last executing test programs:

1m8.388900201s ago: executing program 2 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='select <kernel>\n', 0x10)
write(r0, &(0x7f0000000100)='file read /etc/passwd 0-0k.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c)

1m8.163379726s ago: executing program 2 (id=19):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@errors_continue}, {@grpjquota}, {@prjquota}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nouid32}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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")
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x101000, 0x1)
close(0xffffffffffffffff)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)

1m7.382386905s ago: executing program 2 (id=32):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@discard}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x7})
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffff7f, 0x58e300cd, 0xfffffffffffffff9, 0x10000000000040, 0x9, 0xf7a})
creat(&(0x7f0000000280)='./bus\x00', 0x2)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)

1m6.954397225s ago: executing program 2 (id=38):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000340)={0x8, 0x3000})

1m6.784777429s ago: executing program 2 (id=39):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='e:my_eprobe sch-d/sc', 0x14)

1m6.73068745s ago: executing program 2 (id=40):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xfffffffd)
io_setup(0x4, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x200000000000009d, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xc0b2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0)

51.337520315s ago: executing program 32 (id=40):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xfffffffd)
io_setup(0x4, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x200000000000009d, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xc0b2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0)

4.774156357s ago: executing program 3 (id=490):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0xa7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x3, 0x800008, 0x1, 0xff, 0xfffffffa, 0xfffffffb, 0x9, 0x407f, 0x7fffffff, 0x89, 0xcaa0, 0x5, 0x20001e58, 0x6, 0x34, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff7]})
close(0x3)

4.693630509s ago: executing program 3 (id=492):
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x230, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8}, @val={0xc, 0x99, {0x80, 0x33}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000940)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0)

4.509925763s ago: executing program 3 (id=494):
setresgid(0x0, 0xee01, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x6, 0x2b7, &(0x7f0000000480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
setuid(0xee01)
utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

4.22893706s ago: executing program 3 (id=498):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32=0x0], 0x1, 0x444a, &(0x7f0000008900)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0xbe0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})

3.964827986s ago: executing program 1 (id=501):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc)

3.586942296s ago: executing program 1 (id=506):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100000000000000040000000020000010000000000000002000"], 0x24, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00')

3.106652987s ago: executing program 1 (id=510):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa18, 0x0, 0x101, 0x100}})

2.753972515s ago: executing program 1 (id=513):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0)

2.294081696s ago: executing program 3 (id=516):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
ppoll(&(0x7f0000000380)=[{r1, 0x8430}, {r0, 0x14001}], 0x2, 0x0, 0x0, 0x0)

1.589196092s ago: executing program 0 (id=518):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000004000000040000000100000001000000", @ANYRES32=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r2, &(0x7f0000000d40), 0x0}, 0x20)

1.588519843s ago: executing program 1 (id=519):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x208000, 0x0)
fchdir(r0)
exit(0x3)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0)

1.493676575s ago: executing program 0 (id=521):
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x18}}], 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x28}}], 0x1, 0x0)

1.420831027s ago: executing program 0 (id=522):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./proc/net/rpc/use-gss-proxy\x00', 0x0, 0x81001, 0x0)
mkdir(&(0x7f0000000200)='./proc/net/rpc/use-gss-proxy\x00', 0x10)

1.302452639s ago: executing program 4 (id=525):
setreuid(0x0, 0xee00)
r0 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYRES8], 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

1.231288701s ago: executing program 0 (id=526):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
io_setup(0x490, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
io_pgetevents(r0, 0xa5df, 0x80000000000002f, 0xfffffffffffffffe, 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000001880)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x5, r1, 0x0, 0x0, 0x8}])

1.134163323s ago: executing program 4 (id=528):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)

1.105263674s ago: executing program 3 (id=529):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r0, 0x0, 0x0, 0x4000010)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1.022106296s ago: executing program 4 (id=531):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xadfe}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x28}, 0x94)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001000200000008000100000000000800010001000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f000000b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000000c000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68)

929.568138ms ago: executing program 5 (id=532):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000143c0)=0x3)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000002c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
readv(r1, 0x0, 0x0)

872.20746ms ago: executing program 4 (id=533):
timer_create(0x2, 0x0, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x10, &(0x7f0000000000)={[{@oldalloc}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0xfe, 0x450, &(0x7f0000000140)="$eJzs3MtvG0UYAPBvnTh9URJKofQFgYKoeCRN+qAHLkUg9QASEhyKOJk0rUrdBjVBolUFhUM5okrcEUck/gIulAsCTkhc4Y6QIpQLhZPR2rupcWwnTpy4xL+ftPWMd9yZb3cnHs94HUDfGo2I/RFxX0T8GhHDEZE0FhitPdxZuD7198L1qSQqlTf+TKrl/lq4PpUXzV+3o5apDLSp9+bbEaVyefpKlh+fu/Te+OzVa89fuFQ6P31++vLkyZPHjh4cOjF5vCtx7kzbuu/DmQN7T79167WpM7fe+fHrJIs7GuLoltHqUWvuqW5X1mM769LJYA8bQkfSPpqermK1/w/HQGxb3Dccr3zS08YB66pSKVS2tN59owJsYuloHuhH+Rt9+vk33zZo6HFPmD8Vi/MYd7KttmcwClmZ4jrWPxoRZ27880W6xTrNQwAA1Lt9KiKeazb+K8TDdeXuz9aGRiLigYjYFREPRsTuiHgoolp2T0Q80mH9jSskS8c/leFVBbZC6fjvxWxt67/jv3z0FyMDWW5nNf5icu5CefpIdkwOR3FLmp9oU8d3L//yWat99eO/dEvrz8eCWTv+GGyYoDtbKpbWEnO9+Y/Tf083iT+JfBknHR/vjYh9Hf7fe7LHC898daBVmeXjb6ML60yVLyOerp3/G9EQfy5puT458cKJyePjW6M8fWQ8vyqW+unnm6+3qn9N8XfB/O1KbG96/S/GP5JsjZi9eu1idb12tvM6bv72acvPNKu7/udKQ8mb1fRQ9twHpbm5KxMRQ8mrS5+fvPvaPJ+XT6//w4ea9/9dcfdI7I+I9CI+GBGPRsRjWdsfj4gnIuJQm/h/eOnJdzuPv82sfBel8Z9d7vxH/fnvPDFw8ftvOo8/l57/Y9XU4eyZ9PwvF9dKG7iWYwcAAAD/F4Xqd+CTwthiulAYG6t9h393bC+UZ2bnnj038/7ls7Xvyo9EsZDPdA3XzYdOZHPDeX6yIX80mzf+fGBbNT82NVPudD4R6K4dLfp/6vd2N/AAm4P7taB/6f/Qv/R/6F/6P/Qv/R/6V7P+/1EP2gFsvGXe/7dtVDuAjWf8D/1L/4f+pf9DX2p5b3xhTbf8S/Qo8e3Q2n6rYeWJKNwjIW+aRDGa7hpc8Y9ZrDKxpemuXv9lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//84IOG2")

872.04536ms ago: executing program 0 (id=534):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0)
read$msr(r0, &(0x7f00000023c0)=""/102397, 0x18ffd)
read$FUSE(r0, 0x0, 0x4b)

764.019012ms ago: executing program 0 (id=535):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4434, &(0x7f0000008940)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x143841, 0x114)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0))
truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

726.552743ms ago: executing program 5 (id=536):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38)

630.196255ms ago: executing program 1 (id=537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000fc0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "d22fbb7895cdae9ddcb9a4c926b8e182521a4eec8d9342396ab0639ca3f59bb2", "63acb8f2330a55f70339db259dadf202", {"9796734206cd1e450867a3939b16acb2", "959d2dc90e49c00e4defe3f9a7e7dd6a"}}}}}}}}, 0x0)

558.690747ms ago: executing program 5 (id=538):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
sendmmsg$unix(r2, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000100)="a6daa530a1f86169c27fb408804404bb0ef0b992365b3a1a65d176037ea948dff816b4c3ba14b7f135cfb5feb704ac", 0x2f}, {&(0x7f0000000380)="004e05d197782babeabb4d6a033122b175209b03983f3f65f097560345083eac28db2f6d78bd4ed78265739ab56bf14e9532dfcc765cf4ff7214cab5f98febaf4325de844608a5358af4c6b8633ddf38cbcb78c65885b7671ed1ca59d6978c5891bf3d16bd79444db29ae824c14a5c24c19a62debeafa25713e65a5902bb163fec9ec961443a64cdd9c4614472162b8d145c0a4804c92f9dda1f1775c0240bd94dee34d5a10a40b23515967cd0d553c19abb45f642", 0xb5}, {&(0x7f0000000980)="8552bff8913d2657829262116d462be2e6a4925e8f40b134446fd9e4171fc4d3ec98a5f438ed7916a0088bfbf759b749c23909aef75e45fb5c0ae948a86018cdd2567f646d1f1bb00d21ac5cf37b933c416fd602ad752fc2521e2df305cac3a8b7a68b10870298ebefabf60da190e5659a4efab26517863e04ab8ee841be162d763999bb168b08999b36b5f11c23c86909e18d1e50995f689d811588c0", 0x9d}], 0x3, 0x0, 0x0, 0x48}}], 0x1, 0x2014080)

508.910238ms ago: executing program 5 (id=539):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080))

257.851394ms ago: executing program 5 (id=540):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x80001, 0x84)
r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20)

138.173337ms ago: executing program 4 (id=541):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [{0x8, 0x1}, {}], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x3)
getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f00000051c0)=""/47, 0x2f)

112.425767ms ago: executing program 5 (id=542):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0xf7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

0s ago: executing program 4 (id=543):
syz_emit_ethernet(0x66, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@bh}, {@errors_remount}, {@dioread_lock, 0x0}, {@nobarrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5ffc59a8}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@nobarrier}, {@nodioread_nolock}, {@data_writeback}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0xfe, 0x51b, &(0x7f0000001300)="$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")
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@lazytime}, {@noquota}, {@dioread_nolock}, {@dax_always}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a038, &(0x7f0000000280)=ANY=[], 0xb, 0x0, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

