyond EOD, truncated
[  460.341423][T17394] loop3: p218 start 42112 is beyond EOD, truncated
[  460.345233][T17394] loop3: p219 start 42112 is beyond EOD, truncated
[  460.347876][T17394] loop3: p220 start 42112 is beyond EOD, truncated
[  460.351511][T17394] loop3: p221 start 42112 is beyond EOD, truncated
[  460.355395][T17394] loop3: p222 start 42112 is beyond EOD, truncated
[  460.359042][T17394] loop3: p223 start 42112 is beyond EOD, truncated
[  460.361100][T17394] loop3: p224 start 42112 is beyond EOD, truncated
[  460.365118][T17394] loop3: p225 start 42112 is beyond EOD, truncated
[  460.368814][T17394] loop3: p226 start 42112 is beyond EOD, truncated
[  460.370938][T17394] loop3: p227 start 42112 is beyond EOD, truncated
[  460.373995][T17394] loop3: p228 start 42112 is beyond EOD, truncated
[  460.376332][T17394] loop3: p229 start 42112 is beyond EOD, truncated
[  460.379998][T17394] loop3: p230 start 42112 is beyond EOD, truncated
[  460.386447][T17394] loop3: p231 start 42112 is beyond EOD, truncated
[  460.394926][T17394] loop3: p232 start 42112 is beyond EOD, truncated
[  460.397062][T17394] loop3: p233 start 42112 is beyond EOD, truncated
[  460.400796][T17394] loop3: p234 start 42112 is beyond EOD, truncated
[  460.405328][T17394] loop3: p235 start 42112 is beyond EOD, truncated
[  460.411706][T17394] loop3: p236 start 42112 is beyond EOD, truncated
[  460.413941][T17394] loop3: p237 start 42112 is beyond EOD, truncated
[  460.415980][T17394] loop3: p238 start 42112 is beyond EOD, truncated
[  460.418012][T17394] loop3: p239 start 42112 is beyond EOD, truncated
[  460.421527][T17394] loop3: p240 start 42112 is beyond EOD, truncated
[  460.425257][T17394] loop3: p241 start 42112 is beyond EOD, truncated
[  460.427356][T17394] loop3: p242 start 42112 is beyond EOD, truncated
[  460.429366][T17394] loop3: p243 start 42112 is beyond EOD, truncated
[  460.431396][T17394] loop3: p244 start 42112 is beyond EOD, truncated
[  460.433948][T17394] loop3: p245 start 42112 is beyond EOD, truncated
[  460.436185][T17394] loop3: p246 start 42112 is beyond EOD, truncated
[  460.438373][T17394] loop3: p247 start 42112 is beyond EOD, truncated
[  460.440515][T17394] loop3: p248 start 42112 is beyond EOD, truncated
[  460.447421][T17394] loop3: p249 start 42112 is beyond EOD, truncated
[  460.450961][T17394] loop3: p250 start 42112 is beyond EOD, truncated
[  460.456533][T17394] loop3: p251 start 42112 is beyond EOD, truncated
[  460.460219][T17394] loop3: p252 start 42112 is beyond EOD, truncated
[  460.466544][T17394] loop3: p253 start 42112 is beyond EOD, truncated
[  460.470126][T17394] loop3: p254 start 42112 is beyond EOD, truncated
[  460.472998][T17394] loop3: p255 start 42112 is beyond EOD, truncated
[  460.493488][T17417] loop2: detected capacity change from 0 to 32768
[  460.504785][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  460.525718][T17417] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  460.525718][T17417] 
[  460.549832][T17429] loop4: detected capacity change from 0 to 256
[  460.561493][T17429] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  460.570125][T17417] ERROR: (device loop2): remounting filesystem as read-only
[  460.571558][T17429] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10)
[  460.578710][   T33] audit: type=1800 audit(1787679701.549:288): pid=17429 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.4214" name="file1" dev="loop4" ino=1048770 res=0 errno=0
[  460.971850][ T9476] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  461.135978][ T9476] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  461.147271][ T9476] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  461.157351][ T9476] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  461.164247][ T9476] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  461.169530][ T9476] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  461.179402][ T9476] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  461.195661][ T9476] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  461.207527][ T9476] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  461.213269][ T9476] usb 4-1: Product: syz
[  461.219193][ T9476] usb 4-1: Manufacturer: syz
[  461.224273][T17438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  461.228605][ T9476] cdc_wdm 4-1:1.0: skipping garbage
[  461.230605][ T9476] cdc_wdm 4-1:1.0: skipping garbage
[  461.238566][ T9476] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  461.241176][ T9476] cdc_wdm 4-1:1.0: Unknown control protocol
[  461.437151][    C0] wdm_int_callback: 31 callbacks suppressed
[  461.437170][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  461.442302][    C0] wdm_int_callback: 31 callbacks suppressed
[  461.442316][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  461.447448][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  461.450132][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  461.452691][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  461.455247][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  461.458376][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  461.460880][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  461.464716][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  461.467217][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  461.469655][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  461.472276][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  461.474981][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  461.475752][ T5667] usb 4-1: USB disconnect, device number 13
[  461.477380][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  461.477391][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  461.484903][T17449] syz.4.4221 (17449) used greatest stack depth: 19208 bytes left
[  461.653957][T17496] loop4: detected capacity change from 0 to 128
[  461.669134][T17496] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  461.673825][T17496] hpfs: filesystem error: improperly stopped
[  461.676089][T17496] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  461.678510][T17496] hpfs: You really don't want any checks? You are crazy...
[  461.681021][T17496] hpfs: hpfs_map_sector(): read error
[  461.683561][T17496] hpfs: code page support is disabled
[  461.686326][T17496] hpfs: hpfs_map_4sectors(): unaligned read
[  461.688415][T17496] hpfs: hpfs_map_4sectors(): unaligned read
[  461.690635][T17496] hpfs: filesystem error: unable to find root dir
[  462.256101][T17506] syzkaller0: entered promiscuous mode
[  462.258933][T17506] syzkaller0: entered allmulticast mode
[  462.391387][T17515] netlink: zone id is out of range
[  462.393993][T17515] netlink: zone id is out of range
[  462.396131][T17515] netlink: zone id is out of range
[  462.461239][   T33] audit: type=1326 audit(1787679703.429:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17518 comm="syz.2.4238" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dc419e0d9 code=0x0
[  462.549519][T17523] loop2: detected capacity change from 0 to 1764
[  462.712340][T17527] macvlan0: entered promiscuous mode
[  462.785646][T17528] loop2: detected capacity change from 0 to 8192
[  463.125593][T12388] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  463.133614][T12388] FAT-fs (loop2): Filesystem has been set read-only
[  463.289769][T17542] loop4: detected capacity change from 0 to 8192
[  463.313637][T17546] loop2: detected capacity change from 0 to 256
[  463.316690][T17546] exfat: Deprecated parameter 'namecase'
[  463.321797][T17546] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  463.472475][T17561] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  463.497465][T17561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.503699][T17561] netlink: 'syz.4.4254': attribute type 4 has an invalid length.
