last executing test programs:

5m6.294643916s ago: executing program 0 (id=136):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

5m3.916642294s ago: executing program 0 (id=149):
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xff, 0x35a, &(0x7f0000000b00)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xa00}])

5m3.587341095s ago: executing program 0 (id=152):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f000000b800)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@dots}, {@fat=@flush}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {}, {@fat=@fmask={'fmask', 0x3d, 0xffff}}, {@fat=@gid}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7da5}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@dots}]}, 0x1, 0x1fe, &(0x7f0000002380)="$eJzs3bFu01wUAOCT/Gni/GLohoSEZMQAUwU8QREqEiISUlEG2JBgIlO7uCztwEP0FXgvHgB1yoIuCnaakKYhihQbyvctOfa5177HVpwsOUlR+nr7PLKsFe392I9xK3ajHVNnAQDcJOOU4lsqNb0WAKAea3z+f695SQDAlr1+8/bl08Hg4DDPs4iLs2JYDMvXMv/8xeDgUf7T7mzWRVEM/7vMP84XvjtkURTDnfi/yj8p5+eX+W5EDLvx8H6Zn+SevRrkvx6/F++3XTwAAAAAAAAAAAAAAAAAAAAAADTkbuRTS/v77O0t5vtVvtya6w+00L+nE3c61easPVA6raMoAAAAAAAAAAAAAAAAAAAA+Mscn3z6+G40+nA0C3oRMb+ns2TM9UGrOvBag5sP2rHZ9H5V5gYnbVWXaLsF9pff3HWC6Pwpd2cx+Hy+3uC8hvX0V17elCbB8nfBtC3GtdO7EbH67A8ON138OKU0+nLv6Pgk0srBs2dEr9YnEgAAAAAAAAAAAAAAAAAA/LvmfvV9RdbEggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAbP//58EV/esDE4j4lb8dvD0XDuRNVorAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9ePAAAA//9vJiGF")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200)

5m3.282799855s ago: executing program 0 (id=153):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)

5m2.899736907s ago: executing program 0 (id=159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000510000000400000002"], 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp=r1, 0x1}, 0x20)

5m2.287780957s ago: executing program 0 (id=161):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3f0}, &(0x7f00000000c0)=0x8)

5m1.758025995s ago: executing program 32 (id=161):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3f0}, &(0x7f00000000c0)=0x8)

2m32.78009607s ago: executing program 1 (id=1701):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)

2m32.717125582s ago: executing program 1 (id=1703):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0185134372446b63f4a9f1dabf6a0bdcbcd5235f8e78eac207f174028bf01aad", "7c269401476e3e012fa8e66e904dcd37f99b4f81b10e92d3f9f5e798de88bd23ca8e3f2155654fdcc87453025baa6840", "af941fbfeed0bd78a40c117998f3f054c46704735d948e7ea72a8936", {"1a8a905ce8ee8798dfdbf2bae3764e97", "4fc3ca5e160ed750474da90e2a078b59"}}}}}}}}, 0x0)

2m32.667984234s ago: executing program 1 (id=1704):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

2m31.733409474s ago: executing program 1 (id=1716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xf8, 0x7}, {0x2}, {0x8f, 0x7}, {0x5, 0x4}], "21887760c1bf8e5e"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xe, 0x5}, {0x90, 0x4}, {0x7, 0x5}, {0x3, 0x1}], "605cb41ec3094691"}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2m31.601462618s ago: executing program 1 (id=1718):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd082678cb77fd66", 0xf}, {&(0x7f0000000180)="1fd9c3218167f1c0f63c93db76ceda1557978e7263b341bc2127fe3d0378cc666d", 0x21}], 0x2}, 0x20040850)

2m31.442716474s ago: executing program 1 (id=1722):
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00')

2m21.553188428s ago: executing program 4 (id=1833):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x1}}, 0x18)

2m21.162127461s ago: executing program 4 (id=1826):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000500)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000009c0)={0x9, 0x3fffffffc00, 0x5, 0x87f})

2m20.440126745s ago: executing program 4 (id=1827):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x98, 0xffffffff, 0x831a, 0xfe, "90b081ffffff00", 0x2d6, 0x201})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x83)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)

2m20.329131168s ago: executing program 4 (id=1829):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2000002, &(0x7f00000001c0)={[{@shortad}, {@fileset={'fileset', 0x3d, 0x5}}, {@unhide}, {}, {@volume={'volume', 0x3d, 0x401}}, {@gid_ignore}, {@uid_forget}, {@anchor}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {}, {@noadinicb}]}, 0x1, 0xc47, &(0x7f0000001800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2m19.95405224s ago: executing program 4 (id=1832):
r0 = socket$netlink(0x10, 0x3, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x3, r0, 0x0}])

2m19.514288505s ago: executing program 4 (id=1838):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28)

2m19.307880252s ago: executing program 33 (id=1838):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28)

2m16.378843107s ago: executing program 34 (id=1722):
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00')

48.49545889s ago: executing program 6 (id=2742):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x803, 0x4)
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "65758a70c4c1e8cf3779321f39c7041584faecaee3bf0456", "d21ad758343b9538489271d990c6564e89a03928bd77b7360d5051b7b21726e7"}}}}}}, 0x0)

48.380704403s ago: executing program 6 (id=2744):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = dup(r0)
listen(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})

47.435064634s ago: executing program 6 (id=2761):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

47.212762002s ago: executing program 6 (id=2764):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
creat(&(0x7f0000000000)='./file0\x00', 0x80)
mount$bind(&(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)='./file0\x00', 0x0, 0x81001, 0x0)
stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0))

46.220754024s ago: executing program 6 (id=2776):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000001ff0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0)

45.12875517s ago: executing program 6 (id=2783):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x40, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)='Q', 0x29c2d}], 0x1}, 0x0)

44.847543509s ago: executing program 35 (id=2783):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x40, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)='Q', 0x29c2d}], 0x1}, 0x0)

2.575551025s ago: executing program 7 (id=3166):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1ac99de20c1c31842218", 0xa}], 0x1, 0xffff, 0x0, 0x0)
fallocate(r0, 0x3, 0x7fffff, 0x8000c62)