 Interface activated: batadv_slave_1
[   72.087916][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.103375][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.115577][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.130779][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.155381][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.164750][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.173596][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.188639][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.198245][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.209080][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.220164][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.237358][ T4187] device veth1_vlan entered promiscuous mode
[   72.253334][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.263502][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.273058][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.283663][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.295834][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.311105][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.370172][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.382640][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.404988][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.412502][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.421370][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.432542][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.451771][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.460946][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.472346][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.480525][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.510090][ T4187] device veth0_macvtap entered promiscuous mode
[   72.527547][ T4189] device veth0_vlan entered promiscuous mode
[   72.542565][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.571025][ T4187] device veth1_macvtap entered promiscuous mode
[   72.592021][ T4189] device veth1_vlan entered promiscuous mode
[   72.651745][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.669573][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.681177][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.700732][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.720007][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.748726][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.756727][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.765193][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.773699][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.786324][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.794860][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.803203][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.812459][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.822217][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.831218][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.840253][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.853947][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.872224][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.882876][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.899231][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.911356][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.935322][ T4189] device veth0_macvtap entered promiscuous mode
[   72.937995][ T4256] Bluetooth: hci3: command 0x040f tx timeout
[   72.955178][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.978640][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.987038][ T4256] Bluetooth: hci2: command 0x040f tx timeout
[   72.993978][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.002809][ T4256] Bluetooth: hci1: command 0x040f tx timeout
[   73.009005][ T4256] Bluetooth: hci4: command 0x040f tx timeout
[   73.017448][ T4189] device veth1_macvtap entered promiscuous mode
[   73.025127][ T4256] Bluetooth: hci0: command 0x040f tx timeout
[   73.045250][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.054008][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.069061][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.080358][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.121472][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.135294][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.167755][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.177477][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.199083][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.210506][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.222067][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.232833][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.243154][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.253682][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.267577][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.283310][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.293942][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.304434][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.315323][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.325837][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.337354][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.349502][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.365720][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.378139][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.387962][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.397325][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.408958][ T1469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.422654][ T1469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.430840][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.441091][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.451642][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.460217][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.469269][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.482775][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.511514][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.520539][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.529454][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.539243][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.636175][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.656569][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.668576][ T4186] device veth0_vlan entered promiscuous mode
[   73.714799][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.722869][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.745349][ T4186] device veth1_vlan entered promiscuous mode
[   73.756077][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.763953][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.818247][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.838473][ T4270] loop3: detected capacity change from 0 to 512
[   73.845591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.860928][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.870634][ T4270] =======================================================
[   73.870634][ T4270] WARNING: The mand mount option has been deprecated and
[   73.870634][ T4270]          and is ignored by this kernel. Remove the mand
[   73.870634][ T4270]          option from the mount to silence this warning.
[   73.870634][ T4270] =======================================================
[   73.923777][ T4186] device veth0_macvtap entered promiscuous mode
[   73.946963][ T4270] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   73.987565][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.999679][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.009089][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.017950][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.027318][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.057247][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.079551][ T4186] device veth1_macvtap entered promiscuous mode
[   74.090228][ T4270] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.4: Allocating blocks 41-42 which overlap fs metadata
[   74.114945][ T4271] device syzkaller1 entered promiscuous mode
[   74.119826][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.124239][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.132714][ T4270] Quota error (device loop3): write_blk: dquota write failed
[   74.143763][ T4270] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[   74.153430][ T4270] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.4: Allocating blocks 41-42 which overlap fs metadata
[   74.172101][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.180680][ T4270] Quota error (device loop3): write_blk: dquota write failed
[   74.188848][ T4270] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   74.199304][ T4270] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.4: Failed to acquire dquot type 1
[   74.214558][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.221818][ T4270] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   74.253229][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.264243][ T4270] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.4: corrupted inode contents
[   74.282611][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.289670][ T4270] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #12: comm syz.3.4: mark_inode_dirty error
[   74.303585][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.310738][ T4270] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.4: corrupted inode contents
[   74.323448][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.330568][ T4270] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.4: mark_inode_dirty error
[   74.357040][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.364000][ T4270] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.4: corrupted inode contents
[   74.392912][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.411587][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.416303][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.435174][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.441761][ T4270] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   74.443314][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.464153][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.473282][ T4270] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.4: corrupted inode contents
[   74.490241][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.505445][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.512021][ T4270] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.4: mark_inode_dirty error
[   74.532946][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.541386][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.554058][ T4270] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   74.562474][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.575646][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.585692][ T4270] EXT4-fs (loop3): Remounting filesystem read-only
[   74.589796][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.596035][ T4270] EXT4-fs (loop3): 1 truncate cleaned up
[   74.606807][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.621848][ T4270] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000020,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,nojournal_checksum,barrier=0x0000000000000003,noauto_da_alloc,journal_ioprio=0x0000000000000005,resgid=0x0000. Quota mode: writeback.
[   74.632374][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.668845][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.704511][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.731188][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.748600][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.760115][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.779067][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.793248][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.811159][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.826333][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.840823][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.861043][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.874695][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.883724][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.923131][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.954249][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.015134][ T4256] Bluetooth: hci1: command 0x0419 tx timeout
[   75.025219][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.033993][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.034903][ T4256] Bluetooth: hci2: command 0x0419 tx timeout
[   75.064824][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.089226][ T4256] Bluetooth: hci3: command 0x0419 tx timeout
[   75.113653][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.132318][ T4256] Bluetooth: hci0: command 0x0419 tx timeout
[   75.157510][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.180282][ T4256] Bluetooth: hci4: command 0x0419 tx timeout
[   75.248877][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.342015][ T4295] loop2: detected capacity change from 0 to 256
[   75.355588][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.363498][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.404296][ T1469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.425417][ T4295] exfat: Unknown parameter 'dmask&u‹xT0000000P000002002'
[   75.473707][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.499974][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.523958][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.532356][ T4303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'.
[   75.553519][ T4295]  nullb0: [CUMANA/ADFS] p1
[   75.554149][ T4295] nullb0: p1 size 3609636590 extends beyond EOD, truncated
[   75.717921][ T4308] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.763572][ T4310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'.
[   76.029616][ T4323] loop2: detected capacity change from 0 to 512
[   76.240298][ T4331] loop0: detected capacity change from 0 to 512
[   76.367014][ T4323] EXT4-fs (loop2): Test dummy encryption mode enabled
[   76.419629][ T4323] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   76.499260][ T4323] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[   76.523017][ T4323] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   76.589033][ T4323] EXT4-fs warning (device loop2): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed
[   76.829578][ T4355] loop2: detected capacity change from 0 to 512
[   76.995490][ T4355] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback.
[   77.005756][ T4175] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   77.048353][ T4355] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.054855][ T4228] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.266056][ T4175] usb 4-1: Using ep0 maxpacket: 32
[   77.384683][ T4175] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[   77.395470][ T4175] usb 4-1: config 0 has no interface number 0
[   77.425212][ T4228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.442261][ T4228] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   77.452944][ T4265] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   77.460896][ T4228] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   77.472132][ T4228] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.486099][ T4228] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[   77.496553][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.564707][ T4175] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   77.579619][ T4175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.590409][ T4175] usb 4-1: Product: syz
[   77.598783][ T4175] usb 4-1: Manufacturer: syz
[   77.603530][ T4175] usb 4-1: SerialNumber: syz
[   77.630260][ T4175] usb 4-1: config 0 descriptor??
[   77.682491][ T4175] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   77.892010][ T4175] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   77.917286][ T4175] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   77.985663][ T4228] gud 1-1:1.0: No supported pixel formats found
[   77.992306][ T4265] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00
[   78.012442][ T4228] gud: probe of 1-1:1.0 failed with error -22
[   78.019447][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.041398][ T4265] usb 5-1: Product: syz
[   78.055963][ T4265] usb 5-1: Manufacturer: syz
[   78.060923][ T4265] usb 5-1: SerialNumber: syz
[   78.115559][ T4265] usb 5-1: NFC: intf ffff888075bed000 id ffffffff8cb636c0
[   78.134957][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   78.149628][ T4265] nfcmrvl 5-1:1.0: NFC: registered with nci successfully
[   78.211092][ T4265] usb 1-1: USB disconnect, device number 2
[   78.331322][ T4228] usb 4-1: USB disconnect, device number 2
[   78.344427][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[   78.373819][ T4228] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   78.395468][ T4228] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   78.408238][ T4228] quatech2 4-1:0.51: device disconnected
[   78.524720][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   78.541960][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   78.552234][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   78.569398][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   78.709268][ T4237] nfcmrvl 5-1:1.0: NFC: send entry, len 4
[   78.725127][    C0] nfcmrvl 5-1:1.0: NFC: urb ffff8881435e5500 status 0 count 0
[   78.765487][ T4230] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   78.779352][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.793309][ T4230] usb 2-1: Product: syz
[   78.800716][ T4230] usb 2-1: Manufacturer: syz
[   78.805914][ T4230] usb 2-1: SerialNumber: syz
[   78.832075][ T4230] usb 2-1: config 0 descriptor??
[   79.114120][ T4230] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[   79.340673][ T4265] usb 2-1: USB disconnect, device number 2
[   79.553690][ T4403] loop0: detected capacity change from 0 to 128
[   80.115020][ T4377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.613606][ T4408] loop0: detected capacity change from 0 to 131072
[   80.659073][ T4408] F2FS-fs (loop0): invalid crc value
[   80.684862][ T4256] usb 5-1: USB disconnect, device number 2