[  463.527548][T17154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.032234][T17576] set_capacity_and_notify: 1 callbacks suppressed
[  464.032242][T17576] loop4: detected capacity change from 0 to 131072
[  464.038621][T17576] F2FS-fs (loop4): invalid crc value
[  464.094093][T17576] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  464.104290][T17576] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  464.127922][   T33] audit: type=1804 audit(1787679705.099:290): pid=17576 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=open_writers comm="syz.4.4261" name="/newroot/33/file1/file1" dev="loop4" ino=7 res=1 errno=0
[  464.541044][T17599] profile_transition: 42 callbacks suppressed
[  464.541055][T17599] profile_transition: unconfined exec no attachment
[  464.543067][T17599] apparmor_bprm_creds_for_exec: 42 callbacks suppressed
[  464.543074][T17599] apparmor_bprm_creds_for_exec: label build failed
[  464.634149][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  464.645211][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  464.654555][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  464.658163][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  464.661539][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  464.705022][T17606] profile_transition: unconfined exec no attachment
[  464.705035][T17606] apparmor_bprm_creds_for_exec: label build failed
[  464.722581][T17608] profile_transition: unconfined exec no attachment
[  464.722594][T17608] apparmor_bprm_creds_for_exec: label build failed
[  464.727456][T17605] loop3: detected capacity change from 0 to 1024
[  464.745511][T17609] profile_transition: unconfined exec no attachment
[  464.745523][T17609] apparmor_bprm_creds_for_exec: label build failed
[  464.775568][T17611] profile_transition: unconfined exec no attachment
[  464.775586][T17611] apparmor_bprm_creds_for_exec: label build failed
[  464.790470][T17612] profile_transition: unconfined exec no attachment
[  464.790483][T17612] apparmor_bprm_creds_for_exec: label build failed
[  464.797498][T17613] profile_transition: unconfined exec no attachment
[  464.797508][T17613] apparmor_bprm_creds_for_exec: label build failed
[  464.836412][T17615] profile_transition: unconfined exec no attachment
[  464.836425][T17615] apparmor_bprm_creds_for_exec: label build failed
[  464.871943][T17616] profile_transition: unconfined exec no attachment
[  464.871955][T17616] apparmor_bprm_creds_for_exec: label build failed
[  464.898030][T17617] profile_transition: unconfined exec no attachment
[  464.898041][T17617] apparmor_bprm_creds_for_exec: label build failed
[  465.123409][ T9211] libceph: connect (1)[c::]:6789 error -101
[  465.131348][ T9211] libceph: mon0 (1)[c::]:6789 connect error
[  465.136012][ T9211] libceph: connect (1)[c::]:6789 error -101
[  465.137980][ T9211] libceph: mon0 (1)[c::]:6789 connect error
[  465.158306][T17602] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.160634][T17602] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.165357][T17602] bridge_slave_0: entered allmulticast mode
[  465.168049][T17602] bridge_slave_0: entered promiscuous mode
[  465.171735][T17602] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.174108][T17602] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.176360][T17602] bridge_slave_1: entered allmulticast mode
[  465.178927][T17602] bridge_slave_1: entered promiscuous mode
[  465.200089][T17602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.200496][T17625] ceph: No mds server is up or the cluster is laggy
[  465.213730][T17602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.242796][T17602] team0: Port device team_slave_0 added
[  465.256958][T17602] team0: Port device team_slave_1 added
[  465.330343][T17602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.334400][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.342736][T17602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.351331][T17602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.357538][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.366870][T17602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.460485][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.498527][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  465.518941][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  465.533088][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  465.542608][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  465.550023][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  465.556115][T17602] hsr_slave_0: entered promiscuous mode
[  465.559354][T17602] hsr_slave_1: entered promiscuous mode
[  465.570049][T17602] debugfs: 'hsr0' already exists in 'hsr'
[  465.576991][T17602] Cannot create hsr debugfs directory
[  465.709985][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.829976][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.921288][T17602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.927444][T17602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.975906][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.049258][T17602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.053282][T17602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.185974][T17602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.189955][T17602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.228929][   T13] bridge_slave_1: left allmulticast mode
[  466.230802][   T13] bridge_slave_1: left promiscuous mode
[  466.242551][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.247217][   T13] bridge_slave_0: left allmulticast mode
[  466.249426][   T13] bridge_slave_0: left promiscuous mode
[  466.252337][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.368559][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  466.372760][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  466.376197][   T13] bond0 (unregistering): Released all slaves
[  466.470412][T17602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.500211][T17602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.538173][   T13] tipc: Left network mode
[  466.713349][ T5599] Bluetooth: hci2: command tx timeout
[  466.946162][T17637] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.953230][T17637] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.960634][T17637] bridge_slave_0: entered allmulticast mode
[  466.972157][T17637] bridge_slave_0: entered promiscuous mode
[  467.004310][   T13] hsr_slave_0: left promiscuous mode
[  467.008081][   T13] hsr_slave_1: left promiscuous mode
[  467.010139][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  467.016571][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  467.021554][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.027515][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.039135][   T13] veth1_macvtap: left promiscuous mode
[  467.041276][   T13] veth0_macvtap: left promiscuous mode
[  467.044872][   T13] veth1_vlan: left promiscuous mode
[  467.046678][   T13] veth0_vlan: left promiscuous mode
[  467.196392][   T13] team0 (unregistering): Port device team_slave_1 removed
[  467.207590][   T13] team0 (unregistering): Port device team_slave_0 removed
[  467.296411][T17637] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.301073][T17637] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.308664][T17637] bridge_slave_1: entered allmulticast mode
[  467.314740][T17637] bridge_slave_1: entered promiscuous mode
[  467.318706][ T5343] 8021q: adding VLAN 0 to HW filter on device eth1
[  467.460539][T17637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.466590][T17637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.472194][T17671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.595281][ T5599] Bluetooth: hci0: command tx timeout
[  467.616597][T17637] team0: Port device team_slave_0 added
[  467.627372][T17637] team0: Port device team_slave_1 added
[  467.699212][T17637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.701557][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.721156][T17637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  467.728529][T17602] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  467.740118][T17602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  467.745354][T17602] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  467.764963][T17602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  467.769926][T17637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  467.775295][T17637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.795154][T17637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  467.807907][T17602] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  467.827410][T17602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  467.832530][ T5343] 8021q: adding VLAN 0 to HW filter on device eth2
[  467.974266][T17602] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  467.989396][T17602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  468.017271][T17637] hsr_slave_0: entered promiscuous mode
[  468.019563][T17637] hsr_slave_1: entered promiscuous mode
[  468.024630][T17637] debugfs: 'hsr0' already exists in 'hsr'
[  468.026699][T17637] Cannot create hsr debugfs directory
[  468.264655][T17602] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.294777][T17602] 8021q: adding VLAN 0 to HW filter on device team0
[  468.312818][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.315102][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.333716][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.336026][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.351112][ T5343] 8021q: adding VLAN 0 to HW filter on device eth3
[  468.725152][ T5343] 8021q: adding VLAN 0 to HW filter on device eth28
[  468.791764][ T5599] Bluetooth: hci2: command tx timeout
[  468.881411][T17602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.995964][T17602] veth0_vlan: entered promiscuous mode
[  469.001325][T17602] veth1_vlan: entered promiscuous mode
[  469.012952][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  469.029574][T17602] veth0_macvtap: entered promiscuous mode
[  469.043077][T17602] veth1_macvtap: entered promiscuous mode
[  469.058059][T17602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  469.064210][T17602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.081544][ T5637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.087948][ T5637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.104473][ T5637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.108775][ T5637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.192624][   T24] usb 5-1: Using ep0 maxpacket: 8
[  469.205087][   T24] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  469.230491][   T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  469.238127][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.247292][   T24] usb 5-1: Product: syz
[  469.248600][   T24] usb 5-1: Manufacturer: syz
[  469.257377][   T24] usb 5-1: SerialNumber: syz
[  469.262865][   T24] usb 5-1: config 0 descriptor??