1.438882993s ago: executing program 3 (id=3180):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x202081, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$eJzs3U1rE1sYwPFn8tIk7e1tF5fL5aJwqCCKdGgD7lxYpAUxoLSNYAVhaqcaMk1KJhRSxHYhuHXtoguXIojgzo2I2278BGrdddOdXQRHJjOT5mWMCZK+6P+3aM7MeZ45p3NOWnqamdm99GQlv5wUEU0C7taoRCTqb2/K+fdbn07PvfvL21ZqZmp+Mq1URERuP3gx9rY8dPP1328Ssj16Z3cv/WX71LzIt/n7ElE5WxUcRxlqsVgsu02opZyd15W6YZmGbapcwTZLZb/eWLRMtWwVV1cryigsDQ+ulkzbVkahovJmRZWLqlyqKOOekSsoXdfV8KCgNliBSFud1ikx+3zfcWTPcRwnsSmO44REbwaFuP+a+LXO4jhpGf+OsW2TI9rPnuEw7Duxrscfvx/v/f/5aXfj72wcUrdwSOZuLVybymSmZ5VKiqw8XsuuZb1Xr/7jkOTEElO2Zi8sVMWdIz7R3K8zVzPTE6pmVM6ubPj5G2tZ75fD1HItfydIasiXIH/Sy1fN+XEZPMg3JS0j8o+E5qeDfIk05A/IuTMN+bqMyIe7UhRLltyZ3JD/cFKpK9czLe2nanEAAAAAAAAAAJxEuqo7WL/X6v/qTel6ovaJj3p9yt3txnkB9fX1CRmRavj6/ETo+n5M/o8d4TcOAAAAAMAfxK6s5w3LMkv9KUSfpTo0ERcRtyDyaMztTMcD/uv3uLvWB0SkvSrauYmmQuqi197LWb9j0s8TFRSSPfQwpBBcrJE3qq+CqpSEBUd6mgDjA6FnPlnSpK/zp6kg3QTXrl7qbWJrMbuynuh6arWlV4M9/4XGONrPj+MYVtzbI/UR7Jx1uae3ww8LydYTNb7jHdfq8EPja32JDwAAAMAJ0vCHEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCL16/81/0n/3dw8LLhvf3OV+I+Ib78lW+tz4rnvPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBj6HsAAAD///cNs1U=")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00008700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)

1.438733473s ago: executing program 2 (id=3181):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27)

1.266369489s ago: executing program 2 (id=3183):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073797a3000000000090003"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000)

1.170311892s ago: executing program 7 (id=3184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='}', 0x1}], 0x1, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0x30, 0x4048080}}], 0x1, 0x4)

1.085188324s ago: executing program 2 (id=3186):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010094, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=0x0], 0x1, 0x6fd, &(0x7f0000000700)="$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")
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x8, 0x10001}, {0x6, 0x800}]}, 0x14, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x1}}, 0x20)

1.002265677s ago: executing program 3 (id=3187):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0x188, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2}}, @TCA_U32_ACT={0x170, 0x7, [@m_csum={0xd8, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffb}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4, 0x1, 0x8, 0x928}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x7a, 0x10000000, 0x5, 0x3}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x0, 0x1, 0x3, 0x3}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x430800, 0x4, 0x7, 0x4}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x4, 0x9, 0xb}, 0x77}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x3, 0x2, 0x2}}}]}, {0x21, 0x6, "59b69513e97e708c0dc836f724775dbb59b2f21e013426759c817a1bd7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x91}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

845.807682ms ago: executing program 5 (id=3189):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INIT(r0, 0x0, 0x0)

835.004223ms ago: executing program 2 (id=3190):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)

796.140564ms ago: executing program 3 (id=3191):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x0)

646.321149ms ago: executing program 5 (id=3192):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

640.860619ms ago: executing program 2 (id=3193):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x0})

608.74448ms ago: executing program 3 (id=3194):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xc2, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)

575.823781ms ago: executing program 7 (id=3195):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x8000})
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)

473.700765ms ago: executing program 5 (id=3196):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

434.072456ms ago: executing program 3 (id=3197):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

372.390978ms ago: executing program 7 (id=3198):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

313.98959ms ago: executing program 5 (id=3199):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)="9ccd41dcbda6f98c95af73b4c5137ce194002fac5fd0c1b6dc52e0dca92d82b395e4d17fd681f802b920e7ec65f7a39318669e9e7cb7da3407", 0x39}, {&(0x7f00000004c0)}, {0x0}, {0x0}], 0x4, 0x8)
r2 = socket$netlink(0x10, 0x3, 0x9)
splice(r0, 0x0, r2, 0x0, 0xd, 0xf)

291.63785ms ago: executing program 3 (id=3200):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYBLOB="2a076485643a3f606980fb5f89926abec5605cca8644fdac09e9d7566a6a53f47dc4cb0ef3e8acf3d06151260c48a45a44751369a86e86ea9ccbb637"])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

246.496202ms ago: executing program 5 (id=3201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x34, r1, 0x101, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffff}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x20004800)

150.322665ms ago: executing program 7 (id=3202):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x3fd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="0610", 0x2}], 0x1}}], 0x2, 0x40)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c)

124.244256ms ago: executing program 5 (id=3203):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

85.922977ms ago: executing program 7 (id=3204):
io_setup(0x6, &(0x7f0000000540)=<r0=>0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}])