[   80.706939][ T4256] usb 5-1: NFC: intf ffff888075bed000
[   80.729497][ T4408] F2FS-fs (loop0): Found nat_bits in checkpoint
[   80.775190][ T4408] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[   80.793119][ T4408] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   82.137884][ T4437] device hsr0 entered promiscuous mode
[   82.165730][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'.
[   82.202624][ T4428] loop1: detected capacity change from 0 to 40427
[   82.209143][ T4437] device hsr_slave_0 left promiscuous mode
[   82.217254][ T4437] device hsr_slave_1 left promiscuous mode
[   82.274837][ T4428] F2FS-fs (loop1): invalid crc value
[   82.302157][ T4437] device hsr0 left promiscuous mode
[   82.324266][ T4428] F2FS-fs (loop1): Found nat_bits in checkpoint
[   82.543939][ T4428] F2FS-fs (loop1): Start checkpoint disabled!
[   82.589123][ T4428] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   82.718018][ T4445] loop0: detected capacity change from 0 to 256
[   82.733303][ T4433] loop3: detected capacity change from 0 to 32768
[   82.780641][ T4445] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   83.093509][  T155] attempt to access beyond end of device
[   83.093509][  T155] loop1: rw=2049, want=40976, limit=40427
[   83.543414][ T4440] loop4: detected capacity change from 0 to 40427
[   83.626180][ T4440] F2FS-fs (loop4): invalid crc value
[   83.694222][ T4440] F2FS-fs (loop4): Found nat_bits in checkpoint
[   83.884479][ T4440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   83.956779][ T4465] syz.1.75 uses obsolete (PF_INET,SOCK_PACKET)
[   84.053457][ T4186] attempt to access beyond end of device
[   84.053457][ T4186] loop4: rw=2049, want=45104, limit=40427
[   85.087146][ T4501] fuse: Unknown parameter 'defcontext'
[   85.210172][ T4506] sctp: [Deprecated]: syz.0.92 (pid 4506) Use of int in max_burst socket option deprecated.
[   85.210172][ T4506] Use struct sctp_assoc_value instead
[   85.475549][ T4516] loop0: detected capacity change from 0 to 2048
[   85.499445][ T4516] EXT4-fs (loop0): Ignoring removed nobh option
[   85.551347][ T4516] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,usrjquota=,nobh,resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[   85.576165][ T4516] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.627438][   T26] audit: type=1800 audit(1788887515.715:2): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.97" name="file0" dev="loop0" ino=13 res=0 errno=0
[   85.660881][ T4516] fs-verity: sha512 using implementation "sha512-avx2"
[   86.128151][   T26] audit: type=1326 audit(1788887516.215:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.3.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12a6db3159 code=0x0
[   86.194719][ T4256] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   86.351593][ T4534] Format for deleting device is "id" (uint).
[   86.567489][ T4540] netlink: 'syz.4.107': attribute type 29 has an invalid length.
[   86.584937][ T4540] netlink: 'syz.4.107': attribute type 29 has an invalid length.
[   86.602152][ T4540] netlink: 'syz.4.107': attribute type 29 has an invalid length.
[   86.611189][ T4540] netlink: 'syz.4.107': attribute type 29 has an invalid length.
[   86.624603][ T4256] usb 1-1: unable to get BOS descriptor or descriptor too short
[   86.637050][ T4540] netlink: 'syz.4.107': attribute type 29 has an invalid length.
[   86.704585][ T4256] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.724654][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   86.727963][ T4256] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[   86.743874][ T4256] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   86.755642][ T4256] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   86.781520][   T23] cfg80211: failed to load regulatory.db
[   86.802573][ T4542] FAULT_INJECTION: forcing a failure.
[   86.802573][ T4542] name failslab, interval 1, probability 0, space 0, times 1
[   86.860895][ T4542] CPU: 0 PID: 4542 Comm: syz.4.108 Not tainted syzkaller #0
[   86.868262][ T4542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   86.878393][ T4542] Call Trace:
[   86.881709][ T4542]  <TASK>
[   86.884674][ T4542]  dump_stack_lvl+0x188/0x250
[   86.889418][ T4542]  ? show_regs_print_info+0x20/0x20
[   86.894680][ T4542]  ? load_image+0x410/0x410
[   86.899227][ T4542]  ? __might_sleep+0xf0/0xf0
[   86.903850][ T4542]  ? __lock_acquire+0x7b50/0x7b50
[   86.908922][ T4542]  should_fail+0x383/0x4b0
[   86.913387][ T4542]  should_failslab+0x5/0x20
[   86.917932][ T4542]  slab_pre_alloc_hook+0x51/0xc0
[   86.922917][ T4542]  ? do_timer_create+0x1c1/0x1250
[   86.927995][ T4542]  kmem_cache_alloc+0x3d/0x280
[   86.928110][ T4256] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[   86.932801][ T4542]  do_timer_create+0x1c1/0x1250
[   86.932844][ T4542]  ? __ia32_sys_clock_nanosleep_time32+0xa0/0xa0
[   86.945601][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.946743][ T4542]  ? __context_tracking_exit+0x4c/0x80
[   86.946782][ T4542]  __x64_sys_timer_create+0x149/0x1c0
[   86.953583][ T4256] usb 1-1: Product: syz
[   86.961114][ T4542]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   86.961148][ T4542]  ? posix_timer_event+0xf0/0xf0
[   86.961171][ T4542]  ? lock_chain_count+0x20/0x20
[   86.961201][ T4542]  ? lockdep_hardirqs_on+0x94/0x140
[   86.993469][ T4256] usb 1-1: Manufacturer: syz
[   86.997259][ T4542]  do_syscall_64+0x4c/0xa0
[   86.997295][ T4542]  ? clear_bhb_loop+0x30/0x80
[   86.997319][ T4542]  ? clear_bhb_loop+0x30/0x80
[   86.997342][ T4542]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.997392][ T4542] RIP: 0033:0x7f5480fb8159
[   87.015384][ T4256] usb 1-1: SerialNumber: syz
[   87.015782][ T4542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.050358][ T4542] RSP: 002b:00007f547f210028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[   87.058802][ T4542] RAX: ffffffffffffffda RBX: 00007f548123ffa0 RCX: 00007f5480fb8159
[   87.066792][ T4542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffffffffffffffd
[   87.074786][ T4542] RBP: 00007f548104f03b R08: 0000000000000000 R09: 0000000000000000
[   87.082776][ T4542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.090760][ T4542] R13: 00007f5481240038 R14: 00007f548123ffa0 R15: 00007ffdcf125528
[   87.098772][ T4542]  </TASK>
[   87.271304][ T4546] loop3: detected capacity change from 0 to 128
[   87.391278][ T4546] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   87.448222][ T4546] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   87.494860][ T4232] usb 2-1: New USB device found, idVendor=045e, idProduct=028e, bcdDevice= 1.14
[   87.526193][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.534261][ T4232] usb 2-1: Product: syz
[   87.554580][ T4256] usb 1-1: USB disconnect, device number 3
[   87.644405][ T4232] usb 2-1: Manufacturer: syz
[   87.649487][ T4232] usb 2-1: SerialNumber: syz
[   87.791991][ T4232] input: Microsoft X-Box 360 pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5
[   88.058689][ T4552] udevd[4552]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   88.088340][ T4232] usb 2-1: USB disconnect, device number 3
[   88.094886][    C0] xpad 2-1:1.0: xpad_irq_out - usb_submit_urb failed with result -19
[   88.103725][    C0] xpad 2-1:1.0: xpad_irq_in - usb_submit_urb failed with result -19
[   88.153714][ T4232] xpad 2-1:1.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   88.164321][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   88.550405][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.573334][ T4230] usb 5-1: config 1 interface 0 has no altsetting 1
[   88.784875][ T4230] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[   88.798446][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.815529][ T4230] usb 5-1: Product: syz
[   88.824321][ T4230] usb 5-1: Manufacturer: syz
[   88.835723][ T4230] usb 5-1: SerialNumber: syz
[   89.014599][   T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   89.114794][ T4230] dvbdev: DVB: registering new adapter (DEC3000-s)
[   89.145266][ T4230] usb 5-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)...
[   89.320324][ T4579] xt_hashlimit: size too large, truncated to 1048576
[   89.376452][ T4581] FAULT_INJECTION: forcing a failure.
[   89.376452][ T4581] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   89.404714][   T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.424491][ T4581] CPU: 0 PID: 4581 Comm: syz.1.122 Not tainted syzkaller #0
[   89.431861][ T4581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   89.441956][ T4581] Call Trace:
[   89.445274][ T4581]  <TASK>
[   89.448233][ T4581]  dump_stack_lvl+0x188/0x250
[   89.452966][ T4581]  ? show_regs_print_info+0x20/0x20
[   89.458207][ T4581]  ? load_image+0x410/0x410
[   89.462758][ T4581]  ? __lock_acquire+0x7b50/0x7b50
[   89.467835][ T4581]  should_fail+0x383/0x4b0
[   89.472295][ T4581]  _copy_to_iter+0x234/0x1170
[   89.477012][ T4581]  ? memset+0x1e/0x40
[   89.481033][ T4581]  ? iov_iter_init+0x170/0x170
[   89.485837][ T4581]  ? verify_lock_unused+0x140/0x140
[   89.491084][ T4581]  get_random_bytes_user+0x1cd/0x3d0
[   89.496415][ T4581]  ? signal_pending+0xa0/0xa0
[   89.501159][ T4581]  ? memset+0x1e/0x40
[   89.505181][ T4581]  ? import_single_range+0x1aa/0x2a0
[   89.510508][ T4581]  __x64_sys_getrandom+0x1c2/0x2a0
[   89.515666][ T4581]  ? add_disk_randomness+0xd0/0xd0
[   89.520825][ T4581]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   89.526854][ T4581]  ? lock_chain_count+0x20/0x20
[   89.531759][ T4581]  ? lockdep_hardirqs_on+0x94/0x140
[   89.537151][ T4581]  do_syscall_64+0x4c/0xa0
[   89.541608][ T4581]  ? clear_bhb_loop+0x30/0x80
[   89.546325][ T4581]  ? clear_bhb_loop+0x30/0x80
[   89.551047][ T4581]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   89.556988][ T4581] RIP: 0033:0x7f05585dc159
[   89.561446][ T4581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.581089][ T4581] RSP: 002b:00007f0556834028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e
[   89.589547][ T4581] RAX: ffffffffffffffda RBX: 00007f0558863fa0 RCX: 00007f05585dc159
[   89.597585][ T4581] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240
[   89.605606][ T4581] RBP: 00007f055867303b R08: 0000000000000000 R09: 0000000000000000
[   89.613616][ T4581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.621622][ T4581] R13: 00007f0558864038 R14: 00007f0558863fa0 R15: 00007ffe8cb481c8
[   89.629656][ T4581]  </TASK>
[   89.637713][   T13] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   89.662209][ T4230] usb 5-1: USB disconnect, device number 3
[   89.874871][   T13] usb 1-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00
[   89.895580][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.920220][   T13] usb 1-1: Product: syz
[   89.929405][   T13] usb 1-1: Manufacturer: syz
[   89.939693][   T13] usb 1-1: SerialNumber: syz
[   90.298306][   T13] usb 1-1: USB disconnect, device number 4
[   90.344462][ T4230] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   90.689996][ T4596] loop4: detected capacity change from 0 to 512
[   90.740406][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.756082][ T4230] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   90.814168][ T4596] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.128: missing EA_INODE flag
[   90.920500][ T4596] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.128: error while reading EA inode 2 err=-117
[   90.973986][ T4596] EXT4-fs (loop4): 1 orphan inode deleted
[   90.990500][ T4596] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[   91.004782][ T4230] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[   91.013881][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.045225][ T4230] usb 2-1: Product: syz
[   91.049466][ T4230] usb 2-1: Manufacturer: syz
[   91.054104][ T4230] usb 2-1: SerialNumber: syz
[   91.090067][ T4596] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.128: directory missing '.'
[   91.412125][ T4609] loop0: detected capacity change from 0 to 16
[   91.502806][ T4609] cramfs: Error -3 while decompressing!
[   91.516875][ T4609] cramfs: ffffffff9641e088(27)->ffff888056818000(4096)
[   91.530554][ T4609] cramfs: Error -3 while decompressing!
[   91.538831][ T4609] cramfs: ffffffff9641e0a3(16)->ffff888056fe3000(4096)
[   91.551566][ T4609] cramfs: Error -3 while decompressing!
[   91.614042][ T4609] cramfs: ffffffff9641e088(27)->ffff888056818000(4096)
[   91.639342][   T26] audit: type=1800 audit(1788887521.725:4): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="file3" dev="loop0" ino=348 res=0 errno=0
[   91.663843][ T4612] cramfs: Error -3 while decompressing!
[   91.689927][ T4612] cramfs: ffffffff9641e088(27)->ffff888056818000(4096)
[   91.710339][   T26] audit: type=1800 audit(1788887521.795:5): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="file2" dev="loop0" ino=348 res=0 errno=0
[   91.831523][ T4616] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   92.140240][ T4626] loop0: detected capacity change from 0 to 1024
[   92.217304][ T4626] EXT4-fs (loop0): Ignoring removed bh option
[   92.223470][ T4626] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   92.347083][ T4626] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[   92.404411][    C0] usb 2-1: received EP1 urb->status = -71
[   92.505590][ T4626] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   93.007837][ T4636] device batadv_slave_0 entered promiscuous mode
[   93.024447][ T4230] usb 2-1: unable to init card! (ret=-19)
[   93.066959][ T4634] device batadv_slave_0 left promiscuous mode
[   93.076270][ T4230] usb 2-1: USB disconnect, device number 4
[   93.292945][ T4641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.144'.
[   93.453177][ T4639] loop0: detected capacity change from 0 to 4096
[   93.615240][ T4639] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   93.651894][ T4189] syz-executor (4189) used greatest stack depth: 21136 bytes left
[   93.789014][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.002655][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.051155][ T4647] loop1: detected capacity change from 0 to 32768
[   94.088973][ T4647] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.146 (4647)
[   94.196059][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.227162][ T4647] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   94.260575][ T4642] chnl_net:caif_netlink_parms(): no params data found
[   94.271191][ T4647] BTRFS info (device loop1): using free space tree
[   94.289754][ T4647] BTRFS info (device loop1): has skinny extents
[   94.351030][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.569543][ T4651] loop3: detected capacity change from 0 to 32768
[   94.607439][ T4647] BTRFS info (device loop1): enabling ssd optimizations
[   94.710984][ T4642] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.734487][ T4642] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.742596][   T26] audit: type=1800 audit(1788887524.825:6): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.148" name="file1" dev="loop3" ino=4 res=0 errno=0
[   94.785839][ T4642] device bridge_slave_0 entered promiscuous mode
[   94.794761][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   94.833048][   T26] audit: type=1800 audit(1788887524.905:7): pid=4689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.148" name="file1" dev="loop3" ino=4 res=0 errno=0
[   94.881336][ T4642] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.904588][ T4642] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.921492][ T4642] device bridge_slave_1 entered promiscuous mode
[   95.053082][ T4230] usb 1-1: Using ep0 maxpacket: 16
[   95.061403][ T4642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.092384][ T4642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.292731][ T4642] team0: Port device team_slave_0 added
[   95.312313][ T4642] team0: Port device team_slave_1 added
[   95.334901][ T4265] Bluetooth: hci5: command 0x0409 tx timeout
[   95.394779][ T4230] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   95.426954][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.460910][ T4701] loop4: detected capacity change from 0 to 512
[   95.462063][ T4230] usb 1-1: Product: syz
[   95.472157][ T4642] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.480263][ T4230] usb 1-1: Manufacturer: syz
[   95.489772][ T4642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.525622][ T4701] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   95.538791][ T4230] usb 1-1: SerialNumber: syz
[   95.570758][ T4230] usb 1-1: config 0 descriptor??
[   95.645806][ T4642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.720959][ T4701] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[   95.765846][ T4701] Quota error (device loop4): write_blk: dquota write failed
[   95.773764][ T4701] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[   95.792618][ T4701] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.155: Failed to acquire dquot type 0
[   95.811689][ T4701] EXT4-fs (loop4): 1 truncate cleaned up
[   95.817670][ T4701] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback.
[   96.028289][ T4642] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.054561][ T4642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.124769][ T4230] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[   96.147856][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   96.174445][ T4642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.204822][ T4230] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[   96.212947][ T4230] usb 1-1: media controller created
[   96.253827][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   96.364689][ T4230] zl10353_read_register: readreg error (reg=127, ret==0)
[   96.371879][ T4230] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[   96.407655][ T4230] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[   96.461065][ T4230] usb 1-1: USB disconnect, device number 5
[   96.561576][ T4230] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[   96.617865][ T4642] device hsr_slave_0 entered promiscuous mode
[   96.637736][ T4642] device hsr_slave_1 entered promiscuous mode
[   96.662619][ T4642] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.684455][ T4642] Cannot create hsr debugfs directory
[   97.124672][ T4727] loop4: detected capacity change from 0 to 40427
[   97.206275][ T4727] F2FS-fs (loop4): invalid crc value
[   97.260342][ T4727] F2FS-fs (loop4): Found nat_bits in checkpoint
[   97.424441][   T13] Bluetooth: hci5: command 0x041b tx timeout