[  469.294002][   T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  469.301561][   T24] usb 5-1: setting power ON
[  469.338019][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  469.343082][T17637] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  469.352868][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  469.354711][T17637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  469.356277][   T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  469.363863][T15727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.363917][T17637] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  469.369627][T15727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.376603][   T24] usb 5-1: media controller created
[  469.377301][T17637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  469.381459][T17637] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  469.389497][T17637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  469.393184][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  469.403080][T17637] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  469.410101][T17637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  469.414470][   T24] usb 5-1: selecting invalid altsetting 6
[  469.424345][   T24] usb 5-1: digital interface selection failed (-22)
[  469.429120][   T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  469.442658][   T24] usb 5-1: setting power OFF
[  469.445595][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  469.450033][T10237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.458299][T10237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.461370][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  469.464953][   T24] (NULL device *): no alternate interface
[  469.520422][T17637] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.543480][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  469.543913][T17637] 8021q: adding VLAN 0 to HW filter on device team0
[  469.550139][   T24] usb 5-1: USB disconnect, device number 9
[  469.565237][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.567536][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.573670][T17748] profile_transition: 63 callbacks suppressed
[  469.573679][T17748] profile_transition: unconfined exec no attachment
[  469.576426][T17748] apparmor_bprm_creds_for_exec: 63 callbacks suppressed
[  469.576433][T17748] apparmor_bprm_creds_for_exec: label build failed
[  469.588370][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.590674][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.643294][T17637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  469.646663][T17751] profile_transition: unconfined exec no attachment
[  469.646672][T17751] apparmor_bprm_creds_for_exec: label build failed
[  469.658357][T17752] profile_transition: unconfined exec no attachment
[  469.658368][T17752] apparmor_bprm_creds_for_exec: label build failed
[  469.673650][ T5599] Bluetooth: hci0: command tx timeout
[  469.693952][T17755] profile_transition: unconfined exec no attachment
[  469.693966][T17755] apparmor_bprm_creds_for_exec: label build failed
[  469.699505][T17757] profile_transition: unconfined exec no attachment
[  469.699515][T17757] apparmor_bprm_creds_for_exec: label build failed
[  469.730234][T17761] profile_transition: unconfined exec no attachment
[  469.730249][T17761] apparmor_bprm_creds_for_exec: label build failed
[  469.745713][T17762] profile_transition: unconfined exec no attachment
[  469.745725][T17762] apparmor_bprm_creds_for_exec: label build failed
[  469.757936][T17763] profile_transition: unconfined exec no attachment
[  469.757947][T17763] apparmor_bprm_creds_for_exec: label build failed
[  469.779882][T17764] profile_transition: unconfined exec no attachment
[  469.779894][T17764] apparmor_bprm_creds_for_exec: label build failed
[  469.785852][T17765] profile_transition: unconfined exec no attachment
[  469.785862][T17765] apparmor_bprm_creds_for_exec: label build failed
[  469.909105][T17637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.056338][T17637] veth0_vlan: entered promiscuous mode
[  470.062855][T17637] veth1_vlan: entered promiscuous mode
[  470.092965][T17637] veth0_macvtap: entered promiscuous mode
[  470.105153][T17637] veth1_macvtap: entered promiscuous mode
[  470.135006][T17637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.141314][T17637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.173256][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.181206][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.197313][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.202905][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.234210][T17795] loop4: detected capacity change from 0 to 8192
[  470.368218][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.374526][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.420466][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.429054][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.622724][T17824] loop2: detected capacity change from 0 to 16
[  470.631168][T17824] erofs (device loop2): mounted with root inode @ nid 36.
[  470.770618][T17839] netlink: 'syz.4.4307': attribute type 7 has an invalid length.
[  470.812172][   T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  470.874526][ T5599] Bluetooth: hci2: command tx timeout
[  470.924905][T17854] jffs2: notice: (17854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  470.935430][T17854] overlayfs: missing 'lowerdir'
[  470.963847][   T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  470.968461][   T10] usb 6-1: config 0 has no interface number 0
[  470.973715][   T10] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  470.987340][   T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  470.995267][   T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  471.000349][   T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  471.008637][   T10] usb 6-1: Product: syz
[  471.013630][   T10] usb 6-1: SerialNumber: syz
[  471.018075][   T10] usb 6-1: config 0 descriptor??
[  471.024442][   T10] usbhid 6-1:0.8: couldn't find an input interrupt endpoint
[  471.229183][T17801] usb 6-1: USB disconnect, device number 3
[  471.580498][T17897] loop4: detected capacity change from 0 to 32768
[  471.589279][T17897] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  471.609646][T17897] XFS (loop4): Ending clean mount
[  471.650790][T17154] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  471.752426][ T5599] Bluetooth: hci0: command tx timeout
[  471.996377][T17935] loop5: detected capacity change from 0 to 256
[  472.001488][T17930] loop4: detected capacity change from 0 to 1024
[  472.008453][T17935] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  472.035225][T17937] loop2: detected capacity change from 0 to 164
[  472.195188][T17949] overlayfs: missing 'lowerdir'
[  472.434790][T17967] loop2: detected capacity change from 0 to 16
[  472.442466][T17967] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 17700)
[  472.585320][T17969] loop5: detected capacity change from 0 to 32768
[  472.593644][T17969] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  472.616800][T17969] XFS (loop5): Ending clean mount
[  472.641986][T17637] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  472.769408][T17986] loop5: detected capacity change from 0 to 256
[  472.772837][T17986] exfat: Deprecated parameter 'utf8'
[  472.774981][T17986] exfat: Deprecated parameter 'namecase'
[  472.776957][T17986] exfat: Deprecated parameter 'namecase'
[  472.779053][T17986] exfat: Deprecated parameter 'utf8'
[  472.783547][T17986] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  472.831539][T17988] loop2: detected capacity change from 0 to 256
[  472.844236][T17988] exfat: Deprecated parameter 'namecase'
[  472.850535][T17988] exfat: Deprecated parameter 'namecase'
[  472.862704][T17988] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  472.952109][ T5599] Bluetooth: hci2: command tx timeout
[  473.831815][ T5599] Bluetooth: hci0: command tx timeout
[  473.976239][T18000] EXT4-fs: Ignoring removed bh option
[  473.990542][T18000] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  474.020108][T18000] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  474.036249][T18000] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4357: bg 0: block 248: padding at end of block bitmap is not set
[  474.049310][T18000] loop2: lost filesystem error report for type 5 error -117
[  474.049602][T18000] Quota error (device loop2): write_blk: dquota write failed
[  474.052103][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  474.052114][    C0] EXT4-fs (loop2): last error at time 1787679715: ext4_validate_block_bitmap:441
[  474.052940][T18003] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  474.056843][T18000] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  474.068264][T18000] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.4357: Failed to acquire dquot type 1
[  474.080194][T18000] loop2: lost filesystem error report for type 5 error -28
[  474.086635][T18000] EXT4-fs (loop2): 1 truncate cleaned up
[  474.091500][T18000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  474.103888][ T1107] ntfs3(loop5): ino=9, ntfs3_write_inode failed, -22.
[  474.107034][T18000] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2
[  474.113201][T17637] ntfs3(loop5): ino=9, ntfs_sync_fs failed, -22.