0s ago: executing program 2 (id=3205):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

family 0 port 6081 - 0
[  257.757492][ T5767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.771024][T10781] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.839870][   T23] usb 4-1: Using ep0 maxpacket: 16
[  257.851256][   T23] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.866041][   T23] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.876525][   T23] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  257.889873][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[  257.896630][   T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  257.929780][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.954811][   T23] usb 4-1: config 0 descriptor??
[  258.015573][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.037663][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.094383][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.104578][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.370213][T10858] chnl_net:caif_netlink_parms(): no params data found
[  258.599140][ T5862] usb 4-1: USB disconnect, device number 15
[  258.691728][T10858] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.699009][T10858] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.706661][T10858] bridge_slave_0: entered allmulticast mode
[  258.714139][T10858] bridge_slave_0: entered promiscuous mode
[  258.723104][T10858] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.730893][T10858] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.738149][T10858] bridge_slave_1: entered allmulticast mode
[  258.755937][T10858] bridge_slave_1: entered promiscuous mode
[  258.865393][T10858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.899286][T10858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.966327][T10858] team0: Port device team_slave_0 added
[  258.979660][ T5084] Bluetooth: hci2: command tx timeout
[  259.025523][T10858] team0: Port device team_slave_1 added
[  259.117558][T10858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.140490][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.207699][T10858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.298197][T10858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.348026][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.429621][T10858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.608269][T10880] loop3: detected capacity change from 0 to 256
[  259.625838][T10858] hsr_slave_0: entered promiscuous mode
[  259.640641][T10880] exfat: Deprecated parameter 'utf8'
[  259.662654][T10858] hsr_slave_1: entered promiscuous mode
[  259.692891][T10880] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  259.772689][T10858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.781269][T10858] Cannot create hsr debugfs directory
[  259.860396][ T5084] Bluetooth: hci4: command tx timeout
[  260.335382][T10858] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  260.425004][T10858] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  260.429131][T10882] loop5: detected capacity change from 0 to 32768
[  260.452174][T10882] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1877 (10882)
[  260.470340][T10858] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  260.484613][T10858] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  260.498851][T10882] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  260.531447][T10882] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  260.569723][T10882] BTRFS info (device loop5): using free space tree
[  260.681107][T10882] BTRFS info (device loop5): enabling ssd optimizations
[  260.692051][T10882] BTRFS info (device loop5): auto enabling async discard
[  260.727839][T10858] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.851873][T10858] 8021q: adding VLAN 0 to HW filter on device team0
[  260.884810][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.892019][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.958242][T10781] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  260.982322][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.989530][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.069600][ T5084] Bluetooth: hci2: command tx timeout
[  261.088212][T10858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.175435][T10858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.611684][T10932] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1894'.
[  261.939583][ T5767] Bluetooth: hci4: command tx timeout
[  261.955491][T10858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.395210][T10956] loop5: detected capacity change from 0 to 512
[  262.472452][T10956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.498809][T10956] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.640854][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1903'.
[  262.656936][T10858] veth0_vlan: entered promiscuous mode
[  262.668638][T10781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.688400][T10858] veth1_vlan: entered promiscuous mode
[  262.771360][T10858] veth0_macvtap: entered promiscuous mode
[  262.817523][T10858] veth1_macvtap: entered promiscuous mode
[  262.881518][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.896708][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.907537][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.928116][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.938950][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.952239][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.963609][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.976642][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.991199][T10858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.017198][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.030959][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.043574][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.074524][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.085047][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.104680][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.125567][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.139831][ T5767] Bluetooth: hci2: command tx timeout
[  263.146283][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.156960][T10858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.176563][T10858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.197051][T10858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.258211][T10858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.269612][T10858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.279193][T10858] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.288126][T10858] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.454593][ T1303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.481779][ T1303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.536071][ T1303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.546805][ T1303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.020772][ T5767] Bluetooth: hci4: command tx timeout
[  264.112521][T11002] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1921'.
[  264.296693][T11009] loop5: detected capacity change from 0 to 512
[  264.361986][T11009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  264.400069][T11009] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.566036][T11015] program syz.3.1926 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  264.618434][T10781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  264.682548][   T28] audit: type=1326 audit(2000000380.339:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11018 comm="syz.3.1928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc9399c819 code=0x0
[  264.971836][T11000] loop6: detected capacity change from 0 to 40427
[  264.998744][T11000] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff
[  265.011320][T11000] F2FS-fs (loop6): invalid crc value
[  265.041286][T11000] F2FS-fs (loop6): Found nat_bits in checkpoint
[  265.135159][T11000] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  265.202499][T11033] loop5: detected capacity change from 0 to 164
[  265.269368][T10858] syz-executor: attempt to access beyond end of device