[   97.441728][ T4642] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   97.470847][ T4766] loop1: detected capacity change from 0 to 64
[   97.506218][ T4727] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   97.528759][ T4735] loop3: detected capacity change from 0 to 40427
[   97.593462][ T4642] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   97.609307][ T4735] F2FS-fs (loop3): invalid crc value
[   97.641758][ T4642] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   97.651393][ T4772] attempt to access beyond end of device
[   97.651393][ T4772] loop1: rw=0, want=1026, limit=64
[   97.677051][ T4735] F2FS-fs (loop3): Found nat_bits in checkpoint
[   97.741099][ T4642] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   97.762328][ T4772] Buffer I/O error on dev loop1, logical block 512, async page read
[   97.765275][ T4766] Trying to free block not in datazone
[   97.847009][  T154] device hsr_slave_0 left promiscuous mode
[   97.853382][ T4772] attempt to access beyond end of device
[   97.853382][ T4772] loop1: rw=0, want=113154, limit=64
[   97.877587][ T4727] attempt to access beyond end of device
[   97.877587][ T4727] loop4: rw=2049, want=45104, limit=40427
[   97.891670][  T154] device hsr_slave_1 left promiscuous mode
[   97.928896][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.948875][ T4735] F2FS-fs (loop3): Start checkpoint disabled!
[   97.968861][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.981658][ T4735] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   98.000788][ T4186] attempt to access beyond end of device
[   98.000788][ T4186] loop4: rw=2049, want=45112, limit=40427
[   98.015695][ T4772] Buffer I/O error on dev loop1, logical block 56576, async page read
[   98.034208][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.053017][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.106666][  T154] device bridge_slave_1 left promiscuous mode
[   98.114758][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.145854][ T4773] attempt to access beyond end of device
[   98.145854][ T4773] loop1: rw=0, want=1026, limit=64
[   98.188798][ T4773] Buffer I/O error on dev loop1, logical block 512, async page read
[   98.248403][ T4773] attempt to access beyond end of device
[   98.248403][ T4773] loop1: rw=0, want=113154, limit=64
[   98.268443][  T154] device bridge_slave_0 left promiscuous mode
[   98.281441][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.308412][ T4773] Buffer I/O error on dev loop1, logical block 56576, async page read
[   98.373973][ T4779] attempt to access beyond end of device
[   98.373973][ T4779] loop1: rw=0, want=1026, limit=64
[   98.399748][ T4779] Buffer I/O error on dev loop1, logical block 512, async page read
[   98.415371][  T154] device veth1_macvtap left promiscuous mode
[   98.432487][  T154] device veth0_macvtap left promiscuous mode
[   98.432487][ T4779] attempt to access beyond end of device
[   98.432487][ T4779] loop1: rw=0, want=113154, limit=64
[   98.461573][  T154] device veth1_vlan left promiscuous mode
[   98.474949][  T154] device veth0_vlan left promiscuous mode
[   98.494038][ T4779] Buffer I/O error on dev loop1, logical block 56576, async page read
[   99.049000][    T9] attempt to access beyond end of device
[   99.049000][    T9] loop3: rw=1, want=55832, limit=40427
[   99.141677][    T9] attempt to access beyond end of device
[   99.141677][    T9] loop3: rw=1, want=57344, limit=40427
[   99.443699][  T154] team0 (unregistering): Port device team_slave_1 removed
[   99.492521][  T154] team0 (unregistering): Port device team_slave_0 removed
[   99.504490][ T4722] Bluetooth: hci5: command 0x040f tx timeout
[   99.558319][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.631596][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.797919][ T4816] vivid-006: disconnect
[   99.808278][ T4814] vivid-006: reconnect
[   99.891821][  T154] bond0 (unregistering): Released all slaves
[  100.164050][ T4826] loop4: detected capacity change from 0 to 64
[  100.170754][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  100.182514][ T4642] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.230721][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.246377][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.289249][ T4642] 8021q: adding VLAN 0 to HW filter on device team0
[  100.367922][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  100.416084][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.434520][ T4230] usb 4-1: Using ep0 maxpacket: 16
[  100.447679][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.454862][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.533187][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  100.554670][ T4230] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  100.563134][ T4230] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  100.586666][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  100.640043][ T4230] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  100.656314][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  100.674913][ T4230] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  100.684655][ T4230] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  100.694193][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.701353][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.713066][ T4230] usb 4-1: config 0 has no interface number 0
[  100.724486][ T4230] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  100.738209][ T4230] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  100.748393][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  100.782450][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  100.791125][ T4230] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  100.805590][ T4839] tun0: tun_chr_ioctl cmd 1074025675
[  100.810947][ T4839] tun0: persist enabled
[  100.824478][ T4230] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  100.839502][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  100.855968][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  100.872563][ T4230] usb 4-1: config 0 interface 125 has no altsetting 0
[  100.889165][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  100.899749][ T4230] usb 4-1: config 0 interface 125 has no altsetting 2
[  100.916762][ T4839] tun0: tun_chr_ioctl cmd 1074025675
[  100.922216][ T4839] tun0: persist enabled
[  100.953280][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  100.962938][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  101.023499][ T4642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  101.068044][ T4642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.101657][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  101.118482][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  101.134716][ T4230] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  101.143883][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.161304][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  101.187259][ T4230] usb 4-1: Product: syz
[  101.191497][ T4230] usb 4-1: Manufacturer: syz
[  101.216805][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  101.225241][ T4230] usb 4-1: SerialNumber: syz
[  101.260670][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  101.275244][ T4230] usb 4-1: config 0 descriptor??
[  101.293582][ T4824] loop0: detected capacity change from 0 to 32768
[  101.327369][ T4230] usb 4-1: selecting invalid altsetting 2
[  101.550410][ T4824] XFS (loop0): Mounting V5 Filesystem
[  101.575318][ T4722] Bluetooth: hci5: command 0x0419 tx timeout
[  101.620516][ T4867] fuse: Bad value for 'fd'
[  101.633139][ T4867] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'gid'
[  101.633139][ T4867] 
[  101.693794][ T4872] vivid-001: disconnect
[  101.703718][ T4872] vivid-001: reconnect
[  101.859584][ T4824] XFS (loop0): Ending clean mount
[  101.936755][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  101.964888][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  101.988998][ T4642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.026043][ T4859] loop1: detected capacity change from 0 to 32768
[  102.100596][ T4859] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.192 (4859)
[  102.145975][ T4722] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  102.155599][ T4859] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  102.165859][ T4859] BTRFS info (device loop1): enabling auto defrag
[  102.172340][ T4859] BTRFS info (device loop1): force clearing of disk cache
[  102.179431][ T4230] parport0: fix this legacy no-device port driver!
[  102.205116][ T4859] BTRFS info (device loop1): ignoring data csums
[  102.216535][ T4824] syz.0.184 (4824) used greatest stack depth: 19568 bytes left
[  102.229333][ T4859] BTRFS info (device loop1): turning on async discard
[  102.253774][ T4859] BTRFS info (device loop1): setting nodatacow, compression disabled
[  102.282490][ T4187] XFS (loop0): Unmounting Filesystem
[  102.297458][ T4859] BTRFS info (device loop1): turning off async discard
[  102.333802][ T4859] BTRFS info (device loop1): disabling free space tree
[  102.375284][ T4859] BTRFS info (device loop1): has skinny extents
[  102.424473][ T4722] usb 5-1: Using ep0 maxpacket: 8
[  102.438614][ T4229] usb 4-1: USB disconnect, device number 3
[  102.594789][ T4722] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  102.613482][ T4722] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  102.645429][ T4722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  102.656364][ T4722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  102.667254][ T4722] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.688170][ T4722] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  102.744118][ T4722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.852924][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  102.881674][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.993015][ T4642] device veth0_vlan entered promiscuous mode
[  103.076106][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  103.094642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  103.150193][ T4722] usb 5-1: usb_control_msg returned -32
[  103.158266][ T4722] usbtmc 5-1:16.0: can't read capabilities
[  103.171274][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.211679][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.269656][ T4642] device veth1_vlan entered promiscuous mode
[  103.432256][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  103.458158][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  103.507756][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  103.526540][ T4933] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  103.545436][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  103.566807][ T4642] device veth0_macvtap entered promiscuous mode
[  103.642667][ T4642] device veth1_macvtap entered promiscuous mode
[  103.692100][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.715096][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.728272][ T4722] usb 5-1: USB disconnect, device number 4
[  103.764543][   T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  103.808900][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.854920][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.883009][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.914467][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.934381][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.965165][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.992893][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.013555][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  104.026052][   T13] usb 1-1: Using ep0 maxpacket: 16
[  104.039290][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  104.063778][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  104.092189][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  104.113907][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.137103][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.171489][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.194819][   T13] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.211756][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.225347][   T13] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.244294][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.257468][   T13] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.281396][   T13] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  104.295659][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.321052][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.329532][ T4934] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  104.337954][ T4642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.364839][   T13] usb 1-1: config 0 descriptor??
[  104.375635][ T4642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.410388][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.438960][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  104.458867][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  104.482148][ T4642] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.502182][ T4642] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.524760][ T4642] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.542846][ T4642] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.716057][ T4934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.734476][ T4934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.779429][ T4934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  104.802818][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.823451][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.838989][ T4934] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  104.865967][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  104.873550][ T4934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.923429][   T13] cougar 0003:060B:500A.0001: unknown main item tag 0x0
[  104.942927][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.951424][   T13] cougar 0003:060B:500A.0001: unknown main item tag 0x0
[  104.962659][ T4934] usb 2-1: config 0 descriptor??
[  104.979935][   T13] cougar 0003:060B:500A.0001: unexpected long global item
[  104.987284][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.990510][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  105.023399][   T13] cougar 0003:060B:500A.0001: parse failed
[  105.037864][   T13] cougar: probe of 0003:060B:500A.0001 failed with error -22
[  105.118223][ T4936] usb 1-1: USB disconnect, device number 6
[  105.313440][    T9] tipc: Subscription rejected, illegal request
[  105.469258][ T4934] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  105.569603][ T4934] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  105.770222][ T5004] loop3: detected capacity change from 0 to 512
[  105.825931][ T5004] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[  105.825931][ T5004] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  105.825931][ T5004] 
[  105.884913][ T4723] usb 2-1: USB disconnect, device number 5
[  105.894713][ T4934] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  105.940701][ T5004] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2761: inode #11: comm syz.3.213: corrupted xattr block 95
[  105.957671][ T5004] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.213: bg 0: block 7: invalid block bitmap
[  105.985629][ T5007] loop5: detected capacity change from 0 to 2048
[  106.048373][ T5004] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  106.060097][ T5000] fido_id[5000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  106.089534][ T5004] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2928: inode #11: comm syz.3.213: corrupted xattr block 95
[  106.106632][ T5007] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  106.190504][ T5007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.199908][ T5004] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117)
[  106.210571][ T5004] EXT4-fs (loop3): 1 orphan inode deleted
[  106.234612][ T5004] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv0,noacl,,errors=continue. Quota mode: none.
[  106.254802][ T4934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.275282][ T4934] usb 5-1: config 0 has no interfaces?
[  106.330465][ T5013] loop0: detected capacity change from 0 to 2048
[  106.376428][ T4934] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  106.401864][ T4934] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  106.430750][ T4934] usb 5-1: Manufacturer: syz
[  106.462484][ T4934] usb 5-1: config 0 descriptor??
[  106.542358][ T5013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.755476][ T4936] usb 5-1: USB disconnect, device number 5
[  107.017007][ T5030] FAULT_INJECTION: forcing a failure.
[  107.017007][ T5030] name failslab, interval 1, probability 0, space 0, times 0
[  107.118293][ T5030] CPU: 1 PID: 5030 Comm: syz.3.221 Not tainted syzkaller #0
[  107.125753][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  107.135845][ T5030] Call Trace:
[  107.139159][ T5030]  <TASK>
[  107.142135][ T5030]  dump_stack_lvl+0x188/0x250
[  107.146873][ T5030]  ? show_regs_print_info+0x20/0x20
[  107.152119][ T5030]  ? load_image+0x410/0x410
[  107.156678][ T5030]  ? __lock_acquire+0x7b50/0x7b50
[  107.161775][ T5030]  should_fail+0x383/0x4b0
[  107.166239][ T5030]  should_failslab+0x5/0x20
[  107.170782][ T5030]  slab_pre_alloc_hook+0x51/0xc0
[  107.175766][ T5030]  ? __alloc_file+0x25/0x240
[  107.180402][ T5030]  kmem_cache_alloc+0x3d/0x280
[  107.185224][ T5030]  __alloc_file+0x25/0x240
[  107.189688][ T5030]  alloc_empty_file+0x90/0x180
[  107.194492][ T5030]  alloc_file+0x5c/0x510
[  107.198779][ T5030]  ? do_raw_spin_unlock+0x11d/0x230
[  107.204025][ T5030]  alloc_file_pseudo+0x180/0x200
[  107.209012][ T5030]  ? alloc_empty_file_noaccount+0x80/0x80
[  107.214781][ T5030]  ? _raw_spin_unlock+0x24/0x40
[  107.219685][ T5030]  __anon_inode_getfd+0x26b/0x3d0
[  107.224760][ T5030]  ? anon_inode_getfd+0x40/0x40
[  107.229658][ T5030]  ? bpf_lsm_capable+0x5/0x10
[  107.234380][ T5030]  ? security_capable+0x85/0xb0
[  107.239292][ T5030]  __se_sys_fanotify_init+0x68c/0x7b0
[  107.244718][ T5030]  do_syscall_64+0x4c/0xa0
[  107.249182][ T5030]  ? clear_bhb_loop+0x30/0x80
[  107.253903][ T5030]  ? clear_bhb_loop+0x30/0x80
[  107.258621][ T5030]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  107.264558][ T5030] RIP: 0033:0x7f12a6db3159