[  474.120309][T18000] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 131074
[  474.124069][T18000] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.4357: Failed to acquire dquot type 1
[  474.167823][T17602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  474.272512][T18015] exfat: Deprecated parameter 'namecase'
[  474.274540][T18015] exfat: Deprecated parameter 'utf8'
[  474.283422][T18015] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  474.517013][T18029] EXT4-fs: Ignoring removed nobh option
[  474.524161][T18029] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  474.533118][T18029] EXT4-fs (loop2): 1 truncate cleaned up
[  474.536933][T18029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.565201][T17602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.401047][T18048] profile_transition: 57 callbacks suppressed
[  475.401062][T18048] profile_transition: unconfined exec no attachment
[  475.405845][T18048] apparmor_bprm_creds_for_exec: 57 callbacks suppressed
[  475.405859][T18048] apparmor_bprm_creds_for_exec: label build failed
[  475.439840][T18049] profile_transition: unconfined exec no attachment
[  475.439859][T18049] apparmor_bprm_creds_for_exec: label build failed
[  475.720670][T18062] set_capacity_and_notify: 6 callbacks suppressed
[  475.720686][T18062] loop4: detected capacity change from 0 to 512
[  475.730807][T18062] EXT4-fs (loop4): unable to read superblock
[  476.008705][T18069] loop2: detected capacity change from 0 to 40427
[  476.013461][T18069] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  476.017140][T18069] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  476.062896][T18069] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  476.070891][T18069] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  476.073343][T18069] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  476.113053][T18069] overlayfs: conflicting lowerdir path
[  476.121843][  T796] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  476.141147][T17602] syz-executor: attempt to access beyond end of device
[  476.141147][T17602] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  476.155217][T17602] CPU: 0 UID: 0 PID: 17602 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  476.155240][T17602] Tainted: [L]=SOFTLOCKUP
[  476.155244][T17602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  476.155251][T17602] Call Trace:
[  476.155256][T17602]  <TASK>
[  476.155261][T17602]  dump_stack_lvl+0xe8/0x150
[  476.155275][T17602]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  476.155287][T17602]  f2fs_write_end_io+0x124b/0x1710
[  476.155302][T17602]  __submit_merged_bio+0x258/0x6a0
[  476.155317][T17602]  ? rcu_is_watching+0x15/0xb0
[  476.155329][T17602]  __submit_merged_write_cond+0x3c9/0x4e0
[  476.155342][T17602]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  476.155359][T17602]  f2fs_write_data_pages+0x2a27/0x36f0
[  476.155369][T17602]  ? is_bpf_text_address+0x292/0x2b0
[  476.155390][T17602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  476.155400][T17602]  ? is_bpf_text_address+0x26/0x2b0
[  476.155413][T17602]  ? arch_stack_walk+0xfb/0x150
[  476.155434][T17602]  ? add_lock_to_list+0xc7/0x100
[  476.155444][T17602]  ? lockdep_unlock+0x5d/0xd0
[  476.155451][T17602]  ? __lock_acquire+0x14b9/0x2e50
[  476.155469][T17602]  ? do_raw_spin_lock+0x12b/0x2f0
[  476.155480][T17602]  ? do_raw_spin_unlock+0x4d/0x210
[  476.155487][T17602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  476.155498][T17602]  do_writepages+0x338/0x560
[  476.155511][T17602]  ? do_raw_spin_unlock+0x4d/0x210
[  476.155519][T17602]  filemap_fdatawrite+0x1e9/0x2f0
[  476.155530][T17602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  476.155554][T17602]  ? do_raw_spin_unlock+0x4d/0x210
[  476.155563][T17602]  f2fs_sync_dirty_inodes+0x30e/0x830
[  476.155575][T17602]  f2fs_write_checkpoint+0xa3d/0x2710
[  476.155594][T17602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  476.155619][T17602]  kill_f2fs_super+0x2f6/0x700
[  476.155628][T17602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  476.155639][T17602]  ? call_rcu+0x64b/0x8b0
[  476.155649][T17602]  ? lockdep_hardirqs_on+0x7a/0x110
[  476.155663][T17602]  deactivate_locked_super+0xbc/0x130
[  476.155672][T17602]  cleanup_mnt+0x3d3/0x460
[  476.155682][T17602]  task_work_run+0x1d9/0x270
[  476.155693][T17602]  ? __pfx_task_work_run+0x10/0x10
[  476.155706][T17602]  exit_to_user_mode_loop+0x1fa/0x730
[  476.155715][T17602]  ? rcu_is_watching+0x15/0xb0
[  476.155755][T17602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.155762][T17602]  do_syscall_64+0x353/0x580
[  476.155771][T17602]  ? trace_irq_disable+0x3b/0x140
[  476.155781][T17602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.155788][T17602] RIP: 0033:0x7f2ca099f317
[  476.155796][T17602] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  476.155802][T17602] RSP: 002b:00007fffc5bf90a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  476.155812][T17602] RAX: 0000000000000000 RBX: 00007f2ca0a34474 RCX: 00007f2ca099f317
[  476.155817][T17602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc5bf9160
[  476.155822][T17602] RBP: 00007fffc5bf9160 R08: 00007fffc5bfa160 R09: 00000000ffffffff
[  476.155826][T17602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc5bfa1f0
[  476.155831][T17602] R13: 00007f2ca0a34474 R14: 00000000000745e5 R15: 00007fffc5bfa230
[  476.155842][T17602]  </TASK>
[  476.158423][T17602] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  476.273645][T17602] CPU: 0 UID: 0 PID: 17602 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  476.273659][T17602] Tainted: [L]=SOFTLOCKUP
[  476.273662][T17602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  476.273666][T17602] Call Trace:
[  476.273670][T17602]  <TASK>
[  476.273673][T17602]  dump_stack_lvl+0xe8/0x150
[  476.273686][T17602]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  476.273700][T17602]  f2fs_write_end_io+0x124b/0x1710
[  476.273715][T17602]  __submit_merged_bio+0x258/0x6a0
[  476.273764][T17602]  ? rcu_is_watching+0x15/0xb0
[  476.273777][T17602]  __submit_merged_write_cond+0x3c9/0x4e0
[  476.273790][T17602]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  476.273812][T17602]  f2fs_write_data_pages+0x2a27/0x36f0
[  476.273824][T17602]  ? is_bpf_text_address+0x292/0x2b0
[  476.273848][T17602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  476.273857][T17602]  ? is_bpf_text_address+0x26/0x2b0
[  476.273871][T17602]  ? arch_stack_walk+0xfb/0x150
[  476.273894][T17602]  ? add_lock_to_list+0xc7/0x100
[  476.273905][T17602]  ? lockdep_unlock+0x5d/0xd0
[  476.273912][T17602]  ? __lock_acquire+0x14b9/0x2e50
[  476.273932][T17602]  ? do_raw_spin_lock+0x12b/0x2f0
[  476.273944][T17602]  ? do_raw_spin_unlock+0x4d/0x210
[  476.273951][T17602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  476.273962][T17602]  do_writepages+0x338/0x560
[  476.273977][T17602]  ? do_raw_spin_unlock+0x4d/0x210
[  476.273988][T17602]  filemap_fdatawrite+0x1e9/0x2f0
[  476.273998][T17602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  476.274027][T17602]  ? do_raw_spin_unlock+0x4d/0x210
[  476.274036][T17602]  f2fs_sync_dirty_inodes+0x30e/0x830
[  476.274051][T17602]  f2fs_write_checkpoint+0xa3d/0x2710
[  476.274072][T17602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  476.274101][T17602]  kill_f2fs_super+0x2f6/0x700
[  476.274111][T17602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  476.274123][T17602]  ? call_rcu+0x64b/0x8b0
[  476.274132][T17602]  ? lockdep_hardirqs_on+0x7a/0x110
[  476.274147][T17602]  deactivate_locked_super+0xbc/0x130
[  476.274157][T17602]  cleanup_mnt+0x3d3/0x460
[  476.274167][T17602]  task_work_run+0x1d9/0x270
[  476.274179][T17602]  ? __pfx_task_work_run+0x10/0x10
[  476.274193][T17602]  exit_to_user_mode_loop+0x1fa/0x730
[  476.274201][T17602]  ? rcu_is_watching+0x15/0xb0
[  476.274211][T17602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.274219][T17602]  do_syscall_64+0x353/0x580
[  476.274227][T17602]  ? trace_irq_disable+0x3b/0x140
[  476.274238][T17602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.274245][T17602] RIP: 0033:0x7f2ca099f317
[  476.274253][T17602] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  476.274259][T17602] RSP: 002b:00007fffc5bf90a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  476.274267][T17602] RAX: 0000000000000000 RBX: 00007f2ca0a34474 RCX: 00007f2ca099f317
[  476.274272][T17602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc5bf9160
[  476.274276][T17602] RBP: 00007fffc5bf9160 R08: 00007fffc5bfa160 R09: 00000000ffffffff
[  476.274281][T17602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc5bfa1f0
[  476.274285][T17602] R13: 00007f2ca0a34474 R14: 00000000000745e5 R15: 00007fffc5bfa230
[  476.274298][T17602]  </TASK>
[  476.274856][T17602] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  476.302124][  T796] usb 5-1: Using ep0 maxpacket: 8
[  476.383854][  T796] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  476.386483][  T796] usb 5-1: config 0 has no interface number 0
[  476.388476][  T796] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  476.391900][  T796] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  476.395430][  T796] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  476.398849][  T796] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  476.404377][  T796] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  476.408067][  T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.431830][  T796] usb 5-1: config 0 descriptor??