[  265.269368][T10858] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  265.295597][T10858] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  265.380928][T11035] bridge0: port 3(ip6gretap0) entered blocking state
[  265.387735][T11035] bridge0: port 3(ip6gretap0) entered disabled state
[  265.407288][T11035] ip6gretap0: entered allmulticast mode
[  265.414889][T11035] ip6gretap0: entered promiscuous mode
[  265.421598][T11035] bridge0: port 3(ip6gretap0) entered blocking state
[  265.429922][T11035] bridge0: port 3(ip6gretap0) entered forwarding state
[  265.561809][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1935'.
[  266.099903][ T5767] Bluetooth: hci4: command tx timeout
[  266.495956][T11067] loop5: detected capacity change from 0 to 256
[  266.516842][T11067] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  266.594973][T11071] loop6: detected capacity change from 0 to 128
[  266.669443][T11071] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  266.701797][T11071] hpfs: filesystem error: improperly stopped
[  266.722063][T11071] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  266.739864][T11071] hpfs: You really don't want any checks? You are crazy...
[  266.759613][T11071] hpfs: hpfs_map_sector(): read error
[  266.775271][T11071] hpfs: code page support is disabled
[  266.789648][T11071] hpfs: hpfs_map_4sectors(): unaligned read
[  266.795921][T11071] hpfs: hpfs_map_4sectors(): unaligned read
[  266.822537][T11071] hpfs: filesystem error: unable to find root dir
[  266.890190][T11071] hpfs: hpfs_map_4sectors(): unaligned read
[  266.919157][T11071] hpfs: hpfs_map_sector(): read error
[  266.984327][T11080] loop3: detected capacity change from 0 to 512
[  267.042615][T11080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.108363][T11080] ext4 filesystem being mounted at /473/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.307203][T11080] EXT4-fs error (device loop3): ext4_get_first_dir_block:3584: inode #12: comm syz.3.1954: Attempting to read directory block (0) that is past i_size (3)
[  267.328589][T11080] EXT4-fs (loop3): Remounting filesystem read-only
[  267.471056][ T1302] block nbd1: Possible stuck request ffff888021ef8000: control (read@0,1024B). Runtime 90 seconds
[  267.477684][T11101] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1963'.
[  267.482505][ T1302] block nbd1: Possible stuck request ffff888021ef8200: control (read@1024,1024B). Runtime 90 seconds
[  267.502339][ T1302] block nbd1: Possible stuck request ffff888021ef8400: control (read@2048,1024B). Runtime 90 seconds
[  267.513703][ T1302] block nbd1: Possible stuck request ffff888021ef8600: control (read@3072,1024B). Runtime 90 seconds
[  267.919698][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1970'.
[  267.938478][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.956114][ T1303] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  267.982114][ T1303] Quota error (device loop3): write_blk: dquota write failed
[  268.009487][ T1303] Quota error (device loop3): free_dqentry: Can't write quota data block 5
[  268.614766][T11143] netlink: 'syz.2.1984': attribute type 30 has an invalid length.
[  268.628756][T11143] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.638398][T11143] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.647799][T11143] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.656632][T11143] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.663520][ T5836] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  268.678662][T11143] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.688142][T11143] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.697724][T11143] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.707399][T11143] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.855567][ T5836] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  268.879548][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  268.887200][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.919118][ T5836] usb 7-1: config 0 descriptor??
[  269.081604][   T23] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  269.099573][   T23] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  269.129458][   T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  269.148745][   T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  269.169864][   T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  269.185264][   T23] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  269.194984][   T23] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  269.203411][   T23] usb 6-1: Product: syz
[  269.207879][   T23] usb 6-1: Manufacturer: syz
[  269.246638][   T23] cdc_wdm 6-1:1.0: skipping garbage
[  269.252453][T11146] loop3: detected capacity change from 0 to 32768
[  269.260126][   T23] cdc_wdm 6-1:1.0: skipping garbage
[  269.269264][   T23] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  269.308755][   T23] cdc_wdm 6-1:1.0: Unknown control protocol
[  269.366722][T11153] ea_get: invalid extended attribute
[  269.389480][T11153] ffff88805d085670: 04 00 00 00                                      ....
[  269.438926][ T5836] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2
[  269.476845][ T5836] [drm] Initialized udl on minor 2
[  269.747379][    C1] cdc_wdm 6-1:1.0: Unexpected error -71
[  269.757168][    C1] wdm_int_callback: 148 callbacks suppressed
[  269.757196][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  269.769836][    C1] wdm_int_callback: 148 callbacks suppressed
[  269.769856][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  269.782278][    C1] vkms_vblank_simulate: vblank timer overrun
[  269.788791][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  269.795449][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  269.802808][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  269.809449][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  269.816406][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  269.823055][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  269.831318][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  269.837952][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  269.846846][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  269.849034][ T1186] usb 6-1: USB disconnect, device number 2
[  269.853465][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  269.853485][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  269.861185][ T5836] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  269.908705][ T5836] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  269.928185][   T23] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  269.945177][ T5836] usb 7-1: USB disconnect, device number 2
[  269.964937][   T23] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  271.249141][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2008'.
[  271.251265][ T5810] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  271.258327][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2008'.
[  271.284238][ T1186] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  271.414691][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2010'.
[  271.443915][ T5810] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.454562][ T5810] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  271.464059][ T5810] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  271.482065][ T5810] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  271.493811][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.502901][ T5810] usb 7-1: Product: syz
[  271.508036][ T5810] usb 7-1: Manufacturer: syz
[  271.515338][ T1186] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  271.525377][ T5810] usb 7-1: SerialNumber: syz
[  271.530310][ T1186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.543304][ T1186] usb 4-1: Product: syz
[  271.547577][ T1186] usb 4-1: Manufacturer: syz
[  271.555313][ T1186] usb 4-1: SerialNumber: syz
[  271.561620][ T5810] cdc_mbim 7-1:1.0: skipping garbage
[  271.576413][ T5810] cdc_mbim 7-1:1.0: CDC Union missing and no IAD found
[  271.587152][ T5810] cdc_mbim 7-1:1.0: bind() failure
[  271.599246][ T1186] usb 4-1: config 0 descriptor??
[  271.647007][T11206] program syz.5.2012 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  271.712288][T11208] loop5: detected capacity change from 0 to 512
[  271.742915][T11208] EXT4-fs (loop5): 1 truncate cleaned up