[  107.269012][ T5030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.288654][ T5030] RSP: 002b:00007f12a500b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  107.297132][ T5030] RAX: ffffffffffffffda RBX: 00007f12a703afa0 RCX: 00007f12a6db3159
[  107.305156][ T5030] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 000000000000001a
[  107.313184][ T5030] RBP: 00007f12a6e4a03b R08: 0000000000000000 R09: 0000000000000000
[  107.321283][ T5030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.329295][ T5030] R13: 00007f12a703b038 R14: 00007f12a703afa0 R15: 00007ffde5c59858
[  107.337449][ T5030]  </TASK>
[  107.831838][ T5018] loop1: detected capacity change from 0 to 32768
[  107.921906][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'.
[  107.922964][ T5018] (syz.1.217,5018,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  107.964497][ T4723] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  108.004837][ T5018] (syz.1.217,5018,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  108.086089][ T5025] loop5: detected capacity change from 0 to 40427
[  108.121508][ T5025] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  108.147610][ T5025] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  108.172180][ T5050] team0: Port device team_slave_0 removed
[  108.179288][ T5018] (syz.1.217,5018,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  108.205895][ T5025] F2FS-fs (loop5): invalid crc value
[  108.211899][ T5034] loop0: detected capacity change from 0 to 32768
[  108.255739][ T5018] JBD2: Ignoring recovery information on journal
[  108.291893][   T26] audit: type=1800 audit(1788887538.375:8): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.222" name="file1" dev="loop0" ino=7 res=0 errno=0
[  108.342956][ T5025] F2FS-fs (loop5): Found nat_bits in checkpoint
[  108.384708][ T4723] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  108.392801][ T4723] usb 4-1: config 0 has no interface number 0
[  108.412888][ T4723] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  108.464465][ T4723] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  108.498234][ T4723] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  108.510272][ T5018] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  108.516077][ T4723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.570518][ T4723] usb 4-1: config 0 descriptor??
[  108.605755][ T5044] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  108.661224][ T5025] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  108.685341][ T4723] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  108.702767][ T5025] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  108.932863][ T5018] (syz.1.217,5018,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  108.949301][ T4723] usb 4-1: USB disconnect, device number 4
[  109.008773][ T5074] loop4: detected capacity change from 0 to 256
[  109.043017][ T4642] handle_bad_sector: 3 callbacks suppressed
[  109.043035][ T4642] attempt to access beyond end of device
[  109.043035][ T4642] loop5: rw=2049, want=45104, limit=40427
[  109.084043][ T5018] (syz.1.217,5018,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb68296ec, computed 0xec517776. Applying ECC.
[  109.118216][ T5018] (syz.1.217,5018,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb68296ec, computed 0xccb4c126
[  109.183174][ T5018] (syz.1.217,5018,0):ocfs2_search_chain:1783 ERROR: status = -5
[  109.198041][ T5074] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  109.212662][ T5018] (syz.1.217,5018,0):ocfs2_search_chain:1893 ERROR: status = -5
[  109.250341][ T5018] (syz.1.217,5018,0):ocfs2_claim_suballoc_bits:1997 ERROR: status = -5
[  109.320319][ T5018] (syz.1.217,5018,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  109.338661][ T5018] (syz.1.217,5018,0):__ocfs2_claim_clusters:2387 ERROR: status = -5
[  109.361851][ T5018] (syz.1.217,5018,0):__ocfs2_claim_clusters:2395 ERROR: status = -5
[  109.409505][ T5018] (syz.1.217,5018,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5
[  109.447352][ T5018] (syz.1.217,5018,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5
[  109.482208][ T5018] (syz.1.217,5018,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5
[  109.516914][ T5018] (syz.1.217,5018,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5
[  109.541316][ T5018] (syz.1.217,5018,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5
[  109.550253][ T5018] (syz.1.217,5018,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5
[  109.560702][ T5018] (syz.1.217,5018,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -5
[  109.580153][ T5018] (syz.1.217,5018,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -5
[  109.592058][ T5018] (syz.1.217,5018,0):ocfs2_expand_inline_dir:2857 ERROR: status = -5
[  109.610794][ T5018] (syz.1.217,5018,0):ocfs2_extend_dir:3204 ERROR: status = -5
[  109.635863][ T5018] (syz.1.217,5018,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -5
[  109.725789][ T5018] (syz.1.217,5018,0):ocfs2_mknod:298 ERROR: status = -5
[  109.732845][ T5018] (syz.1.217,5018,0):ocfs2_mknod:502 ERROR: status = -5
[  109.824462][ T5018] (syz.1.217,5018,1):ocfs2_mkdir:659 ERROR: status = -5
[  109.897428][ T5018] syz.1.217 (5018) used greatest stack depth: 18304 bytes left
[  109.906675][ T5092] ip_tables: iptables: counters copy to user failed while replacing table
[  109.972675][ T5098] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  110.173405][ T4188] ocfs2: Unmounting device (7,1) on (node local)
[  110.812229][ T5094] loop0: detected capacity change from 0 to 32768
[  110.843114][ T5097] loop4: detected capacity change from 0 to 32768
[  110.924654][ T5094] JBD2: Ignoring recovery information on journal
[  111.104892][ T5094] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  111.170454][ T5097] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  111.184865][ T5097] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  111.247869][ T5128] loop1: detected capacity change from 0 to 64
[  111.292359][ T5097] JBD2: Ignoring recovery information on journal
[  111.378665][ T4187] ocfs2: Unmounting device (7,0) on (node local)
[  111.390415][ T5128] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  111.542941][ T5097] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  111.649719][ T5128] loop_set_status: loop0 () has still dirty pages (nrpages=1)
[  111.810206][ T4230] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  111.923134][ T5155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.252'.
[  112.071392][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  112.094535][ T4230] usb 6-1: Using ep0 maxpacket: 32
[  112.202602][ T5165] loop1: detected capacity change from 0 to 1024
[  112.271652][ T4230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.304390][ T4230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.350124][ T4230] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  112.400152][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.434063][ T4230] usb 6-1: config 0 descriptor??
[  112.515742][ T4230] hub 6-1:0.0: USB hub found
[  112.545763][    T9] hfsplus: b-tree write err: -5, ino 25
[  112.552735][    T9] hfsplus: b-tree write err: -5, ino 4
[  112.559368][    T9] hfsplus: b-tree write err: -5, ino 2
[  112.567865][    T9] hfsplus: b-tree write err: -5, ino 17
[  112.744720][ T4230] hub 6-1:0.0: 1 port detected
[  112.825056][ T5178] tipc: Started in network mode
[  112.847097][ T5178] tipc: Node identity 7f000001, cluster identity 4711
[  112.880526][ T5178] tipc: Enabled bearer <udp:syz1>, priority 10
[  113.042455][ T5184] CIFS: Attempting to mount \\127.0.0.1\share
[  113.048954][ T4230] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  113.061847][ T4230] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  113.086087][ T5188] netlink: 'syz.4.264': attribute type 39 has an invalid length.
[  113.087561][ T5184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  113.146804][ T5185] loop3: detected capacity change from 0 to 4096
[  113.241579][ T4230] usbhid 6-1:0.0: can't add hid device: -71
[  113.249252][ T4230] usbhid: probe of 6-1:0.0 failed with error -71
[  113.317040][ T4230] usb 6-1: USB disconnect, device number 2
[  113.431475][ T5193] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.591439][ T5195] process 'syz.4.267' launched './file0' with NULL argv: empty string added
[  113.839516][ T5202] loop5: detected capacity change from 0 to 128
[  113.891693][ T5192] loop0: detected capacity change from 0 to 32768
[  113.900381][ T4230] tipc: Node number set to 2130706433
[  113.950963][ T5184] CIFS: VFS: cifs_mount failed w/return code = -112
[  113.993560][ T5202] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  114.005304][ T5202] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.213681][ T5216] loop1: detected capacity change from 0 to 164
[  114.276168][ T5217] loop3: detected capacity change from 0 to 1024
[  114.330821][ T5217] EXT4-fs (loop3): Ignoring removed bh option
[  114.376899][ T5225] input: syz0 as /devices/virtual/input/input6
[  114.405208][ T5216] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  114.430166][ T5217] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,mb_optimize_scan=0x0000000000000000,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  114.454783][ T5216] isofs_fill_super: root inode is not a directory. Corrupted media?
[  115.032496][ T5216] loop1: detected capacity change from 0 to 32768
[  115.094288][ T5216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.273 (5216)
[  115.162552][ T5216] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  115.181833][ T5216] BTRFS info (device loop1): setting nodatacow, compression disabled
[  115.210597][ T5216] BTRFS info (device loop1): turning on flush-on-commit
[  115.264056][ T5216] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  115.337733][ T5216] BTRFS info (device loop1): use lzo compression, level 0
[  115.364712][ T5216] BTRFS info (device loop1): setting nodatasum
[  115.370956][ T5216] BTRFS info (device loop1): use no compression
[  115.404458][ T5216] BTRFS info (device loop1): trying to use backup root at mount time
[  115.412654][ T5216] BTRFS info (device loop1): max_inline at 0
[  115.464687][ T5216] BTRFS info (device loop1): using free space tree
[  115.471276][ T5216] BTRFS info (device loop1): has skinny extents
[  115.951377][  T154] BTRFS warning (device loop1): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  116.018627][ T5216] BTRFS warning (device loop1): couldn't read tree root
[  116.034943][ T4276] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0
[  116.090488][ T5216] BTRFS warning (device loop1): couldn't read tree root
[  116.105387][ T5216] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7
[  116.131550][ T5216] BTRFS warning (device loop1): couldn't read tree root
[  116.184768][ T5216] BTRFS info (device loop1): enabling ssd optimizations
[  116.194839][ T5216] BTRFS info (device loop1): clearing free space tree
[  116.214841][ T5216] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  116.244525][ T5216] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  116.306202][ T4230] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  116.323382][ T5234] loop4: detected capacity change from 0 to 32768
[  116.377467][ T5216] BTRFS info (device loop1): creating free space tree
[  116.402466][ T5216] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  116.425912][ T5234] JBD2: Ignoring recovery information on journal
[  116.446967][ T5216] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  116.574463][ T4230] usb 1-1: Using ep0 maxpacket: 32
[  116.583417][ T5234] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  116.724844][ T4230] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  116.733042][ T4230] usb 1-1: config 0 has no interface number 0
[  116.765182][ T4230] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  116.811085][ T4230] usb 1-1: config 0 interface 85 has no altsetting 0
[  116.826264][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  116.903074][ T5216] BTRFS warning (device loop1): failed to trim 2 block group(s), last error -512
[  116.972808][ T5290] loop5: detected capacity change from 0 to 256
[  116.987343][ T5288] loop3: detected capacity change from 0 to 16
[  117.032785][ T5216] BTRFS warning (device loop1): failed to trim 1 device(s), last error -512
[  117.046711][ T5288] erofs: (device loop3): mounted with root inode @ nid 36.
[  117.064901][ T4230] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  117.081559][ T5288] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 589823 of nid 36
[  117.092202][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 143 @ nid 36
[  117.102117][ T5288] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 585727 of nid 36
[  117.112218][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 142 @ nid 36
[  117.112890][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.121512][ T5288] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 581631 of nid 36
[  117.139624][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 141 @ nid 36
[  117.148867][ T5288] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 577535 of nid 36
[  117.158936][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 140 @ nid 36
[  117.168205][ T5288] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 573439 of nid 36
[  117.178442][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 139 @ nid 36
[  117.187701][ T5288] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 569343 of nid 36
[  117.198515][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 138 @ nid 36
[  117.207770][ T5288] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 565247 of nid 36
[  117.217696][ T4230] usb 1-1: Product: syz
[  117.217892][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 137 @ nid 36
[  117.231177][ T5288] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 561151 of nid 36
[  117.241327][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 136 @ nid 36
[  117.251075][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 111 @ nid 36
[  117.255869][ T4230] usb 1-1: Manufacturer: syz
[  117.260309][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 110 @ nid 36
[  117.274135][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 109 @ nid 36
[  117.284698][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 108 @ nid 36
[  117.293873][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 107 @ nid 36
[  117.303724][ T5288] erofs: (device loop3): z_erofs_readahead: readahead error at page 106 @ nid 36
[  117.313957][ T5288] attempt to access beyond end of device
[  117.313957][ T5288] loop3: rw=524288, want=13478624064, limit=16
[  117.325849][ T5288] attempt to access beyond end of device
[  117.325849][ T5288] loop3: rw=524288, want=13478624072, limit=16
[  117.337656][ T5288] attempt to access beyond end of device
[  117.337656][ T5288] loop3: rw=524288, want=14550774184, limit=16
[  117.349457][ T5288] attempt to access beyond end of device
[  117.349457][ T5288] loop3: rw=524288, want=14550774192, limit=16
[  117.353210][ T4230] usb 1-1: SerialNumber: syz
[  117.361324][ T5288] attempt to access beyond end of device
[  117.361324][ T5288] loop3: rw=524288, want=13716630408, limit=16
[  117.361516][ T5288] attempt to access beyond end of device
[  117.361516][ T5288] loop3: rw=524288, want=13716630416, limit=16
[  117.391685][ T5288] attempt to access beyond end of device
[  117.391685][ T5288] loop3: rw=524288, want=790416, limit=16
[  117.404542][ T5288] attempt to access beyond end of device
[  117.404542][ T5288] loop3: rw=524288, want=790424, limit=16
[  117.415931][ T5288] attempt to access beyond end of device
[  117.415931][ T5288] loop3: rw=524288, want=104, limit=16
[  117.427031][ T5288] attempt to access beyond end of device
[  117.427031][ T5288] loop3: rw=524288, want=112, limit=16
[  117.520105][ T4230] usb 1-1: config 0 descriptor??
[  118.058124][ T5308] loop4: detected capacity change from 0 to 512
[  118.145333][ T4229] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  118.165378][ T5304] loop5: detected capacity change from 0 to 8192
[  118.200213][ T5308] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  118.236058][ T4230] appletouch 1-1:0.85: Geyser mode initialized.
[  118.256550][ T4230] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input7
[  118.256802][ T5304] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  118.284913][ T5304] REISERFS (device loop5): using ordered data mode
[  118.291869][ T5304] reiserfs: using flush barriers
[  118.347262][ T5304] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  118.372864][ T5304] REISERFS (device loop5): checking transaction log (loop5)
[  118.505407][ T4712] usb 1-1: USB disconnect, device number 7
[  118.514540][    C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  118.537314][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.567455][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.581155][ T4229] usb 4-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00
[  118.584755][ T5308] EXT4-fs (loop4): failed to open journal device unknown-block(238,156) -6
[  118.602833][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.608211][ T4712] appletouch 1-1:0.85: input: appletouch disconnected
[  118.618520][ T5304] REISERFS (device loop5): Using tea hash to sort names
[  118.640720][ T5304] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  118.661758][ T4229] usb 4-1: config 0 descriptor??
[  118.933738][ T5303] loop1: detected capacity change from 0 to 32768
[  118.975800][ T5304] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  119.028367][ T5324] loop4: detected capacity change from 0 to 4096
[  119.050559][ T5303] JBD2: Ignoring recovery information on journal
[  119.159891][ T4229] wacom 0003:056A:037B.0003: Unknown device_type for 'HID 056a:037b'. Assuming pen.
[  119.176767][ T4229] wacom 0003:056A:037B.0003: hidraw0: USB HID v20.00 Joystick [HID 056a:037b] on usb-dummy_hcd.3-1/input0
[  119.190382][ T4229] input: Wacom One by Wacom M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:037B.0003/input/input8
[  119.207256][ T5303] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  119.309965][ T5324] ntfs: volume version 3.1.
[  119.415776][   T26] audit: type=1800 audit(1788887549.495:9): pid=5303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.296" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  119.444814][ T4936] usb 4-1: USB disconnect, device number 5
[  119.563025][ T5334] loop0: detected capacity change from 0 to 4096