[  476.439375][  T796] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  476.639825][  T796] usb 5-1: USB disconnect, device number 10
[  476.639893][    C1] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  476.646770][  T796] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  476.850656][T18097] ldusb: No device or device unplugged -19
[  476.853201][T18097] ldusb: No device or device unplugged -19
[  476.855135][T18097] ldusb: No device or device unplugged -19
[  476.857069][T18097] ldusb: No device or device unplugged -19
[  477.645793][T18124] profile_transition: unconfined exec no attachment
[  477.645806][T18124] apparmor_bprm_creds_for_exec: label build failed
[  477.674615][T18123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4406'.
[  478.421797][ T5666] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  478.513879][T18145] loop2: detected capacity change from 0 to 32768
[  478.520513][T18145] (syz.2.4417,18145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xe03c4605, computed 0x9efb3e14. Applying ECC.
[  478.527319][T18145] (syz.2.4417,18145,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xe03c4605, computed 0x9efb3e14
[  478.531996][T18145] (syz.2.4417,18145,0):ocfs2_verify_volume:2328 ERROR: status = -5
[  478.535174][T18145] (syz.2.4417,18145,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  478.538168][T18145] (syz.2.4417,18145,0):ocfs2_fill_super:1177 ERROR: status = -5
[  478.594453][ T5666] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  478.597377][ T5666] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  478.599976][ T5666] usb 5-1: Product: syz
[  478.603069][ T5666] usb 5-1: config 0 descriptor??
[  478.607511][ T5666] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  478.610352][ T5666] usb 5-1: Detected FT232H
[  478.639009][T18149] loop2: detected capacity change from 0 to 128
[  478.648643][T18149] FAT-fs (loop2): Directory bread(block 1048) failed
[  478.651948][ T9076] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  478.658848][T18149] FAT-fs (loop2): Directory bread(block 1049) failed
[  478.670153][T18149] FAT-fs (loop2): Directory bread(block 1050) failed
[  478.673601][T18149] FAT-fs (loop2): Directory bread(block 1051) failed
[  478.676017][T18149] FAT-fs (loop2): Directory bread(block 1052) failed
[  478.678270][T18149] FAT-fs (loop2): Directory bread(block 1053) failed
[  478.680432][T18149] FAT-fs (loop2): Directory bread(block 1054) failed
[  478.685937][T18149] FAT-fs (loop2): Directory bread(block 1055) failed
[  478.766813][T18155] x_tables: duplicate underflow at hook 2
[  478.815948][ T5666] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  478.825876][T18159] loop2: detected capacity change from 0 to 256
[  478.828504][T18159] exfat: Deprecated parameter 'utf8'
[  478.830279][T18159] exfat: Deprecated parameter 'utf8'
[  478.832341][ T9076] usb 6-1: Using ep0 maxpacket: 8
[  478.837016][T18159] exfat: Deprecated parameter 'namecase'
[  478.839061][T18159] exfat: Deprecated parameter 'namecase'
[  478.841150][ T9076] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  478.841222][  T796] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  478.851401][T18159] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  478.852592][ T9076] usb 6-1: config 0 has no interface number 0
[  478.870315][ T9076] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  478.887554][ T9076] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  478.907288][ T9076] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  478.923401][ T9076] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  478.937133][ T9076] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  478.949117][ T9076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.987735][ T9076] usb 6-1: config 0 descriptor??
[  479.009490][ T9076] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  479.072424][   T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  479.312108][ T5666] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  479.318422][ T5666] usb 6-1: USB disconnect, device number 4
[  479.320278][    C1] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  479.321361][T18147] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19
[  479.340355][ T5666] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  479.383277][ T5637] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  479.460439][   T24] usb 5-1: USB disconnect, device number 11
[  479.469931][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  479.474577][   T24] ftdi_sio 5-1:0.0: device disconnected
[  479.938421][T18173] dummy0: entered promiscuous mode
[  479.940655][T18173] dummy0: entered allmulticast mode
[  480.098560][T18179] loop4: detected capacity change from 0 to 256
[  480.106410][T18179] FAT-fs (loop4): Directory bread(block 1285) failed
[  480.121808][T18179] FAT-fs (loop4): Directory bread(block 1286) failed
[  480.135299][T18179] FAT-fs (loop4): Directory bread(block 1287) failed
[  480.147835][T18179] FAT-fs (loop4): Directory bread(block 1288) failed
[  480.187778][T18182] profile_transition: unconfined exec no attachment
[  480.187793][T18182] apparmor_bprm_creds_for_exec: label build failed
[  480.353339][T18184] FAT-fs (loop4): Directory bread(block 1285) failed
[  480.357067][T18184] FAT-fs (loop4): Directory bread(block 1286) failed
[  480.359217][T18184] FAT-fs (loop4): Directory bread(block 1287) failed
[  480.362512][T18184] FAT-fs (loop4): Directory bread(block 1288) failed
[  480.366388][T18184] FAT-fs (loop4): Directory bread(block 1285) failed
[  480.369799][T18184] FAT-fs (loop4): Directory bread(block 1286) failed
[  480.438262][ T5637] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  480.482056][ T5637] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  480.530802][T18190] profile_transition: unconfined exec no attachment
[  480.530822][T18190] apparmor_bprm_creds_for_exec: label build failed
[  480.579556][T18194] loop2: detected capacity change from 0 to 2048
[  480.601146][T18199] profile_transition: unconfined exec no attachment
[  480.601159][T18199] apparmor_bprm_creds_for_exec: label build failed
[  480.618833][T18194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  480.630835][T18200] profile_transition: unconfined exec no attachment
[  480.630848][T18200] apparmor_bprm_creds_for_exec: label build failed
[  480.652086][T17801] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  480.722335][T18205] profile_transition: unconfined exec no attachment
[  480.722349][T18205] apparmor_bprm_creds_for_exec: label build failed
[  480.760932][T18209] profile_transition: unconfined exec no attachment
[  480.760945][T18209] apparmor_bprm_creds_for_exec: label build failed
[  480.801167][T18210] profile_transition: unconfined exec no attachment
[  480.801186][T18210] apparmor_bprm_creds_for_exec: label build failed
[  480.834417][T18211] profile_transition: unconfined exec no attachment
[  480.834435][T18211] apparmor_bprm_creds_for_exec: label build failed
[  480.995324][  T796] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  481.141742][  T796] usb 3-1: Using ep0 maxpacket: 32
[  481.147989][  T796] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  481.151485][  T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.154513][  T796] usb 3-1: Product: syz
[  481.156200][  T796] usb 3-1: Manufacturer: syz
[  481.158170][  T796] usb 3-1: SerialNumber: syz
[  481.168030][  T796] usb 3-1: config 0 descriptor??
[  481.366221][T18219] loop4: detected capacity change from 0 to 2048
[  481.371927][T18219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  481.386095][  T796] snd-usb-6fire 3-1:0.0: unable to receive device firmware state.
[  481.393722][  T796] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -71
[  481.403207][  T796] usb 3-1: USB disconnect, device number 46
[  481.761774][ T5666] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  481.801907][T18233] profile_transition: unconfined exec no attachment
[  481.801920][T18233] apparmor_bprm_creds_for_exec: label build failed
[  481.830754][T18235] profile_transition: unconfined exec no attachment
[  481.830775][T18235] apparmor_bprm_creds_for_exec: label build failed
[  481.850108][T18236] profile_transition: unconfined exec no attachment
[  481.850120][T18236] apparmor_bprm_creds_for_exec: label build failed
[  481.915914][ T5666] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7
[  481.928183][ T5666] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 78, changing to 7
[  481.938651][ T5666] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40
[  481.946697][ T5666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.950493][ T5666] usb 6-1: Product: syz
[  481.952264][ T5666] usb 6-1: Manufacturer: syz
[  481.954195][ T5666] usb 6-1: SerialNumber: syz
[  482.177957][ T5666] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  482.184467][ T5666] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  482.186792][T18254] hsr_slave_0: left promiscuous mode
[  482.189977][T18254] hsr_slave_1: left promiscuous mode
[  482.211313][ T5666] usb 6-1: USB disconnect, device number 5
[  482.247007][T18255] bond0: entered promiscuous mode
[  482.250356][T18255] bond_slave_0: entered promiscuous mode
[  482.254381][T18255] bond_slave_1: entered promiscuous mode
[  482.263753][T18255] gretap0: entered promiscuous mode
[  482.266770][T18255] debugfs: 'hsr0' already exists in 'hsr'
[  482.268583][T18255] Cannot create hsr debugfs directory
[  482.273528][T18255] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4456'.