[  271.749362][T11208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.815880][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2002'.
[  271.841986][   T28] audit: type=1800 audit(2000000387.499:31): pid=11208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2013" name="file1" dev="loop5" ino=15 res=0 errno=0
[  271.861099][ T5810] usb 7-1: USB disconnect, device number 3
[  271.862413][    C1] vkms_vblank_simulate: vblank timer overrun
[  272.000883][T10781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.055179][ T1186] usb 4-1: Firmware: major: 50, minor: 195, hardware type: RZUSB (3)
[  272.196609][T11216] loop5: detected capacity change from 0 to 8192
[  272.268133][ T1186] usb 4-1: failed to fetch extended address, random address set
[  272.371746][ T1186] usb 4-1: USB disconnect, device number 16
[  272.545687][T11226] program syz.6.2018 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.555431][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'.
[  272.667509][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'.
[  272.795510][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'.
[  273.131466][T11240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.204710][T11238] loop5: detected capacity change from 0 to 32768
[  273.257069][T11240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.370638][T11240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.476592][T11240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.704977][T11240] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.757717][T11240] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.810779][T11240] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.848984][T11240] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.746848][   T28] audit: type=1326 audit(2000000390.399:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11266 comm="syz.3.2035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc9399c819 code=0x0
[  274.827143][T11269] loop6: detected capacity change from 0 to 2048
[  274.839702][ T5836] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  274.873956][T11269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.040246][ T5836] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  275.049949][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'.
[  275.061538][ T5836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  275.074165][ T5836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  275.100786][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0
[  275.118316][ T5836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  275.143204][ T5836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  275.157556][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0
[  275.167259][ T5836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  275.176730][ T5836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  275.188069][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0
[  275.202804][ T5836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  275.212651][ T5836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  275.224044][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0
[  275.233068][ T5836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  275.242397][ T5836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  275.253913][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0
[  275.262957][ T5836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  275.272309][ T5836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  275.283741][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0
[  275.292236][ T5836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  275.301675][ T5836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  275.313228][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0
[  275.321767][ T5836] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  275.331186][ T5836] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  275.342558][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0
[  275.353294][ T5836] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  275.364769][ T5836] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  275.373763][ T5836] usb 6-1: Product: syz
[  275.378082][ T5836] usb 6-1: Manufacturer: syz
[  275.383268][ T5836] usb 6-1: SerialNumber: syz
[  275.394423][ T5836] usb 6-1: config 0 descriptor??
[  275.408824][ T5836] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  275.476487][T11276] loop6: detected capacity change from 0 to 32768
[  275.506003][T11276] JBD2: Ignoring recovery information on journal
[  275.542901][T11276] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  275.853859][ T5836] usb 6-1: USB disconnect, device number 3
[  275.870769][ T5836] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  275.915720][T10858] ocfs2: Unmounting device (7,6) on (node local)
[  276.997244][T11292] loop3: detected capacity change from 0 to 32768
[  277.034482][T11292] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  277.084768][T11292] XFS (loop3): Ending clean mount
[  277.107916][T11308] loop6: detected capacity change from 0 to 4096
[  277.138001][T11292] XFS (loop3): Quotacheck needed: Please wait.
[  277.178457][T11308] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  277.232073][T11292] XFS (loop3): Quotacheck: Done.
[  277.350487][ T5766] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  277.829000][T11327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.062116][T11327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.194123][T11327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.314904][T11327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.519047][T11327] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.570120][T11327] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.627481][T11327] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.665128][T11327] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.767168][T11358] IPv6: NLM_F_CREATE should be specified when creating new route
[  279.203745][T11376] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  279.516624][T11380] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.727351][T11380] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.946806][T11380] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.280401][T11380] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.629531][ T5807] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  280.647837][T11380] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.721638][T11380] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.765738][T11380] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.822796][T11380] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.878773][ T5807] usb 4-1: unable to get BOS descriptor or descriptor too short
[  280.902418][ T5807] usb 4-1: not running at top speed; connect to a high speed hub
[  280.947608][ T5807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.985247][ T5807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  281.013810][ T5807] usb 4-1: string descriptor 0 read error: -22
[  281.039792][ T5807] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  281.059799][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.085462][ T5807] usb 4-1: 0:2 : does not exist
[  281.132207][T11401] loop5: detected capacity change from 0 to 512
[  281.176173][T11401] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.2095: corrupted in-inode xattr: e_value out of bounds
[  281.199822][T11401] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.2095: couldn't read orphan inode 15 (err -117)
[  281.216846][T11401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.436360][T10781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.871665][T11411] loop6: detected capacity change from 0 to 32768
[  281.917072][T11411] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.924515][ T5807] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  281.943645][ T5807] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  282.033726][ T5807] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  282.083744][ T5807] usb 4-1: USB disconnect, device number 17
[  282.112563][T11411] XFS (loop6): Ending clean mount
[  282.326056][T10858] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  282.949468][ T5807] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  283.149592][ T5807] usb 4-1: Using ep0 maxpacket: 16