[  119.581104][ T5332] fido_id[5332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  119.642061][ T5334] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  119.740110][ T4188] ocfs2: Unmounting device (7,1) on (node local)
[  120.234005][   T26] audit: type=1326 audit(1788887550.315:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5347 comm="syz.5.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0516a9159 code=0x0
[  120.394596][ T4713] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  120.610416][ T5336] loop4: detected capacity change from 0 to 32768
[  120.694669][ T4713] usb 4-1: Using ep0 maxpacket: 16
[  120.701057][ T5363] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  120.727066][ T5336] JBD2: Ignoring recovery information on journal
[  120.803377][ T5336] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  120.824657][ T4713] usb 4-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30
[  120.857290][ T4713] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  120.911522][ T4713] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  120.933645][ T4713] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.950632][ T4713] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  120.964079][ T4713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.982226][ T4713] usb 4-1: config 0 descriptor??
[  121.159867][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  121.509896][ T4713] input: HID 0925:8866 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0925:8866.0004/input/input11
[  121.631298][ T4713] smartjoyplus 0003:0925:8866.0004: input,hidraw0: USB HID vd.8b Joystick [HID 0925:8866] on usb-dummy_hcd.3-1/input0
[  121.668981][ T4713] smartjoyplus 0003:0925:8866.0004: no output reports found
[  121.713624][ T4713] usb 4-1: USB disconnect, device number 6
[  122.006203][ T5412] fido_id[5412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  122.160645][ T5427] loop5: detected capacity change from 0 to 256
[  122.205126][ T5427] exfat: Deprecated parameter 'namecase'
[  122.210886][ T5427] exfat: Deprecated parameter 'utf8'
[  122.232897][   T26] audit: type=1326 audit(1788887552.315:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5428 comm="syz.1.331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05585dc159 code=0x0
[  122.269538][ T5427] exfat: Deprecated parameter 'utf8'
[  122.288678][ T5427] exfat: Deprecated parameter 'namecase'
[  122.326758][ T5427] exfat: Deprecated parameter 'namecase'
[  122.341759][   T26] audit: type=1326 audit(1788887552.405:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.0.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1aa928159 code=0x0
[  122.397043][ T5427] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5dda0d1d, utbl_chksum : 0xe619d30d)
[  122.516168][ T5442] netlink: 'syz.3.333': attribute type 3 has an invalid length.
[  122.542990][ T5442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.333'.
[  122.873623][ T5460] loop4: detected capacity change from 0 to 16
[  122.927805][ T5463] loop5: detected capacity change from 0 to 128
[  122.937801][ T5460] erofs: (device loop4): mounted with root inode @ nid 36.
[  122.989643][ T5463] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  123.088570][ T5465] loop3: detected capacity change from 0 to 2048
[  123.226820][ T5465] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  123.288867][ T5477] device batadv_slave_1 entered promiscuous mode
[  123.297230][ T5476] device batadv_slave_1 left promiscuous mode
[  123.421743][ T5482] capability: warning: `syz.0.346' uses deprecated v2 capabilities in a way that may be insecure
[  123.592566][ T5494] loop1: detected capacity change from 0 to 512
[  123.704991][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  123.752145][ T5507] loop0: detected capacity change from 0 to 512
[  123.814294][ T5507] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.352: Invalid inode bitmap blk 4 in block_group 0
[  123.859542][ T5507] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback.
[  124.001530][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'.
[  124.054672][ T5516] loop4: detected capacity change from 0 to 4096
[  124.153475][ T5516] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  124.241757][ T5527] loop3: detected capacity change from 0 to 2048
[  124.322530][ T5527] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  124.401371][ T5537] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.413163][ T5527] handle_bad_sector: 6 callbacks suppressed
[  124.413182][ T5527] attempt to access beyond end of device
[  124.413182][ T5527] loop3: rw=524288, want=33554432, limit=2048
[  124.545124][ T5539] serio: Serial port ptm0
[  124.597866][ T5527] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  124.628541][ T5549] loop5: detected capacity change from 0 to 512
[  124.682168][ T5527] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16)
[  124.699971][ T5527] NILFS (loop3): error -5 truncating bmap (ino=16)
[  124.725383][ T5549] EXT4-fs (loop5): Ignoring removed orlov option
[  124.780302][ T5539] serio: Serial port ptm0
[  124.787074][ T5549] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,init_itable=0x0000000000000007,orlov,,errors=continue. Quota mode: writeback.
[  124.806062][ T5549] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.503546][ T4230] Bluetooth: hci5: command 0x0411 tx timeout
[  126.564230][ T5579] loop4: detected capacity change from 0 to 32768
[  126.660365][ T5579] JBD2: Ignoring recovery information on journal
[  126.846268][ T5579] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  127.004586][ T5579] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  127.103832][ T5579] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  127.120084][ T4713] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  127.128794][ T5636] FAULT_INJECTION: forcing a failure.
[  127.128794][ T5636] name failslab, interval 1, probability 0, space 0, times 0
[  127.142051][ T5636] CPU: 1 PID: 5636 Comm: syz.0.386 Not tainted syzkaller #0
[  127.149394][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  127.159577][ T5636] Call Trace:
[  127.162898][ T5636]  <TASK>
[  127.165871][ T5636]  dump_stack_lvl+0x188/0x250
[  127.170599][ T5636]  ? show_regs_print_info+0x20/0x20
[  127.175856][ T5636]  ? load_image+0x410/0x410
[  127.180465][ T5636]  should_fail+0x383/0x4b0
[  127.184938][ T5636]  should_failslab+0x5/0x20
[  127.189488][ T5636]  slab_pre_alloc_hook+0x51/0xc0
[  127.194468][ T5636]  ? nf_ct_ext_add+0x42e/0x660
[  127.199284][ T5636]  __kmalloc_track_caller+0x69/0x330
[  127.204612][ T5636]  ? nf_ct_ext_add+0x42e/0x660
[  127.209434][ T5636]  krealloc+0x5a/0xf0
[  127.213465][ T5636]  nf_ct_ext_add+0x42e/0x660
[  127.218106][ T5636]  init_conntrack+0x76d/0x1530
[  127.222921][ T5636]  ? get_l4proto+0x670/0x670
[  127.227576][ T5636]  ? early_drop+0x800/0x800
[  127.232124][ T5636]  ? nf_conntrack_find_get+0x640/0x640
[  127.237637][ T5636]  ? __siphash_unaligned+0x286/0x3d0
[  127.242986][ T5636]  nf_conntrack_in+0xd76/0x17b0
[  127.247925][ T5636]  ? nf_ct_pernet+0x240/0x240
[  127.252692][ T5636]  ? __netif_receive_skb_core+0x2f97/0x3670
[  127.258637][ T5636]  ? ipv4_conntrack_defrag+0x284/0x590
[  127.264139][ T5636]  ? ip_sabotage_in+0x53/0x280
[  127.268949][ T5636]  ? rcu_lock_release+0x20/0x20
[  127.273852][ T5636]  nf_hook_slow+0xb9/0x200
[  127.278306][ T5636]  ? ip_rcv_core+0xb30/0xb30
[  127.282938][ T5636]  NF_HOOK+0x1f2/0x390
[  127.287050][ T5636]  ? ip_rcv_core+0xb30/0xb30
[  127.291689][ T5636]  ? ip_local_deliver+0x180/0x180
[  127.296751][ T5636]  ? sock_wfree+0x18c/0x1f0
[  127.301301][ T5636]  ? ip_rcv_core+0xb30/0xb30
[  127.305932][ T5636]  ? ip_rcv_core+0x6a0/0xb30
[  127.310570][ T5636]  ? ip_local_deliver_finish+0x320/0x320
[  127.316239][ T5636]  ? ip_local_deliver_finish+0x320/0x320
[  127.321910][ T5636]  __netif_receive_skb+0xcc/0x290
[  127.326988][ T5636]  ? ktime_get_with_offset+0x2d7/0x320
[  127.332489][ T5636]  netif_receive_skb+0x19e/0x700
[  127.337467][ T5636]  ? __bpf_trace_softirq+0x10/0x10
[  127.342622][ T5636]  ? netif_receive_skb_core+0x210/0x210
[  127.346173][ T5473] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  127.348222][ T5636]  tun_rx_batched+0x606/0x760
[  127.365916][ T5636]  ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[  127.371960][ T5636]  ? local_bh_enable+0x20/0x20
[  127.376763][ T5636]  ? __local_bh_enable_ip+0x136/0x1c0
[  127.382175][ T5636]  ? read_lock_is_recursive+0x10/0x10
[  127.387594][ T5636]  ? __local_bh_enable_ip+0x136/0x1c0
[  127.393011][ T5636]  ? _local_bh_enable+0xa0/0xa0
[  127.397904][ T5636]  ? skb_set_owner_w+0x213/0x340
[  127.402907][ T5636]  tun_get_user+0x25bf/0x3b60
[  127.407659][ T5636]  ? tun_ring_recv+0xc90/0xc90
[  127.412471][ T5636]  ? rcu_lock_release+0x5/0x20
[  127.417282][ T5636]  ? __lock_acquire+0x7b50/0x7b50
[  127.422369][ T5636]  tun_chr_write_iter+0x112/0x1e0
[  127.427442][ T5636]  vfs_write+0x748/0xd70
[  127.431742][ T5636]  ? file_end_write+0x250/0x250
[  127.436647][ T5636]  ? __fget_files+0x402/0x470
[  127.441382][ T5636]  ? __fdget_pos+0x1e2/0x370
[  127.446007][ T5636]  ? ksys_write+0x70/0x260
[  127.450463][ T5636]  ksys_write+0x153/0x260
[  127.454848][ T5636]  ? __ia32_sys_read+0x80/0x80
[  127.459661][ T5636]  ? lockdep_hardirqs_on+0x94/0x140
[  127.464909][ T5636]  do_syscall_64+0x4c/0xa0
[  127.469364][ T5636]  ? clear_bhb_loop+0x30/0x80
[  127.474073][ T5636]  ? clear_bhb_loop+0x30/0x80
[  127.478791][ T5636]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  127.484729][ T5636] RIP: 0033:0x7fa1aa8e898e
[  127.489198][ T5636] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  127.508850][ T5636] RSP: 002b:00007fa1a8b7ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  127.517314][ T5636] RAX: ffffffffffffffda RBX: 00007fa1a8b806c0 RCX: 00007fa1aa8e898e
[  127.525325][ T5636] RDX: 0000000000000036 RSI: 0000200000000400 RDI: 00000000000000c8
[  127.533342][ T5636] RBP: 00007fa1aa9bf03b R08: 0000000000000000 R09: 0000000000000000
[  127.541348][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.548729][ T4713] usb 6-1: Using ep0 maxpacket: 32
[  127.549339][ T5636] R13: 00007fa1aabb0038 R14: 00007fa1aabaffa0 R15: 00007fffbee6b838
[  127.562478][ T5636]  </TASK>
[  127.575644][ T5579] OCFS2: File system is now read-only.
[  127.581448][ T5579] (syz.4.373,5579,0):ocfs2_search_chain:1783 ERROR: status = -30
[  127.596975][ T5579] (syz.4.373,5579,0):ocfs2_search_chain:1893 ERROR: status = -30
[  127.608232][ T5579] (syz.4.373,5579,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  127.622016][ T5579] (syz.4.373,5579,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  127.633577][ T5579] (syz.4.373,5579,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  127.647246][ T5579] (syz.4.373,5579,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  127.673768][ T5579] (syz.4.373,5579,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  127.682952][ T5579] (syz.4.373,5579,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  127.697849][ T5579] (syz.4.373,5579,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  127.707381][ T4713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.718589][ T4713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.729701][ T5579] (syz.4.373,5579,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  127.738817][ T4713] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  127.750983][ T4713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.768611][ T4713] usb 6-1: config 0 descriptor??
[  127.777946][ T5591] XFS (loop1): Mounting V5 Filesystem
[  127.835551][ T4713] hub 6-1:0.0: USB hub found
[  127.843527][ T5579] (syz.4.373,5579,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  127.914549][ T4230] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  127.935251][ T5591] XFS (loop1): Ending clean mount
[  127.981273][ T5579] (syz.4.373,5579,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  128.009818][ T5579] (syz.4.373,5579,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  128.034544][ T4713] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  128.093160][ T5579] (syz.4.373,5579,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  128.153727][ T5579] (syz.4.373,5579,1):ocfs2_lock_allocators:2704 ERROR: status = -30
[  128.165041][ T4230] usb 4-1: Using ep0 maxpacket: 32
[  128.185874][ T4188] XFS (loop1): Unmounting Filesystem
[  128.224659][ T5579] (syz.4.373,5579,1):ocfs2_write_begin_nolock:1747 ERROR: status = -30
[  128.233132][ T5579] (syz.4.373,5579,1):ocfs2_write_begin:1910 ERROR: status = -30
[  128.314460][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.332372][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.353153][ T4230] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  128.373542][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.386492][ T4230] usb 4-1: config 0 descriptor??
[  128.467263][ T4713] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0
[  128.488032][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  128.516344][ T4713] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0
[  128.896384][ T5676] device ip6_vti0 entered promiscuous mode
[  128.912658][ T4230] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  128.986715][ T4938] usb 6-1: USB disconnect, device number 3
[  129.196904][ T4229] usb 4-1: USB disconnect, device number 7
[  129.561826][ T5696] set_capacity_and_notify: 1 callbacks suppressed
[  129.561843][ T5696] loop5: detected capacity change from 0 to 256
[  129.928824][ T5685] loop4: detected capacity change from 0 to 40427
[  129.975843][ T5685] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  130.010921][ T5685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  130.082206][ T5685] F2FS-fs (loop4): invalid crc value
[  130.181608][ T5685] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  130.468818][ T5685] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  130.490926][ T5685] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  130.592054][ T5685] attempt to access beyond end of device
[  130.592054][ T5685] loop4: rw=2049, want=53376, limit=40427
[  130.644582][ T4229] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  130.653628][ T4186] attempt to access beyond end of device
[  130.653628][ T4186] loop4: rw=2049, want=45104, limit=40427
[  130.717779][ T4713] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  130.797875][ T5736] loop3: detected capacity change from 0 to 32768
[  130.869312][ T5736] (syz.3.413,5736,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.894956][ T5736] (syz.3.413,5736,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.938570][ T5736] (syz.3.413,5736,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  130.979679][ T5736] JBD2: Ignoring recovery information on journal
[  131.012405][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.032251][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.042139][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  131.055305][ T4229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  131.064506][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.076130][ T4229] usb 1-1: config 0 descriptor??
[  131.135450][ T4713] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  131.164103][ T4713] usb 2-1: config 0 has no interface number 0
[  131.173139][ T4713] usb 2-1: config 0 interface 41 has no altsetting 0
[  131.199736][ T5736] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  131.214818][ T5739] netlink: 'syz.4.414': attribute type 49 has an invalid length.
[  131.264059][ T5736] (syz.3.413,5736,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  131.328374][ T5736] (syz.3.413,5736,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb68296ec, computed 0xec517776. Applying ECC.
[  131.353714][ T5736] (syz.3.413,5736,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb68296ec, computed 0xccb4c126
[  131.372873][ T5736] (syz.3.413,5736,0):ocfs2_search_chain:1783 ERROR: status = -5
[  131.381326][ T5736] (syz.3.413,5736,0):ocfs2_search_chain:1893 ERROR: status = -5
[  131.402652][ T5736] (syz.3.413,5736,0):ocfs2_claim_suballoc_bits:1997 ERROR: status = -5
[  131.427773][ T5739] device ip6gretap0 entered promiscuous mode
[  131.428730][ T5736] (syz.3.413,5736,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  131.444941][ T4713] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  131.454043][ T4713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.468194][ T5736] (syz.3.413,5736,0):__ocfs2_claim_clusters:2387 ERROR: status = -5
[  131.478068][ T4713] usb 2-1: Product: syz
[  131.487221][ T4713] usb 2-1: Manufacturer: syz
[  131.491884][ T4713] usb 2-1: SerialNumber: syz
[  131.509820][ T5736] (syz.3.413,5736,0):__ocfs2_claim_clusters:2395 ERROR: status = -5
[  131.536661][ T5736] (syz.3.413,5736,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5
[  131.552360][ T4713] usb 2-1: config 0 descriptor??
[  131.558618][ T4229] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x3
[  131.573907][ T5736] (syz.3.413,5736,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5
[  131.583316][ T4229] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  131.613124][ T4229] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  131.624656][ T5736] (syz.3.413,5736,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5
[  131.641710][ T5736] (syz.3.413,5736,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5
[  131.694863][ T5736] (syz.3.413,5736,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5
[  131.703555][ T5736] (syz.3.413,5736,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5
[  131.737777][ T5736] (syz.3.413,5736,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -5
[  131.748655][ T5736] (syz.3.413,5736,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -5
[  131.757867][ T5736] (syz.3.413,5736,0):ocfs2_expand_inline_dir:2857 ERROR: status = -5
[  131.776093][ T5736] (syz.3.413,5736,0):ocfs2_extend_dir:3204 ERROR: status = -5
[  131.795643][ T5736] (syz.3.413,5736,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -5
[  131.813642][ T5736] (syz.3.413,5736,0):ocfs2_mknod:298 ERROR: status = -5
[  131.833407][ T5736] (syz.3.413,5736,0):ocfs2_mknod:502 ERROR: status = -5
[  131.854541][ T5736] (syz.3.413,5736,0):ocfs2_mkdir:659 ERROR: status = -5
[  131.874193][ T4712] usb 1-1: USB disconnect, device number 8
[  131.962350][ T5755] loop5: detected capacity change from 0 to 256
[  131.990793][ T5755] exfat: Deprecated parameter 'utf8'
[  132.014655][ T5755] exfat: Deprecated parameter 'namecase'
[  132.034801][ T4230] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  132.051196][ T5755] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  132.070521][ T4195] ocfs2: Unmounting device (7,3) on (node local)