[  483.159473][T18276] loop5: detected capacity change from 0 to 32768
[  483.169683][T18276] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  483.197905][T18276] XFS (loop5): Ending clean mount
[  483.246699][T18286] deleting an unspecified loop device is not supported.
[  483.276324][T18288] netlink: 'syz.2.4465': attribute type 34 has an invalid length.
[  483.278848][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'.
[  483.287179][T17637] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  483.295457][T18288] bond1: option lacp_strict: invalid value (92)
[  483.317893][T18288] bond1 (unregistering): Released all slaves
[  483.535508][T18297] loop5: detected capacity change from 0 to 512
[  483.573625][T18297] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  483.582117][T18297] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.4469: corrupted in-inode xattr: e_value size too large
[  483.586365][T18297] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  483.586539][T18297] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4469: couldn't read orphan inode 15 (err -117)
[  483.596168][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  483.596179][    C1] EXT4-fs (loop5): initial error at time 1787679724: ext4_iget_extra_inode:5180: inode 15
[  483.596192][    C1] EXT4-fs (loop5): last error at time 1787679724: ext4_iget_extra_inode:5180: inode 15
[  483.610804][T18297] loop5: lost filesystem error report for type 5 error -117
[  483.612567][T18297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.712803][T18308] loop2: detected capacity change from 0 to 1024
[  484.361745][ T5666] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  484.383751][T17637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.454408][T18320] loop5: detected capacity change from 0 to 512
[  484.458272][T18320] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  484.465697][T18320] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.4479: bad orphan inode 131083
[  484.469859][T18320] loop5: lost filesystem error report for type 5 error -117
[  484.471398][T18320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.503788][T17637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.518848][ T5666] usb 3-1: Using ep0 maxpacket: 8
[  484.526205][ T5666] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  484.530042][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.534912][ T5666] usb 3-1: Product: syz
[  484.536640][ T5666] usb 3-1: Manufacturer: syz
[  484.538572][ T5666] usb 3-1: SerialNumber: syz
[  484.558856][ T5666] usb 3-1: config 0 descriptor??
[  484.785077][ T5666] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  484.792870][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  484.964891][T17375] IPVS: starting estimator thread 0...
[  485.062340][T18335] IPVS: using max 84 ests per chain, 201600 per kthread
[  485.225545][ T5666] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  485.232726][ T5666] usb 3-1: USB disconnect, device number 47
[  485.324844][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'.
[  485.328300][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4489'.
[  485.333746][T18346] netlink: 'syz.4.4489': attribute type 7 has an invalid length.
[  485.347376][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  485.351289][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  485.356460][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  485.360955][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  485.435253][T18350] profile_transition: name lookup ix on error
[  485.650309][T18364] loop5: detected capacity change from 0 to 2048
[  485.664916][T18364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.669888][   T33] audit: type=1800 audit(1787679726.639:291): pid=18364 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.4498" name="file1" dev="loop5" ino=15 res=0 errno=0
[  485.695181][T18364] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.886775][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4502'.
[  485.964306][ T5599] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  486.415899][   T33] audit: type=1326 audit(1787679727.389:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18392 comm="syz.2.4509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca099e0d9 code=0x7ffc0000
[  486.431408][   T33] audit: type=1326 audit(1787679727.399:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18392 comm="syz.2.4509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca099e0d9 code=0x7ffc0000
[  486.454535][   T33] audit: type=1326 audit(1787679727.399:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18392 comm="syz.2.4509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca099e0d9 code=0x7ffc0000
[  486.461576][   T33] audit: type=1326 audit(1787679727.399:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18392 comm="syz.2.4509" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2ca099e0d9 code=0x7ffc0000
[  486.468393][   T33] audit: type=1326 audit(1787679727.399:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18392 comm="syz.2.4509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca099e0d9 code=0x7ffc0000
[  486.475193][   T33] audit: type=1326 audit(1787679727.399:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18392 comm="syz.2.4509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca099e0d9 code=0x7ffc0000
[  486.489994][   T33] audit: type=1326 audit(1787679727.399:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18392 comm="syz.2.4509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca099e0d9 code=0x7ffc0000
[  486.509059][   T33] audit: type=1326 audit(1787679727.399:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18392 comm="syz.2.4509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca099e0d9 code=0x7ffc0000
[  486.525019][   T33] audit: type=1326 audit(1787679727.399:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=18392 comm="syz.2.4509" exe="/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f2ca099e0d9 code=0x7ffc0000
[  486.931789][ T6957] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  487.085975][ T6957] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.093545][ T6957] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  487.099845][ T6957] usb 3-1: config 0 interface 0 has no altsetting 0
[  487.106404][ T6957] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  487.110212][ T6957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.121430][ T6957] usb 3-1: config 0 descriptor??
[  487.295433][T18426] loop4: detected capacity change from 0 to 164
[  487.544015][ T6957] sony 0003:054C:0268.0020: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0
[  487.551578][ T6957] sony 0003:054C:0268.0020: failed to claim input
[  487.661500][T18436] No such timeout policy "syz1"
[  487.747611][ T9148] usb 3-1: USB disconnect, device number 48
[  487.811535][T18445] coredump: 141(syz.5.4533): Core dump to core aborted: cannot preserve file permissions
[  487.940032][T18449] netlink: 26 bytes leftover after parsing attributes in process `syz.5.4535'.
[  488.012091][T18453] xt_hashlimit: size too large, truncated to 1048576
[  488.030057][T18454] profile_transition: 5 callbacks suppressed
[  488.030067][T18454] profile_transition: unconfined exec no attachment
[  488.034032][T18454] apparmor_bprm_creds_for_exec: 6 callbacks suppressed
[  488.034040][T18454] apparmor_bprm_creds_for_exec: label build failed
[  488.237945][T18462] ip_tables: iptables: counters copy to user failed while replacing table
[  488.390831][T18477] loop2: detected capacity change from 0 to 1024
[  488.403270][T18477] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  488.407291][T18477] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  488.410921][T18477] EXT4-fs error (device loop2): ext4_get_journal_inode:5900: inode #32: comm syz.2.4548: iget: special inode unallocated
[  488.415344][T18477] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  488.415484][T18477] EXT4-fs (loop2): no journal found
[  488.420172][T18477] EXT4-fs (loop2): can't get journal size
[  488.422010][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  488.422020][    C1] EXT4-fs (loop2): initial error at time 1787679729: ext4_get_journal_inode:5900: inode 32
[  488.422033][    C1] EXT4-fs (loop2): last error at time 1787679729: ext4_get_journal_inode:5900: inode 32
[  488.431928][T18477] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #32: comm syz.2.4548: iget: special inode unallocated
[  488.436234][T18477] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  488.436405][T18477] EXT4-fs (loop2): failed to initialize system zone (-117)
[  488.441530][T18477] EXT4-fs (loop2): mount failed
[  488.537685][T18482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4550'.
[  488.575449][T18485] loop4: detected capacity change from 0 to 512
[  488.592431][ T9148] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  488.603189][T18485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.607349][T18485] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  488.632526][T17154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.709459][T18486] loop2: detected capacity change from 0 to 32768
[  488.737774][T18486] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  488.747128][T18486] XFS (loop2): Ending clean mount
[  488.751746][ T9148] usb 6-1: Using ep0 maxpacket: 32
[  488.755576][ T9148] usb 6-1: unable to get BOS descriptor or descriptor too short
[  488.758903][ T9148] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.763328][ T9148] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  488.768374][ T9148] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  488.771564][ T9148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.775218][ T9148] usb 6-1: Product: syz
[  488.775494][T18486] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  488.776661][ T9148] usb 6-1: Manufacturer: syz
[  488.782226][ T9148] usb 6-1: SerialNumber: syz
[  488.787637][ T9148] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  488.822539][T17602] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  488.832797][ T9148] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  488.835890][ T9148] usb 6-1: disable ehci-hcd to run US-144
[  488.883735][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  488.994052][T17375] usb 6-1: USB disconnect, device number 6
[  489.120433][T18505] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0
[  489.608101][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4556'.