[  283.170188][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  283.208674][ T5807] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  283.223887][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.257069][ T5807] usb 4-1: config 0 descriptor??
[  283.453404][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2118'.
[  283.641951][T11456] loop6: detected capacity change from 0 to 32768
[  283.704827][ T5807] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  283.730358][ T5807] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  283.738100][ T5807] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  283.753400][ T5807] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  283.767544][ T5807] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  283.779188][ T5807] dragonrise 0003:0079:0011.000A: unknown main item tag 0x0
[  283.790223][ T5807] dragonrise 0003:0079:0011.000A: item fetching failed at offset 9/44
[  283.820339][ T5807] dragonrise 0003:0079:0011.000A: parse failed
[  283.827843][ T5807] dragonrise: probe of 0003:0079:0011.000A failed with error -22
[  283.922538][   T23] usb 4-1: USB disconnect, device number 18
[  284.744753][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2129'.
[  285.378197][ T5862] kernel write not supported for file /input/mouse0 (pid: 5862 comm: kworker/1:5)
[  285.588114][T11520] loop5: detected capacity change from 0 to 256
[  285.632102][T11499] loop3: detected capacity change from 0 to 32768
[  285.683321][T11520] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  285.744520][T11499] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  285.933962][T11499] (syz.3.2133,11499,0):ocfs2_rename:1284 ERROR: status = -2
[  285.980211][T11499] (syz.3.2133,11499,0):ocfs2_rename:1690 ERROR: status = -2
[  286.232318][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  286.625676][T11551] loop3: detected capacity change from 0 to 64
[  287.452183][T11578] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.468593][T11578] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.535867][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2172'.
[  288.451042][ T5767] Bluetooth: hci4: command tx timeout
[  289.073502][T11619] loop3: detected capacity change from 0 to 512
[  289.080266][   T28] audit: type=1326 audit(2000000404.649:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131599c819 code=0x7ffc0000
[  289.147500][T11619] EXT4-fs: inline encryption not supported
[  289.199787][T11619] EXT4-fs: Ignoring removed mblk_io_submit option
[  289.212811][   T28] audit: type=1326 audit(2000000404.649:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131599c819 code=0x7ffc0000
[  289.268334][T11608] loop5: detected capacity change from 0 to 131072
[  289.269506][T11619] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  289.279954][T11608] F2FS-fs (loop5): Test dummy encryption mode enabled
[  289.294992][T11608] F2FS-fs (loop5): invalid crc value
[  289.319994][T11608] F2FS-fs (loop5): Found nat_bits in checkpoint
[  289.328203][   T28] audit: type=1326 audit(2000000404.669:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f131599c819 code=0x7ffc0000
[  289.371030][T11619] EXT4-fs (loop3): Test dummy encryption mode enabled
[  289.391112][T11608] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  289.415135][   T28] audit: type=1326 audit(2000000404.679:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131599c819 code=0x7ffc0000
[  289.432070][T11619] EXT4-fs (loop3): orphan cleanup on readonly fs
[  289.480206][T11619] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2190: inode #13: comm syz.3.2190: iget: illegal inode #
[  289.504145][   T28] audit: type=1326 audit(2000000404.679:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131599c819 code=0x7ffc0000
[  289.526528][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.577053][T11619] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.2190: couldn't read orphan inode 13 (err -117)
[  289.593737][T11619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  289.599478][   T28] audit: type=1326 audit(2000000404.679:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f131599c819 code=0x7ffc0000
[  289.627896][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.645081][T11608] fscrypt (loop5, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  289.711069][   T28] audit: type=1326 audit(2000000404.679:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131599c819 code=0x7ffc0000
[  289.766107][T11619] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  289.806388][   T28] audit: type=1326 audit(2000000404.679:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f131599c819 code=0x7ffc0000
[  289.828761][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.844733][T11619] EXT4-fs error (device loop3): __ext4_remount:6752: comm syz.3.2190: Abort forced by user
[  289.844957][   T28] audit: type=1326 audit(2000000404.679:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f131599c819 code=0x7ffc0000
[  289.877309][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.909913][T11619] EXT4-fs (loop3): Remounting filesystem read-only
[  289.916464][T11619] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  290.055752][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.236699][T11647] IPv6: NLM_F_CREATE should be specified when creating new route
[  291.332380][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'.
[  291.342615][T11684] netlink: 'syz.3.2214': attribute type 20 has an invalid length.
[  291.350961][T11684] netlink: 'syz.3.2214': attribute type 21 has an invalid length.
[  291.470104][ T5767] Bluetooth: hci3: unknown advertising packet type: 0x39
[  291.470191][ T5767] Bluetooth: hci3: Dropping invalid advertising data
[  291.486947][ T5767] Bluetooth: hci3: Malformed LE Event: 0x02
[  291.573937][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2219'.
[  291.594624][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2219'.
[  291.867904][T11703] loop3: detected capacity change from 0 to 256
[  291.914787][T11703] FAT-fs (loop3): Directory bread(block 64) failed
[  291.949523][T11703] FAT-fs (loop3): Directory bread(block 65) failed
[  291.964953][T11703] FAT-fs (loop3): Directory bread(block 66) failed
[  291.974782][T11703] FAT-fs (loop3): Directory bread(block 67) failed
[  291.987140][T11703] FAT-fs (loop3): Directory bread(block 68) failed
[  291.995493][T11703] FAT-fs (loop3): Directory bread(block 69) failed
[  292.007647][T11703] FAT-fs (loop3): Directory bread(block 70) failed
[  292.029669][T11703] FAT-fs (loop3): Directory bread(block 71) failed
[  292.048734][T11703] FAT-fs (loop3): Directory bread(block 72) failed
[  292.068456][T11703] FAT-fs (loop3): Directory bread(block 73) failed
[  292.113095][T11708] loop6: detected capacity change from 0 to 128
[  292.158718][T11708] syz.6.2227: attempt to access beyond end of device
[  292.158718][T11708] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128
[  292.600190][T11697] loop5: detected capacity change from 0 to 40427
[  292.616569][T11697] F2FS-fs (loop5): invalid crc value
[  292.646953][T11697] F2FS-fs (loop5): Found nat_bits in checkpoint
[  292.816104][T11697] F2FS-fs (loop5): Start checkpoint disabled!
[  292.827554][T11697] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  293.013231][T11737] syz.3.2239 uses obsolete (PF_INET,SOCK_PACKET)
[  293.105320][   T11] kworker/u4:0: attempt to access beyond end of device
[  293.105320][   T11] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  293.157222][   T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  293.176965][   T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  293.217103][   T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  293.697145][T11733] netlink: 'syz.2.2238': attribute type 6 has an invalid length.
[  293.898903][T11738] loop6: detected capacity change from 0 to 32768
[  293.906312][T11746] tap0: tun_chr_ioctl cmd 2147767511
[  294.008896][T11738] syz.6.2240: attempt to access beyond end of device
[  294.008896][T11738] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  294.035592][T11738] lbmIODone: I/O error in JFS log
[  294.059663][T11738] *** Log Format Error ! ***
[  294.070613][T11738] lmLogInit: exit(-22)
[  294.075178][T11738] lmLogOpen: exit(-22)