[  132.248978][ T4713] CoreChips: probe of 2-1:0.41 failed with error -71
[  132.271492][ T4713] usb 2-1: USB disconnect, device number 6
[  132.324523][ T4230] usb 5-1: Using ep0 maxpacket: 16
[  132.366839][ T5763] loop3: detected capacity change from 0 to 64
[  132.427501][   T26] audit: type=1800 audit(1788953098.515:13): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.420" name="file1" dev="loop3" ino=21 res=0 errno=0
[  132.467662][ T5763] attempt to access beyond end of device
[  132.467662][ T5763] loop3: rw=34817, want=164, limit=64
[  132.486950][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.509128][ T5763] attempt to access beyond end of device
[  132.509128][ T5763] loop3: rw=34817, want=168, limit=64
[  132.521686][ T4230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.573392][ T5763] attempt to access beyond end of device
[  132.573392][ T5763] loop3: rw=34817, want=170, limit=64
[  132.630309][ T5763] attempt to access beyond end of device
[  132.630309][ T5763] loop3: rw=34817, want=178, limit=64
[  132.681792][ T5763] attempt to access beyond end of device
[  132.681792][ T5763] loop3: rw=34817, want=550, limit=64
[  132.734719][ T4230] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.763787][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.805387][ T4230] usb 5-1: Product: syz
[  132.809625][ T4230] usb 5-1: Manufacturer: syz
[  132.814247][ T4230] usb 5-1: SerialNumber: syz
[  132.836365][ T5781] input: syz0 as /devices/virtual/input/input12
[  132.867994][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  132.874597][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  133.246024][ T4230] usb 5-1: 0:2 : does not exist
[  133.267907][ T4230] usb 5-1: USB disconnect, device number 6
[  133.492245][ T5798] loop1: detected capacity change from 0 to 32768
[  133.494614][ T1107] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  133.525225][ T4550] udevd[4550]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.598003][ T5798] XFS (loop1): Mounting V5 Filesystem
[  133.718779][ T4230] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  133.757816][ T5814] device-mapper: ioctl: only supply one of name or uuid, cmd(4)
[  133.843477][ T4230] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  133.861606][ T5798] XFS (loop1): Ending clean mount
[  133.914562][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.930590][ T5816] loop4: detected capacity change from 0 to 2048
[  133.947630][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  133.987424][ T1107] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  134.019322][ T1107] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.042021][ T1107] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  134.058343][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.129082][ T5798] XFS (loop1): Quotacheck needed: Please wait.
[  134.178403][ T5826] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.300228][ T5798] XFS (loop1): Quotacheck: Done.
[  134.642102][ T4188] XFS (loop1): Unmounting Filesystem
[  135.077370][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'.
[  135.163885][ T5848] Set syz1 is full, maxelem 256 reached
[  135.264872][ T1107] gud 4-1:1.0: USB-1: Failed to add properties (ret=-71)
[  135.274962][ T1107] gud 4-1:1.0: Failed to get connectors (error=-71)
[  135.306344][ T1107] gud: probe of 4-1:1.0 failed with error -71
[  135.378253][ T1107] usb 4-1: USB disconnect, device number 8
[  135.533333][ T5856] serio: Serial port ptm0
[  135.695373][ T5856] serio: Serial port ptm0
[  135.713296][ T5850] loop4: detected capacity change from 0 to 32768
[  135.793457][ T5850] JBD2: Ignoring recovery information on journal
[  135.913495][ T5850] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  136.068203][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  136.642806][ T5893] serio: Serial port ptm0
[  136.823918][ T5893] serio: Serial port ptm0
[  137.102331][ T5890] loop4: detected capacity change from 0 to 32768
[  137.210942][ T5890] (syz.4.460,5890,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  137.220816][ T5881] loop3: detected capacity change from 0 to 40427
[  137.260590][ T5890] (syz.4.460,5890,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  137.293134][ T5890] (syz.4.460,5890,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  137.324646][ T5890] JBD2: Ignoring recovery information on journal
[  137.354174][ T5881] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff
[  137.397375][ T5881] F2FS-fs (loop3): invalid crc value
[  137.444261][ T5881] F2FS-fs (loop3): Found nat_bits in checkpoint
[  137.533230][ T5890] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  137.692676][ T5900] loop1: detected capacity change from 0 to 32768
[  137.709517][ T5890] (syz.4.460,5890,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  137.759683][ T5881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  137.788500][ T5890] (syz.4.460,5890,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb68296ec, computed 0xec517776. Applying ECC.
[  137.844394][ T5890] (syz.4.460,5890,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb68296ec, computed 0xccb4c126
[  137.883599][ T5900] JBD2: Ignoring recovery information on journal
[  137.922813][ T5881] attempt to access beyond end of device
[  137.922813][ T5881] loop3: rw=2049, want=45112, limit=40427
[  137.954461][ T5890] (syz.4.460,5890,0):ocfs2_search_chain:1783 ERROR: status = -5
[  137.994418][ T5890] (syz.4.460,5890,0):ocfs2_search_chain:1893 ERROR: status = -5
[  138.002152][ T5890] (syz.4.460,5890,0):ocfs2_claim_suballoc_bits:1997 ERROR: status = -5
[  138.015708][ T5900] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  138.109371][ T5890] (syz.4.460,5890,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  138.158621][ T5890] (syz.4.460,5890,0):__ocfs2_claim_clusters:2387 ERROR: status = -5
[  138.198679][ T5890] (syz.4.460,5890,0):__ocfs2_claim_clusters:2395 ERROR: status = -5
[  138.234404][ T5890] (syz.4.460,5890,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5
[  138.243000][ T5890] (syz.4.460,5890,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5
[  138.260134][ T4188] ocfs2: Unmounting device (7,1) on (node local)
[  138.339406][ T5890] (syz.4.460,5890,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5
[  138.361689][ T5890] (syz.4.460,5890,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5
[  138.415907][ T5890] (syz.4.460,5890,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5
[  138.440380][ T5890] (syz.4.460,5890,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5
[  138.484250][ T5890] (syz.4.460,5890,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -5
[  138.538430][ T5890] (syz.4.460,5890,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -5
[  138.578675][ T5890] (syz.4.460,5890,0):ocfs2_expand_inline_dir:2857 ERROR: status = -5
[  138.620466][ T5890] (syz.4.460,5890,0):ocfs2_extend_dir:3204 ERROR: status = -5
[  138.659643][ T5890] (syz.4.460,5890,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -5
[  138.684185][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.482'.
[  138.701335][ T5890] (syz.4.460,5890,0):ocfs2_mknod:298 ERROR: status = -5
[  138.714940][ T5890] (syz.4.460,5890,0):ocfs2_mknod:502 ERROR: status = -5
[  138.756192][ T5890] (syz.4.460,5890,0):ocfs2_mkdir:659 ERROR: status = -5
[  138.888321][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  139.632389][ T5963] loop3: detected capacity change from 0 to 256
[  139.692391][ T5965] loop1: detected capacity change from 0 to 1024
[  139.823493][ T5965] EXT4-fs (loop1): Ignoring removed bh option
[  139.932877][ T5965] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,max_dir_size_kb=0x0000000000000001,nombcache,sysvgroups,noinit_itable,dioread_lock,nogrpid,bh,grpjquota=,,errors=continue. Quota mode: none.
[  140.024656][ T5950] loop5: detected capacity change from 0 to 32768
[  140.059020][ T5950] JBD2: Ignoring recovery information on journal
[  140.087531][ T5950] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  140.248143][ T4642] ocfs2: Unmounting device (7,5) on (node local)
[  140.426764][ T5988] netlink: 148 bytes leftover after parsing attributes in process `syz.4.504'.
[  140.497746][ T5988] netlink: 40 bytes leftover after parsing attributes in process `syz.4.504'.
[  140.565288][ T5992] loop1: detected capacity change from 0 to 128
[  140.650689][ T5992] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.664595][ T5992] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.821158][ T5978] loop3: detected capacity change from 0 to 32768
[  140.889131][ T5978] JBD2: Ignoring recovery information on journal
[  140.974196][ T6001] input: syz0 as /devices/virtual/input/input13
[  141.005103][ T5978] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  141.074680][ T1107] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  141.200909][ T5978] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  141.306640][ T5978] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  141.352915][ T5978] OCFS2: File system is now read-only.
[  141.369531][ T5978] (syz.3.498,5978,0):ocfs2_search_chain:1783 ERROR: status = -30
[  141.383797][ T1107] usb 6-1: Using ep0 maxpacket: 8
[  141.398671][ T5978] (syz.3.498,5978,0):ocfs2_search_chain:1893 ERROR: status = -30
[  141.437192][ T5978] (syz.3.498,5978,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  141.454557][ T5978] (syz.3.498,5978,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  141.463213][ T5978] (syz.3.498,5978,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  141.490825][ T5978] (syz.3.498,5978,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  141.512170][ T5978] (syz.3.498,5978,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  141.521448][ T1107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  141.542747][ T1107] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  141.553572][ T5978] (syz.3.498,5978,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  141.572813][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.589302][ T5978] (syz.3.498,5978,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  141.613284][ T1107] usb 6-1: config 0 descriptor??
[  141.620433][ T5978] (syz.3.498,5978,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  141.640137][ T5978] (syz.3.498,5978,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  141.691611][ T5978] (syz.3.498,5978,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  141.701258][ T5978] (syz.3.498,5978,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  141.714153][ T5978] (syz.3.498,5978,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  141.725301][ T5978] (syz.3.498,5978,0):ocfs2_lock_allocators:2704 ERROR: status = -30
[  141.733460][ T5978] (syz.3.498,5978,0):ocfs2_write_begin_nolock:1747 ERROR: status = -30
[  141.743400][ T5978] (syz.3.498,5978,0):ocfs2_write_begin:1910 ERROR: status = -30
[  141.804542][ T4195] ocfs2: Unmounting device (7,3) on (node local)
[  141.920409][ T1107] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  142.135704][ T1107] usb 6-1: USB disconnect, device number 4
[  142.417572][ T6016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.515'.
[  142.961109][ T6046] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  143.293824][ T6068] loop4: detected capacity change from 0 to 512
[  143.394567][ T6068] EXT4-fs (loop4): Ignoring removed oldalloc option
[  143.517421][ T6068] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.533: invalid block
[  143.551912][ T6068] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.533: invalid indirect mapped block 1024 (level 0)
[  143.602811][ T6068] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.533: bg 0: block 35: padding at end of block bitmap is not set
[  143.693933][ T6068] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  143.749463][ T6068] EXT4-fs (loop4): 1 truncate cleaned up
[  143.776851][ T6068] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,grpjquota=,min_batch_time=0x0000000000000002,,errors=continue. Quota mode: none.
[  144.148224][ T6093] loop4: detected capacity change from 0 to 512
[  144.200066][ T6093] EXT4-fs (loop4): Ignoring removed bh option
[  144.217710][ T6093] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  144.249869][ T6093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[  144.267281][ T6093] EXT4-fs (loop4): orphan cleanup on readonly fs
[  144.294782][ T6093] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.543: attempt to clear invalid blocks 1024 len 1
[  144.347676][ T6093] EXT4-fs (loop4): Remounting filesystem read-only
[  144.361366][ T6093] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.543: bg 0: block 361: padding at end of block bitmap is not set
[  144.379026][ T6093] EXT4-fs (loop4): Remounting filesystem read-only
[  144.386071][ T6093] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  144.395832][ T6093] EXT4-fs (loop4): Remounting filesystem read-only
[  144.402798][ T6093] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.543: invalid indirect mapped block 1811939328 (level 0)
[  144.418445][ T6093] EXT4-fs (loop4): Remounting filesystem read-only
[  144.425417][ T6093] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.543: invalid indirect mapped block 2185560079 (level 1)
[  144.441053][ T6093] EXT4-fs (loop4): Remounting filesystem read-only
[  144.449896][ T6093] EXT4-fs (loop4): 1 truncate cleaned up
[  144.456645][ T6093] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,bh,errors=remount-ro,dioread_lock. Quota mode: none.
[  144.894562][ T6076] netlink: 'syz.1.537': attribute type 1 has an invalid length.
[  144.904054][ T6076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.912034][ T6076] IPv6: NLM_F_CREATE should be set when creating new route
[  191.254581][ T4936] Bluetooth: hci3: command 0x0406 tx timeout
[  191.264539][ T4712] Bluetooth: hci4: command 0x0406 tx timeout
[  191.270629][ T4712] Bluetooth: hci0: command 0x0406 tx timeout
[  191.276945][ T4712] Bluetooth: hci2: command 0x0406 tx timeout
[  194.307179][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  194.313624][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  247.574601][ T4936] Bluetooth: hci5: command 0x0406 tx timeout
[  255.738303][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  255.745105][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  288.374612][   T27] INFO: task syz-executor:4173 blocked for more than 143 seconds.
[  288.382570][   T27]       Not tainted syzkaller #0
[  288.387678][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  288.396578][   T27] task:syz-executor    state:D stack:21616 pid: 4173 ppid:  4172 flags:0x00004002
[  288.405950][   T27] Call Trace:
[  288.409660][   T27]  <TASK>
[  288.412613][   T27]  __schedule+0x11c3/0x4350
[  288.417241][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  288.423253][   T27]  ? lock_chain_count+0x20/0x20
[  288.428502][   T27]  ? lockdep_hardirqs_off+0x70/0x100
[  288.433814][   T27]  ? release_firmware_map_entry+0x190/0x190
[  288.439760][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  288.445773][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  288.451013][   T27]  schedule+0x11b/0x1e0
[  288.455225][   T27]  io_schedule+0x7c/0xd0
[  288.459488][   T27]  bit_wait_io+0xd/0xc0
[  288.463661][   T27]  out_of_line_wait_on_bit+0x173/0x230
[  288.469227][   T27]  ? bit_wait+0xc0/0xc0
[  288.473407][   T27]  ? __wait_on_bit+0x170/0x170
[  288.479838][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  288.485146][   T27]  ? bit_waitqueue+0x30/0x30
[  288.489765][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  288.495412][   T27]  do_get_write_access+0x134/0xe40
[  288.500593][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  288.506885][   T27]  __ext4_journal_get_write_access+0x24d/0x6e0
[  288.513528][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  288.520016][   T27]  ? slab_post_alloc_hook+0x68/0x380
[  288.525570][   T27]  ? __might_sleep+0xf0/0xf0
[  288.530204][   T27]  ext4_reserve_inode_write+0x203/0x2e0
[  288.536865][   T27]  __ext4_mark_inode_dirty+0x136/0x6c0
[  288.542359][   T27]  ext4_dirty_inode+0xbf/0x100
[  288.547396][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  288.553218][   T27]  __mark_inode_dirty+0x2c8/0xc90
[  288.558553][   T27]  generic_update_time+0x1cd/0x1f0
[  288.563685][   T27]  file_update_time+0x3c0/0x440
[  288.568799][   T27]  ? file_remove_privs+0x5d0/0x5d0
[  288.573933][   T27]  ext4_page_mkwrite+0x1bc/0x1250
[  288.579268][   T27]  ? wp_page_shared+0x15b/0x6c0
[  288.584148][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  288.590661][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  288.596659][   T27]  do_page_mkwrite+0x168/0x3c0
[  288.601461][   T27]  wp_page_shared+0x163/0x6c0
[  288.606510][   T27]  handle_mm_fault+0x1fbd/0x4440
[  288.611484][   T27]  ? get_page+0xe0/0xe0
[  288.616567][   T27]  ? vmacache_find+0x238/0x590
[  288.621375][   T27]  ? find_vma+0xd2/0x230
[  288.626011][   T27]  do_user_addr_fault+0x494/0xc90
[  288.631092][   T27]  exc_page_fault+0x60/0x100
[  288.636001][   T27]  ? clear_bhb_loop+0x30/0x80
[  288.640713][   T27]  asm_exc_page_fault+0x22/0x30
[  288.645938][   T27] RIP: 0033:0x7f8a56d106e2
[  288.650399][   T27] RSP: 002b:00007ffd9ebc3930 EFLAGS: 00010202
[  288.656761][   T27] RAX: 00007f8a54d90000 RBX: 000055559328f970 RCX: 0000000000000007
[  288.664975][   T27] RDX: 0000000000000f7b RSI: 0000555593288740 RDI: 0000000000000080
[  288.672970][   T27] RBP: 00007ffd9ebc3e30 R08: 00005555932887f8 R09: 0000000000000086
[  288.681020][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd9ebc3c70
[  288.689105][   T27] R13: 00007ffd9ebc3a60 R14: 585858582e7a7973 R15: 00007ffd9ebc39b0
[  288.698324][   T27]  </TASK>
[  288.701424][   T27] INFO: task syz.0.535:6070 blocked for more than 143 seconds.
[  288.709263][   T27]       Not tainted syzkaller #0
[  288.714216][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  288.723781][   T27] task:syz.0.535       state:D stack:27696 pid: 6070 ppid:  4187 flags:0x00004004
[  288.733258][   T27] Call Trace:
[  288.736617][   T27]  <TASK>
[  288.739574][   T27]  __schedule+0x11c3/0x4350
[  288.744109][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  288.750190][   T27]  ? lock_chain_count+0x20/0x20
[  288.755110][   T27]  ? lockdep_hardirqs_off+0x70/0x100
[  288.760421][   T27]  ? release_firmware_map_entry+0x190/0x190