[  490.116213][T18518] loop2: detected capacity change from 0 to 1024
[  490.118940][T18518] EXT4-fs: Ignoring removed mblk_io_submit option
[  490.122947][T18518] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  490.129571][T18518] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.4560: lblock 2 mapped to illegal pblock 2 (length 1)
[  490.134166][T18518] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  490.134344][T18518] EXT4-fs (loop2): Remounting filesystem read-only
[  490.139148][T18518] EXT4-fs (loop2): 1 orphan inode deleted
[  490.141918][T18518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  490.158139][T17602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.193691][T18522] MINIX-fs: unable to read superblock
[  490.339248][T18526] loop2: detected capacity change from 0 to 32768
[  490.343815][T18526] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4563 (18526)
[  490.358335][T18526] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  490.364934][T18526] BTRFS info (device loop2): using blake2b checksum algorithm
[  490.365812][T18527] profile_transition: unconfined exec no attachment
[  490.367372][T18527] apparmor_bprm_creds_for_exec: label build failed
[  490.396930][T18526] BTRFS info (device loop2): enabling ssd optimizations
[  490.399840][T18526] BTRFS info (device loop2): turning on async discard
[  490.402459][T18526] BTRFS info (device loop2): enabling free space tree
[  490.404855][T18526] BTRFS info (device loop2): use zstd compression, level 3
[  490.446999][T18526] BTRFS error (device loop2): target device  is invalid!
[  490.473036][T18541] profile_transition: unconfined exec no attachment
[  490.473049][T18541] apparmor_bprm_creds_for_exec: label build failed
[  490.482784][T17602] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  491.197393][T18557] loop5: detected capacity change from 0 to 512
[  491.200143][T18557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  491.250713][T18557] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.4571: iget: bad i_size value: 38620345925642
[  491.260482][T18557] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  491.261202][T18557] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4571: couldn't read orphan inode 15 (err -117)
[  491.264109][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  491.264119][    C0] EXT4-fs (loop5): initial error at time 1787679732: ext4_orphan_get:1399: inode 15
[  491.264131][    C0] EXT4-fs (loop5): last error at time 1787679732: ext4_orphan_get:1399: inode 15
[  491.280661][T18557] loop5: lost filesystem error report for type 5 error -117
[  491.281582][T18557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.369763][T18555] loop2: detected capacity change from 0 to 131072
[  491.373070][T18555] F2FS-fs (loop2): invalid crc value
[  491.416987][T18555] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  491.425809][T18555] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  492.207129][   T26] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u9:0: bg 0: block 5: invalid block bitmap
[  492.219833][   T26] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  492.224109][   T26] EXT4-fs (loop5): This should not happen!! Data will be lost
[  492.224109][   T26] 
[  492.227035][   T26] EXT4-fs (loop5): Total free blocks count 0
[  492.228931][   T26] EXT4-fs (loop5): Free/Dirty block details
[  492.231143][   T26] EXT4-fs (loop5): free_blocks=0
[  492.236605][   T26] EXT4-fs (loop5): dirty_blocks=15240
[  492.238398][   T26] EXT4-fs (loop5): Block reservation details
[  492.240279][   T26] EXT4-fs (loop5): i_reserved_data_blocks=15240
[  492.263844][   T26] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  492.285981][T17637] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  492.981351][T18579] ==================================================================
[  492.981382][T18579] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0xff5/0x1e40
[  492.981403][T18579] Write of size 8 at addr ffffc90005859020 by task syz.2.4578/18579
[  492.981413][T18579] 
[  492.981422][T18579] CPU: 0 UID: 0 PID: 18579 Comm: syz.2.4578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  492.981438][T18579] Tainted: [L]=SOFTLOCKUP
[  492.981442][T18579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  492.981449][T18579] Call Trace:
[  492.981456][T18579]  <TASK>
[  492.981462][T18579]  dump_stack_lvl+0xe8/0x150
[  492.981478][T18579]  print_address_description+0x55/0x1e0
[  492.981493][T18579]  ? sys_imageblit+0xff5/0x1e40
[  492.981503][T18579]  print_report+0x58/0x70
[  492.981511][T18579]  kasan_report+0x117/0x150
[  492.981519][T18579]  ? sys_imageblit+0xff5/0x1e40
[  492.981526][T18579]  sys_imageblit+0xff5/0x1e40
[  492.981537][T18579]  drm_fbdev_shmem_defio_imageblit+0x2c/0x110
[  492.981551][T18579]  soft_cursor+0xa0e/0xc40
[  492.981566][T18579]  ? __pfx_prb_first_seq+0x10/0x10
[  492.981625][T18579]  bit_cursor+0x11c3/0x1970
[  492.981645][T18579]  ? __pfx_bit_cursor+0x10/0x10
[  492.981662][T18579]  ? get_color+0x2b8/0x4b0
[  492.981675][T18579]  ? fbcon_cursor+0x4c4/0x6f0
[  492.981688][T18579]  hide_cursor+0xd3/0x490
[  492.981705][T18579]  ? __pfx_hide_cursor+0x10/0x10
[  492.981720][T18579]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  492.981740][T18579]  do_con_write+0x1bb/0x5500
[  492.981752][T18579]  ? panic_on_this_cpu+0x32/0x40
[  492.981780][T18579]  ? __pfx_do_con_write+0x10/0x10
[  492.981793][T18579]  ? irqentry_exit+0x218/0x8f0
[  492.981809][T18579]  ? irqentry_exit+0x218/0x8f0
[  492.981822][T18579]  ? trace_irq_disable+0x3b/0x140
[  492.981840][T18579]  con_put_char+0x82/0xc0
[  492.981852][T18579]  ? __pfx_con_put_char+0x10/0x10
[  492.981859][T18579]  ? __mutex_lock+0x30d/0x1550
[  492.981868][T18579]  ? __pfx_con_put_char+0x10/0x10
[  492.981876][T18579]  tty_put_char+0xce/0x160
[  492.981884][T18579]  ? __pfx_tty_put_char+0x10/0x10
[  492.981891][T18579]  ? n_tty_receive_char+0x610/0xbd0
[  492.981901][T18579]  ? __pfx___mutex_lock+0x10/0x10
[  492.981912][T18579]  ? n_tty_receive_buf_standard+0x482a/0x6a50
[  492.981928][T18579]  __process_echoes+0x190/0xa00
[  492.981946][T18579]  n_tty_receive_char+0x828/0xbd0
[  492.981964][T18579]  n_tty_receive_buf_standard+0x754/0x6a50
[  492.981990][T18579]  n_tty_receive_buf_common+0xb33/0x13d0
[  492.982014][T18579]  paste_selection+0x44c/0x700
[  492.982029][T18579]  ? __pfx_paste_selection+0x10/0x10
[  492.982040][T18579]  ? __pfx_default_wake_function+0x10/0x10
[  492.982053][T18579]  ? capable+0x88/0xe0
[  492.982065][T18579]  ? tioclinux+0x401/0x520
[  492.982076][T18579]  vt_ioctl+0x83b/0x20d0
[  492.982093][T18579]  ? __pfx_vt_ioctl+0x10/0x10
[  492.982109][T18579]  ? __fget_files+0x2a/0x420
[  492.982123][T18579]  ? tty_jobctrl_ioctl+0x378/0xba0
[  492.982138][T18579]  ? __fget_files+0x2a/0x420
[  492.982150][T18579]  tty_ioctl+0x920/0xdd0
[  492.982162][T18579]  ? __pfx_tty_ioctl+0x10/0x10
[  492.982174][T18579]  __se_sys_ioctl+0xfc/0x170