[  294.221270][ T5862] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  294.420043][ T5862] usb 6-1: Using ep0 maxpacket: 8
[  294.431307][T11760] loop3: detected capacity change from 0 to 512
[  294.454128][T11760] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  294.475454][ T5862] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  294.504266][ T5862] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  294.506052][T11760] EXT4-fs (loop3): 1 truncate cleaned up
[  294.534494][ T5862] usb 6-1: Product: syz
[  294.541858][T11760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.559633][ T5862] usb 6-1: Manufacturer: syz
[  294.564401][ T5862] usb 6-1: SerialNumber: syz
[  294.612503][ T5862] usb 6-1: config 0 descriptor??
[  294.622661][ T5862] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  294.692057][T11760] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.2250: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  294.762321][T11760] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  294.780641][T11771] loop6: detected capacity change from 0 to 128
[  294.787452][T11760] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.2250: Deleting old file: nlink 4, error=-117
[  294.812048][T11771] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  294.830770][T11771] hpfs: filesystem error: improperly stopped
[  294.872465][T11771] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  294.888470][T11771] hpfs: You really don't want any checks? You are crazy...
[  294.904349][T11770] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.2250: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  294.945168][T11771] hpfs: hpfs_map_sector(): read error
[  294.952722][T11771] hpfs: code page support is disabled
[  294.966054][T11771] hpfs: hpfs_map_4sectors(): unaligned read
[  294.984038][T11771] hpfs: hpfs_map_4sectors(): unaligned read
[  294.993565][T11771] hpfs: filesystem error: unable to find root dir
[  295.011557][T11770] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  295.046396][T11770] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.2250: Deleting old file: nlink 4, error=-117
[  295.064188][T11771] hpfs: hpfs_map_4sectors(): unaligned read
[  295.077500][T11771] hpfs: hpfs_map_sector(): read error
[  295.170104][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.263629][T11781] xt_hashlimit: size too large, truncated to 1048576
[  295.273380][ T5862] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14
[  295.354525][T11785] program syz.3.2258 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  295.478061][ T5810] usb 6-1: USB disconnect, device number 4
[  295.841136][T11793] loop3: detected capacity change from 0 to 8192
[  295.867632][T11793] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  295.914388][T11793] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  295.963389][T11793] REISERFS (device loop3): using ordered data mode
[  295.970303][T11793] reiserfs: using flush barriers
[  296.005826][T11793] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  296.090093][T11793] REISERFS (device loop3): checking transaction log (loop3)
[  296.151791][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2264'.
[  296.219855][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2264'.
[  296.269625][T11802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2264'.
[  296.512164][T11793] REISERFS (device loop3): Using r5 hash to sort names
[  296.532003][T11793] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  296.671470][T11813] tap0: tun_chr_ioctl cmd 2147767511
[  297.543481][ T1302] block nbd1: Possible stuck request ffff888021ef8000: control (read@0,1024B). Runtime 120 seconds
[  297.554744][ T1302] block nbd1: Possible stuck request ffff888021ef8200: control (read@1024,1024B). Runtime 120 seconds
[  297.566253][ T1302] block nbd1: Possible stuck request ffff888021ef8400: control (read@2048,1024B). Runtime 120 seconds
[  297.577451][ T1302] block nbd1: Possible stuck request ffff888021ef8600: control (read@3072,1024B). Runtime 120 seconds
[  297.651179][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'.
[  297.726164][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'.
[  297.829171][T11837] input input15: cannot allocate more than FF_MAX_EFFECTS effects
[  298.198719][T11842] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2281'.
[  298.248542][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2282'.
[  298.467602][T11853] fuse: Bad value for 'fd'
[  298.680465][T11856] tmpfs: Too few inodes for current use
[  299.144364][T11865] cgroup: Need name or subsystem set
[  299.485965][T11872] loop5: detected capacity change from 0 to 256
[  299.573761][T11872] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  300.207572][T11889] loop5: detected capacity change from 0 to 1024
[  300.388076][ T2893] hfsplus: b-tree write err: -5, ino 25
[  300.410414][ T2893] hfsplus: b-tree write err: -5, ino 4
[  300.415996][ T2893] hfsplus: b-tree write err: -5, ino 2
[  300.530577][T11893] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2305'.
[  300.849716][T11878] netlink: 'syz.3.2298': attribute type 6 has an invalid length.
[  301.139722][ T5862] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  301.339464][ T5862] usb 6-1: Using ep0 maxpacket: 16
[  301.350886][ T5862] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  301.369345][ T5862] usb 6-1: config 1 has no interface number 0
[  301.377460][ T5862] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  301.409017][ T5862] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  301.429457][ T5862] usb 6-1: config 1 interface 105 has no altsetting 0
[  301.446957][ T5862] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  301.459546][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  301.477831][ T5862] usb 6-1: Product: syz
[  301.491803][ T5862] usb 6-1: Manufacturer: syz
[  301.499492][ T5862] usb 6-1: SerialNumber: syz
[  301.522059][T11904] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  301.529793][T11904] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  301.972449][T11904] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  301.991845][T11904] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  302.179887][T11921] pim6reg: tun_chr_ioctl cmd 1074812117
[  302.214172][ T5862] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  302.235233][ T5862] aqc111: probe of 6-1:1.105 failed with error -71
[  302.246174][ T5862] usb 6-1: USB disconnect, device number 5
[  303.322190][T11954] loop3: detected capacity change from 0 to 512
[  303.369543][T11954] EXT4-fs (loop3): unsupported inode size: 4096
[  303.409681][T11954] EXT4-fs (loop3): blocksize: 1024
[  303.477260][ T9136] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  303.519928][T11958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2329'.
[  303.529425][T11958] sch_fq: defrate 0 ignored.
[  304.000952][T11978] loop5: detected capacity change from 0 to 512
[  304.018547][T11978] EXT4-fs: inline encryption not supported
[  304.060265][T11978] EXT4-fs error (device loop5): ext4_orphan_get:1424: comm syz.5.2339: bad orphan inode 15
[  304.102150][T11978] ext4_test_bit(bit=14, block=5) = 0
[  304.108645][T11978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.244712][T10781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.502671][T11969] loop6: detected capacity change from 0 to 32768
[  304.566982][T11969] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  304.639053][T11969] XFS (loop6): Ending clean mount
[  304.719594][ T5808] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  304.794778][T10858] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  304.956992][ T5808] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  304.987891][ T5808] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.009872][ T5808] usb 6-1: config 0 interface 0 has no altsetting 0
[  305.026963][ T5808] usb 6-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00
[  305.043113][T12007] loop6: detected capacity change from 0 to 512
[  305.059480][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.088095][ T5808] usb 6-1: config 0 descriptor??
[  305.127059][T12006] loop3: detected capacity change from 0 to 4096