[  288.766428][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  288.772346][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  288.777917][   T27]  schedule+0x11b/0x1e0
[  288.782112][   T27]  io_schedule+0x7c/0xd0
[  288.786480][   T27]  bit_wait_io+0xd/0xc0
[  288.790653][   T27]  out_of_line_wait_on_bit+0x173/0x230
[  288.796265][   T27]  ? bit_wait+0xc0/0xc0
[  288.800475][   T27]  ? __wait_on_bit+0x170/0x170
[  288.806789][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  288.811836][   T27]  ? bit_waitqueue+0x30/0x30
[  288.816525][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  288.822263][   T27]  do_get_write_access+0x134/0xe40
[  288.827560][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  288.833579][   T27]  __ext4_journal_get_write_access+0x24d/0x6e0
[  288.839829][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  288.846103][   T27]  ? slab_post_alloc_hook+0x68/0x380
[  288.851417][   T27]  ? __might_sleep+0xf0/0xf0
[  288.856246][   T27]  ext4_reserve_inode_write+0x203/0x2e0
[  288.861834][   T27]  __ext4_mark_inode_dirty+0x136/0x6c0
[  288.867407][   T27]  ext4_dirty_inode+0xbf/0x100
[  288.872196][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  288.878083][   T27]  __mark_inode_dirty+0x2c8/0xc90
[  288.883135][   T27]  generic_update_time+0x1cd/0x1f0
[  288.888479][   T27]  file_update_time+0x3c0/0x440
[  288.893369][   T27]  ? file_remove_privs+0x5d0/0x5d0
[  288.898542][   T27]  ? mark_lock+0x94/0x320
[  288.902897][   T27]  ext4_page_mkwrite+0x1bc/0x1250
[  288.908033][   T27]  ? mapping_seek_hole_data+0x1300/0x1300
[  288.913783][   T27]  ? pte_alloc_one+0x287/0x310
[  288.919764][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  288.926911][   T27]  ? count_memcg_event_mm+0x324/0x370
[  288.932316][   T27]  ? remove_device_exclusive_entry+0xac0/0xac0
[  288.938899][   T27]  ? finish_lock_switch+0x12d/0x290
[  288.944136][   T27]  do_page_mkwrite+0x168/0x3c0
[  288.949007][   T27]  handle_mm_fault+0x1e47/0x4440
[  288.954000][   T27]  ? get_page+0xe0/0xe0
[  288.958304][   T27]  ? vmacache_find+0x53c/0x590
[  288.963103][   T27]  ? vmacache_update+0xa0/0x100
[  288.968063][   T27]  ? find_vma+0x1df/0x230
[  288.972416][   T27]  do_user_addr_fault+0x494/0xc90
[  288.977515][   T27]  exc_page_fault+0x60/0x100
[  288.982135][   T27]  asm_exc_page_fault+0x22/0x30
[  288.987241][   T27] RIP: 0033:0x7fa1aa7fc809
[  288.991692][   T27] RSP: 002b:00007fffbee6b880 EFLAGS: 00010202
[  288.998107][   T27] RAX: 0000001b32524000 RBX: 0000000000000000 RCX: 00000000003ffde8
[  289.006392][   T27] RDX: 0000001b32523ffc RSI: 00000000003ffde8 RDI: 00007fa1ab6df700
[  289.014747][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fa1aab9c000
[  289.023512][   T27] R10: 00007fa1ab6df700 R11: 0000000000000000 R12: 0000000000000000
[  289.033058][   T27] R13: 000000000007ffff R14: ffffffff817f400a R15: 00007fa1ab6df720
[  289.041333][   T27]  ? trace_irq_disable_rcuidle+0x1a/0x180
[  289.047187][   T27]  </TASK>
[  289.050250][   T27] INFO: task syz.5.542:6089 blocked for more than 144 seconds.
[  289.058084][   T27]       Not tainted syzkaller #0
[  289.063042][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  289.071809][   T27] task:syz.5.542       state:D stack:26928 pid: 6089 ppid:  4642 flags:0x00004004
[  289.081830][   T27] Call Trace:
[  289.086640][   T27]  <TASK>
[  289.089602][   T27]  __schedule+0x11c3/0x4350
[  289.094134][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  289.100245][   T27]  ? lock_chain_count+0x20/0x20
[  289.105148][   T27]  ? lockdep_hardirqs_off+0x70/0x100
[  289.110432][   T27]  ? release_firmware_map_entry+0x190/0x190
[  289.116408][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  289.122331][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  289.128018][   T27]  schedule+0x11b/0x1e0
[  289.132202][   T27]  io_schedule+0x7c/0xd0
[  289.136519][   T27]  bit_wait_io+0xd/0xc0
[  289.140738][   T27]  out_of_line_wait_on_bit+0x173/0x230
[  289.146282][   T27]  ? bit_wait+0xc0/0xc0
[  289.150492][   T27]  ? __wait_on_bit+0x170/0x170
[  289.155368][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  289.160448][   T27]  ? bit_waitqueue+0x30/0x30
[  289.165122][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  289.170383][   T27]  do_get_write_access+0x134/0xe40
[  289.175734][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  289.181753][   T27]  __ext4_journal_get_write_access+0x24d/0x6e0
[  289.189263][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  289.196884][   T27]  ? slab_post_alloc_hook+0x68/0x380
[  289.202193][   T27]  ? __might_sleep+0xf0/0xf0
[  289.206857][   T27]  ext4_reserve_inode_write+0x203/0x2e0
[  289.212424][   T27]  __ext4_mark_inode_dirty+0x136/0x6c0
[  289.217964][   T27]  ext4_dirty_inode+0xbf/0x100
[  289.222748][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  289.229096][   T27]  __mark_inode_dirty+0x2c8/0xc90
[  289.234160][   T27]  generic_update_time+0x1cd/0x1f0
[  289.239387][   T27]  file_update_time+0x3c0/0x440
[  289.244326][   T27]  ? file_remove_privs+0x5d0/0x5d0
[  289.249474][   T27]  ext4_page_mkwrite+0x1bc/0x1250
[  289.254713][   T27]  ? mapping_seek_hole_data+0x1300/0x1300
[  289.260450][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  289.266741][   T27]  ? count_memcg_event_mm+0x324/0x370
[  289.272141][   T27]  ? remove_device_exclusive_entry+0xac0/0xac0
[  289.278409][   T27]  ? verify_lock_unused+0x140/0x140
[  289.283669][   T27]  do_page_mkwrite+0x168/0x3c0
[  289.288527][   T27]  handle_mm_fault+0x1e47/0x4440
[  289.293493][   T27]  ? get_page+0xe0/0xe0
[  289.297901][   T27]  ? vmacache_find+0x238/0x590
[  289.302715][   T27]  ? find_vma+0xd2/0x230
[  289.307325][   T27]  do_user_addr_fault+0x494/0xc90
[  289.312408][   T27]  exc_page_fault+0x60/0x100
[  289.317268][   T27]  ? clear_bhb_loop+0x30/0x80
[  289.322082][   T27]  asm_exc_page_fault+0x22/0x30
[  289.327126][   T27] RIP: 0033:0x7ff05157df32
[  289.332131][   T27] RSP: 002b:00007ffe64e538e0 EFLAGS: 00010202
[  289.338722][   T27] RAX: 0000000000002008 RBX: 00007ff052460720 RCX: 0000000000000000
[  289.346793][   T27] RDX: 0000001b2ea22000 RSI: 0000000000000008 RDI: 00007ff052460720
[  289.354885][   T27] RBP: 0000000000000071 R08: 00007ff05191b000 R09: 00007ff051931038
[  289.362873][   T27] R10: 0000000000000001 R11: 0000000000000004 R12: ffffffff83e7ab74
[  289.370902][   T27] R13: 00007ff051931038 R14: 0000000000000018 R15: ffffffffffffe000
[  289.378936][   T27]  ? _find_first_zero_bit+0xb4/0xf0
[  289.384156][   T27]  </TASK>
[  289.387234][   T27] INFO: task syz.4.543:6092 blocked for more than 144 seconds.
[  289.394837][   T27]       Not tainted syzkaller #0
[  289.399777][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  289.408708][   T27] task:syz.4.543       state:D stack:27696 pid: 6092 ppid:  4186 flags:0x00004004
[  289.418240][   T27] Call Trace:
[  289.421548][   T27]  <TASK>
[  289.424753][   T27]  __schedule+0x11c3/0x4350
[  289.429321][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  289.435873][   T27]  ? lock_chain_count+0x20/0x20
[  289.440763][   T27]  ? lockdep_hardirqs_off+0x70/0x100
[  289.446192][   T27]  ? release_firmware_map_entry+0x190/0x190
[  289.452118][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  289.458098][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  289.463335][   T27]  schedule+0x11b/0x1e0
[  289.467548][   T27]  io_schedule+0x7c/0xd0
[  289.471811][   T27]  bit_wait_io+0xd/0xc0
[  289.476052][   T27]  out_of_line_wait_on_bit+0x173/0x230
[  289.481559][   T27]  ? bit_wait+0xc0/0xc0
[  289.485812][   T27]  ? __wait_on_bit+0x170/0x170
[  289.490610][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  289.496103][   T27]  ? bit_waitqueue+0x30/0x30
[  289.500734][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  289.508831][   T27]  do_get_write_access+0x134/0xe40
[  289.513988][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  289.520270][   T27]  __ext4_journal_get_write_access+0x24d/0x6e0
[  289.526996][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  289.533181][   T27]  ? slab_post_alloc_hook+0x68/0x380
[  289.538953][   T27]  ? __might_sleep+0xf0/0xf0
[  289.543571][   T27]  ext4_reserve_inode_write+0x203/0x2e0
[  289.549188][   T27]  __ext4_mark_inode_dirty+0x136/0x6c0
[  289.554749][   T27]  ext4_dirty_inode+0xbf/0x100
[  289.559550][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  289.565431][   T27]  __mark_inode_dirty+0x2c8/0xc90
[  289.570480][   T27]  generic_update_time+0x1cd/0x1f0
[  289.575812][   T27]  file_update_time+0x3c0/0x440
[  289.580786][   T27]  ? file_remove_privs+0x5d0/0x5d0
[  289.586229][   T27]  ext4_page_mkwrite+0x1bc/0x1250
[  289.591300][   T27]  ? mapping_seek_hole_data+0x1300/0x1300
[  289.597310][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  289.603575][   T27]  ? count_memcg_event_mm+0x324/0x370
[  289.609017][   T27]  ? remove_device_exclusive_entry+0xac0/0xac0
[  289.615258][   T27]  ? finish_lock_switch+0x12d/0x290
[  289.620494][   T27]  do_page_mkwrite+0x168/0x3c0
[  289.626612][   T27]  handle_mm_fault+0x1e47/0x4440
[  289.631583][   T27]  ? get_page+0xe0/0xe0
[  289.636051][   T27]  ? vmacache_find+0x4f0/0x590
[  289.641299][   T27]  ? vmacache_update+0xa0/0x100
[  289.646409][   T27]  ? find_vma+0x1df/0x230
[  289.650787][   T27]  do_user_addr_fault+0x494/0xc90
[  289.656065][   T27]  exc_page_fault+0x60/0x100
[  289.660697][   T27]  asm_exc_page_fault+0x22/0x30
[  289.665667][   T27] RIP: 0033:0x7f5480e8cf32
[  289.670110][   T27] RSP: 002b:00007ffdcf125580 EFLAGS: 00010202
[  289.676289][   T27] RAX: 0000000000001008 RBX: 00007f5481d6f720 RCX: 0000000000000000
[  289.684358][   T27] RDX: 0000001b32b23000 RSI: 0000000000000008 RDI: 00007f5481d6f720
[  289.692353][   T27] RBP: 0000000000000ea9 R08: 00007f548122a000 R09: 00007f5481240038
[  289.700400][   T27] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff840ade9d
[  289.709039][   T27] R13: 00007f5481240038 R14: 0000000000000142 R15: fffffffffffff000
[  289.717074][   T27]  ? idr_get_free+0x47d/0xa10
[  289.721808][   T27]  </TASK>
[  289.725575][   T27] 
[  289.725575][   T27] Showing all locks held in the system:
[  289.733449][   T27] 1 lock held by khungtaskd/27:
[  289.738439][   T27]  #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  289.748308][   T27] 3 locks held by kworker/u4:4/1469:
[  289.753622][   T27]  #0: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130
[  289.763614][   T27]  #1: ffff8880b9127888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x517/0x810
[  289.775137][   T27]  #2: ffff8880260e8688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260
[  289.785251][   T27] 2 locks held by getty/3947:
[  289.789977][   T27]  #0: ffff88807f01b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  289.799824][   T27]  #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50
[  289.810021][   T27] 3 locks held by syz-executor/4173:
[  289.816104][   T27]  #0: ffff88807b0a0128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90
[  289.826077][   T27]  #1: ffff88814ceae558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250
[  289.836627][   T27]  #2: ffff88814ceb2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  289.846919][   T27] 6 locks held by kworker/u4:6/4275:
[  289.852223][   T27]  #0: ffff8881423c3938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  289.862872][   T27]  #1: ffffc9000326fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  289.874692][   T27]  #2: ffff88814ceae0e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0
[  289.884682][   T27]  #3: ffff88814ceb0c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40
[  289.895369][   T27]  #4: ffff88814ceb2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  289.905135][   T27]  #5: ffff888074b9a060 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50
[  289.915000][   T27] 3 locks held by syz.0.535/6070:
[  289.920030][   T27]  #0: ffff88802beb4728 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90
[  289.930582][   T27]  #1: ffff88814ceae558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250
[  289.940429][   T27]  #2: ffff88814ceb2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  289.951232][   T27] 3 locks held by syz.5.542/6089:
[  289.956339][   T27]  #0: ffff88807cfbb228 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90
[  289.966244][   T27]  #1: ffff88814ceae558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250
[  289.976092][   T27]  #2: ffff88814ceb2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  289.985838][   T27] 3 locks held by syz.4.543/6092:
[  289.990876][   T27]  #0: ffff88802beb4e28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90
[  290.000777][   T27]  #1: ffff88814ceae558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250
[  290.010574][   T27]  #2: ffff88814ceb2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  290.020362][   T27] 
[  290.022691][   T27] =============================================
[  290.022691][   T27] 
[  290.031172][   T27] NMI backtrace for cpu 0
[  290.035530][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  290.042755][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.052824][   T27] Call Trace:
[  290.056131][   T27]  <TASK>
[  290.059091][   T27]  dump_stack_lvl+0x188/0x250
[  290.063810][   T27]  ? show_regs_print_info+0x20/0x20
[  290.069029][   T27]  ? load_image+0x410/0x410
[  290.073553][   T27]  ? nmi_cpu_backtrace+0x1b2/0x3d0
[  290.078682][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  290.083631][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  290.089781][   T27]  ? _printk+0xda/0x130
[  290.093966][   T27]  ? load_image+0x410/0x410
[  290.098470][   T27]  ? load_image+0x410/0x410
[  290.102995][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  290.109065][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  290.115060][   T27]  watchdog+0xe1b/0xe60
[  290.119236][   T27]  kthread+0x42e/0x520
[  290.123328][   T27]  ? hungtask_pm_notify+0x40/0x40
[  290.128349][   T27]  ? kthread_blkcg+0xd0/0xd0
[  290.132950][   T27]  ret_from_fork+0x1f/0x30
[  290.137381][   T27]  </TASK>
[  290.140873][   T27] Sending NMI from CPU 0 to CPUs 1:
[  290.146289][    C1] NMI backtrace for cpu 1
[  290.146298][    C1] CPU: 1 PID: 4276 Comm: kworker/u4:7 Not tainted syzkaller #0
[  290.146314][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.146324][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[  290.146346][    C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x352/0x7c0
[  290.146369][    C1] Code: 8e 0f 01 00 00 4c 8d bb f0 0a 00 00 49 89 dc 49 81 c4 10 0b 00 00 45 31 ed 49 83 fd 31 73 73 4c 89 e0 48 c1 e8 03 0f b6 04 10 <84> c0 0f 85 85 00 00 00 41 8b 47 20 a9 00 00 04 00 74 34 25 00 00
[  290.146382][    C1] RSP: 0018:ffffc9000327f660 EFLAGS: 00000802
[  290.146396][    C1] RAX: 0000000000000000 RBX: ffff888020c45940 RCX: ffffffff815da214
[  290.146408][    C1] RDX: dffffc0000000000 RSI: ffff888020c46428 RDI: ffffffff901ef1c0
[  290.146420][    C1] RBP: ffffc9000327f718 R08: ffffffff901ef1c7 R09: 1ffffffff203de38
[  290.146432][    C1] R10: dffffc0000000000 R11: fffffbfff203de39 R12: ffff888020c464a0
[  290.146444][    C1] R13: 0000000000000002 R14: 1ffff11004188c85 R15: ffff888020c46480
[  290.146456][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  290.146470][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.146481][    C1] CR2: 0000557e8988c660 CR3: 000000002aa9e000 CR4: 00000000003506e0
[  290.146495][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  290.146515][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  290.146525][    C1] Call Trace:
[  290.146529][    C1]  <TASK>
[  290.146546][    C1]  ? lock_chain_count+0x20/0x20
[  290.146563][    C1]  ? kasan_quarantine_put+0x39/0x210
[  290.146578][    C1]  trace_hardirqs_on+0x67/0x80
[  290.146593][    C1]  kasan_quarantine_put+0xd4/0x210
[  290.146607][    C1]  slab_free_freelist_hook+0xec/0x170
[  290.146623][    C1]  ? ieee80211_bss_info_update+0x842/0xa80
[  290.146640][    C1]  kfree+0xef/0x2a0
[  290.146661][    C1]  ieee80211_bss_info_update+0x842/0xa80
[  290.146681][    C1]  ? ieee80211_rx_bss_put+0x60/0x60
[  290.146700][    C1]  ? ieee80211_mandatory_rates+0x1c8/0x230
[  290.146717][    C1]  ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50
[  290.146739][    C1]  ? mark_lock+0x94/0x320
[  290.146752][    C1]  ? ieee80211_ibss_rx_no_sta+0x750/0x750
[  290.146766][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  290.146783][    C1]  ? lock_chain_count+0x20/0x20
[  290.146798][    C1]  ? __rwlock_init+0x140/0x140
[  290.146812][    C1]  ? kcov_remote_start+0x135/0x5e0
[  290.146826][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  290.146844][    C1]  ieee80211_iface_work+0x714/0xc50
[  290.146859][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  290.146876][    C1]  cfg80211_wiphy_work+0x224/0x260
[  290.146892][    C1]  process_one_work+0x867/0xff0
[  290.146912][    C1]  ? worker_detach_from_pool+0x240/0x240
[  290.146926][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  290.146941][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  290.146954][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  290.146969][    C1]  ? wq_worker_running+0x97/0x170
[  290.146983][    C1]  worker_thread+0xad7/0x12a0
[  290.147002][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  290.147019][    C1]  kthread+0x42e/0x520
[  290.147031][    C1]  ? rcu_lock_release+0x20/0x20
[  290.147044][    C1]  ? kthread_blkcg+0xd0/0xd0
[  290.147057][    C1]  ret_from_fork+0x1f/0x30
[  290.147076][    C1]  </TASK>
[  290.148487][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  290.473953][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  290.481142][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.491200][   T27] Call Trace:
[  290.494504][   T27]  <TASK>
[  290.497450][   T27]  dump_stack_lvl+0x188/0x250
[  290.502144][   T27]  ? show_regs_print_info+0x20/0x20
[  290.507347][   T27]  ? load_image+0x410/0x410
[  290.511889][   T27]  panic+0x2f8/0x850
[  290.515816][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  290.521505][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  290.526053][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  290.532238][   T27]  watchdog+0xe5a/0xe60
[  290.536412][   T27]  kthread+0x42e/0x520
[  290.540529][   T27]  ? hungtask_pm_notify+0x40/0x40
[  290.545567][   T27]  ? kthread_blkcg+0xd0/0xd0
[  290.550187][   T27]  ret_from_fork+0x1f/0x30
[  290.554632][   T27]  </TASK>
[  290.558018][   T27] Kernel Offset: disabled
[  290.562371][   T27] Rebooting in 86400 seconds..