[  492.982189][T18579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.982201][T18579]  do_syscall_64+0x174/0x580
[  492.982216][T18579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.982226][T18579] RIP: 0033:0x7f2ca099e0d9
[  492.982237][T18579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.982248][T18579] RSP: 002b:00007f2c9ebd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  492.982261][T18579] RAX: ffffffffffffffda RBX: 00007f2ca0c26090 RCX: 00007f2ca099e0d9
[  492.982270][T18579] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000007
[  492.982278][T18579] RBP: 00007f2ca0a35024 R08: 0000000000000000 R09: 0000000000000000
[  492.982285][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  492.982292][T18579] R13: 00007f2ca0c26128 R14: 00007f2ca0c26090 R15: 00007fffc5bf9e38
[  492.982301][T18579]  </TASK>
[  492.982303][T18579] 
[  492.982306][T18579] The buggy address belongs to a vmalloc virtual mapping
[  492.982314][T18579] Memory state around the buggy address:
[  492.982318][T18579]  ffffc90005858f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  492.982323][T18579]  ffffc90005858f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  492.982328][T18579] >ffffc90005859000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  492.982331][T18579]                                ^
[  492.982338][T18579]  ffffc90005859080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  492.982345][T18579]  ffffc90005859100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  492.982350][T18579] ==================================================================
[  492.982550][T18579] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  492.982558][T18579] CPU: 0 UID: 0 PID: 18579 Comm: syz.2.4578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  492.982592][T18579] Tainted: [L]=SOFTLOCKUP
[  492.982598][T18579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  492.982605][T18579] Call Trace:
[  492.982610][T18579]  <TASK>
[  492.982615][T18579]  vpanic+0x56c/0xa60
[  492.982633][T18579]  ? __pfx_vpanic+0x10/0x10
[  492.982665][T18579]  panic+0xc5/0xd0
[  492.982674][T18579]  ? __pfx_panic+0x10/0x10
[  492.982682][T18579]  ? sys_imageblit+0xff5/0x1e40
[  492.982691][T18579]  ? sys_imageblit+0xff5/0x1e40
[  492.982697][T18579]  check_panic_on_warn+0x89/0xb0
[  492.982707][T18579]  ? sys_imageblit+0xff5/0x1e40
[  492.982713][T18579]  end_report+0x73/0x170
[  492.982720][T18579]  ? sys_imageblit+0xff5/0x1e40
[  492.982732][T18579]  kasan_report+0x128/0x150
[  492.982739][T18579]  ? sys_imageblit+0xff5/0x1e40
[  492.982747][T18579]  sys_imageblit+0xff5/0x1e40
[  492.982757][T18579]  drm_fbdev_shmem_defio_imageblit+0x2c/0x110
[  492.982765][T18579]  soft_cursor+0xa0e/0xc40
[  492.982774][T18579]  ? __pfx_prb_first_seq+0x10/0x10
[  492.982785][T18579]  bit_cursor+0x11c3/0x1970
[  492.982797][T18579]  ? __pfx_bit_cursor+0x10/0x10
[  492.982807][T18579]  ? get_color+0x2b8/0x4b0
[  492.982815][T18579]  ? fbcon_cursor+0x4c4/0x6f0
[  492.982823][T18579]  hide_cursor+0xd3/0x490
[  492.982833][T18579]  ? __pfx_hide_cursor+0x10/0x10
[  492.982842][T18579]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  492.982851][T18579]  do_con_write+0x1bb/0x5500
[  492.982859][T18579]  ? panic_on_this_cpu+0x32/0x40
[  492.982875][T18579]  ? __pfx_do_con_write+0x10/0x10
[  492.982882][T18579]  ? irqentry_exit+0x218/0x8f0
[  492.982892][T18579]  ? irqentry_exit+0x218/0x8f0
[  492.982899][T18579]  ? trace_irq_disable+0x3b/0x140
[  492.982910][T18579]  con_put_char+0x82/0xc0
[  492.982918][T18579]  ? __pfx_con_put_char+0x10/0x10
[  492.982925][T18579]  ? __mutex_lock+0x30d/0x1550
[  492.982934][T18579]  ? __pfx_con_put_char+0x10/0x10
[  492.982942][T18579]  tty_put_char+0xce/0x160
[  492.982950][T18579]  ? __pfx_tty_put_char+0x10/0x10
[  492.982958][T18579]  ? n_tty_receive_char+0x610/0xbd0
[  492.982967][T18579]  ? __pfx___mutex_lock+0x10/0x10
[  492.982975][T18579]  ? n_tty_receive_buf_standard+0x482a/0x6a50
[  492.982986][T18579]  __process_echoes+0x190/0xa00
[  492.982996][T18579]  n_tty_receive_char+0x828/0xbd0
[  492.983008][T18579]  n_tty_receive_buf_standard+0x754/0x6a50
[  492.983023][T18579]  n_tty_receive_buf_common+0xb33/0x13d0
[  492.983038][T18579]  paste_selection+0x44c/0x700
[  492.983046][T18579]  ? __pfx_paste_selection+0x10/0x10
[  492.983053][T18579]  ? __pfx_default_wake_function+0x10/0x10
[  492.983061][T18579]  ? capable+0x88/0xe0
[  492.983068][T18579]  ? tioclinux+0x401/0x520
[  492.983075][T18579]  vt_ioctl+0x83b/0x20d0
[  492.983086][T18579]  ? __pfx_vt_ioctl+0x10/0x10
[  492.983097][T18579]  ? __fget_files+0x2a/0x420
[  492.983105][T18579]  ? tty_jobctrl_ioctl+0x378/0xba0
[  492.983114][T18579]  ? __fget_files+0x2a/0x420
[  492.983121][T18579]  tty_ioctl+0x920/0xdd0
[  492.983129][T18579]  ? __pfx_tty_ioctl+0x10/0x10
[  492.983136][T18579]  __se_sys_ioctl+0xfc/0x170
[  492.983144][T18579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.983152][T18579]  do_syscall_64+0x174/0x580
[  492.983161][T18579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.983168][T18579] RIP: 0033:0x7f2ca099e0d9
[  492.983174][T18579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.983180][T18579] RSP: 002b:00007f2c9ebd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  492.983188][T18579] RAX: ffffffffffffffda RBX: 00007f2ca0c26090 RCX: 00007f2ca099e0d9
[  492.983193][T18579] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000007
[  492.983198][T18579] RBP: 00007f2ca0a35024 R08: 0000000000000000 R09: 0000000000000000
[  492.983202][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  492.983207][T18579] R13: 00007f2ca0c26128 R14: 00007f2ca0c26090 R15: 00007fffc5bf9e38
[  492.983214][T18579]  </TASK>
[  492.983890][T18579] Kernel Offset: disabled

VM DIAGNOSIS:
17:29:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000007ffff RDI=0000000000080000 RBP=00000000000003f8 RSP=ffffc90005c767d0
R8 =ffff8881072b8237 R9 =1ffff11020e57046 R10=dffffc0000000000 R11=ffffffff8567e1e0
R12=dffffc0000000000 R13=ffffffff9aad5140 R14=ffffffff9aad5180 R15=0000000000000000
RIP=ffffffff8567e25c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2c9ebd56c0 ffffffff 00c00000
GS =0000 ffff88818d956000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31116ff8 CR3=0000000103b3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f2ca0bf25d0 00007f2ca0bf2610
XMM06=00007f2ca0bf25f8 00007f2ca0bf25c8 XMM07=00007f2ca0bf2600 00007f2ca0bf25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff816c84dc RBX=0000000000000000 RCX=ffff88817401da00 RDX=0000000000010000
RSI=0000000000000008 RDI=ffffffff9371c2e0 RBP=0000000000000000 RSP=ffffc90000a08fc0
R8 =ffffffff9371c2e7 R9 =1ffffffff26e385c R10=dffffc0000000000 R11=fffffbfff26e385d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816c84dd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcc55c0e6c0 ffffffff 00c00000
GS =0000 ffff8882a8f56000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffc5bf9e80 CR3=000000016bea8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