[  305.203141][T12007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  305.246176][T12010] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  305.257961][T12007] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.444827][T12007] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  305.469774][T12007] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  305.522066][T12007] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.2345: Failed to acquire dquot type 0
[  305.604258][ T5808] wacom 0003:056A:0144.000B: Unknown device_type for 'HID 056a:0144'. Ignoring.
[  305.662549][T10858] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  305.773937][ T5862] usb 6-1: USB disconnect, device number 6
[  306.015161][T12025] netlink: 'syz.2.2353': attribute type 3 has an invalid length.
[  306.039538][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2353'.
[  306.720506][T12039] loop3: detected capacity change from 0 to 2048
[  306.800702][T12039] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  306.854409][T12039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  307.352381][T12063] input: syz1 as /devices/virtual/input/input20
[  307.616227][T12075] loop6: detected capacity change from 0 to 512
[  307.627898][T12075] EXT4-fs: Ignoring removed orlov option
[  307.657453][T12075] EXT4-fs (loop6): 1 truncate cleaned up
[  307.674459][T12075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.756871][   T28] audit: type=1800 audit(2000000423.409:42): pid=12075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2376" name="file1" dev="loop6" ino=13 res=0 errno=0
[  307.795901][T10858] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.935272][T12087] netlink: 'syz.2.2382': attribute type 9 has an invalid length.
[  308.126703][T12091] mkiss: ax0: crc mode is auto.
[  308.834225][T12113] loop5: detected capacity change from 0 to 4096
[  308.855691][T12113] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  309.928954][T12123] loop3: detected capacity change from 0 to 32768
[  309.966523][T12123] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  310.130301][T12123] XFS (loop3): Ending clean mount
[  310.154083][T12123] XFS (loop3): Quotacheck needed: Please wait.
[  310.324043][T12123] XFS (loop3): Quotacheck: Done.
[  310.417314][   T28] audit: type=1800 audit(2000000426.069:43): pid=12123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2399" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  310.501761][T12153] loop5: detected capacity change from 0 to 8192
[  310.531701][T12153] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  310.583983][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  310.624357][T12153] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  310.687567][T12153] REISERFS (device loop5): using ordered data mode
[  310.722988][T12153] reiserfs: using flush barriers
[  310.749834][T12153] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  310.787565][T12153] REISERFS (device loop5): checking transaction log (loop5)
[  310.805329][T12153] REISERFS (device loop5): Using r5 hash to sort names
[  310.814692][T12153] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  311.141222][T12177] loop5: detected capacity change from 0 to 4096
[  311.189721][T12178] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  311.383228][T12184] netlink: 'syz.5.2423': attribute type 9 has an invalid length.
[  311.505945][T12186] loop5: detected capacity change from 0 to 4096
[  311.515130][T12186] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  311.545302][T12186] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  311.557342][T12186] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  311.571720][T12186] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  311.585549][T12186] ntfs: volume version 3.1.
[  311.710616][ T2893] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  311.747619][T10781] ntfs: (device loop5): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  312.147114][T12196] loop5: detected capacity change from 0 to 1024
[  312.200089][T12196] hfsplus: bad catalog entry type
[  312.260332][    C0] net_ratelimit: 44 callbacks suppressed
[  312.260347][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.280668][   T60] hfsplus: b-tree write err: -5, ino 25
[  312.300602][   T60] hfsplus: b-tree write err: -5, ino 4
[  312.319773][   T60] hfsplus: b-tree write err: -5, ino 2
[  312.339578][   T60] hfsplus: b-tree write err: -5, ino 26
[  312.392063][T12200] loop3: detected capacity change from 0 to 4096
[  312.479553][ T5862] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  312.680765][ T5862] usb 7-1: Using ep0 maxpacket: 8
[  312.735420][ T5862] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  312.777348][ T5862] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  312.839516][ T5862] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  312.890085][ T5862] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  312.950648][ T5862] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  313.007317][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.305637][ T5862] usb 7-1: GET_CAPABILITIES returned 0
[  313.335926][ T5862] usbtmc 7-1:16.0: can't read capabilities
[  313.498810][T12205] loop5: detected capacity change from 0 to 131072
[  313.549757][T12205] F2FS-fs (loop5): Found nat_bits in checkpoint
[  313.604857][ T5836] usb 7-1: USB disconnect, device number 4
[  313.621291][T12205] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  313.662959][T12205] F2FS-fs (loop5): recover xattr in inode (7), error(0)
[  313.670527][T12205] F2FS-fs (loop5): set inode (7) has corrupted xattr
[  314.470672][T12229] kvm_intel: kvm [12228]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1
[  314.529714][ T5808] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  314.739752][ T5808] usb 7-1: Using ep0 maxpacket: 32
[  314.747514][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.768728][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.800038][ T5808] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  314.819514][ T5808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.851021][ T5808] usb 7-1: config 0 descriptor??
[  315.289732][ T5808] ft260 0003:0403:6030.000C: unknown main item tag 0x0
[  315.322277][ T5808] ft260 0003:0403:6030.000C: unknown main item tag 0x0
[  315.476618][ T5808] ft260 0003:0403:6030.000C: chip code: 0000 0000
[  315.712538][ T5808] ft260 0003:0403:6030.000C: failed to retrieve system status
[  315.731534][ T5808] ft260: probe of 0003:0403:6030.000C failed with error -71
[  315.764111][ T5808] usb 7-1: USB disconnect, device number 5
[  315.937413][T12243] loop3: detected capacity change from 0 to 32768
[  315.995470][T12243] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  316.049887][ T1186] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  316.055718][T12243] XFS (loop3): Ending clean mount
[  316.071781][T12243] XFS (loop3): Quotacheck needed: Please wait.
[  316.156845][T12243] XFS (loop3): Quotacheck: Done.
[  316.283556][ T1186] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  316.304116][ T1186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.335289][ T5766] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  316.350020][ T1186] usb 6-1: Product: syz
[  316.354318][ T1186] usb 6-1: Manufacturer: syz
[  316.361932][ T1186] usb 6-1: SerialNumber: syz
[  316.382878][ T1186] usb 6-1: config 0 descriptor??
[  316.442222][ T1186] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 007
[  316.836575][ T1186]  (null): failure reading functionality
[  316.870463][ T1186] i2c i2c-1: connected i2c-tiny-usb device
[  317.114815][ T1186] usb 6-1: USB disconnect, device number 7
[  317.391583][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  317.396662][T12296] loop6: detected capacity change from 0 to 2048
[  317.424025][T12296] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  317.453172][T12296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  317.537603][T12300] lo: entered promiscuous mode
[  317.549276][T12299] lo: left promiscuous mode
[  317.989645][T12312] loop6: detected capacity change from 0 to 128
[  318.061412][T12312] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  318.113626][T12312] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  318.187959][T12312] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes
[  318.271436][T10858] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  318.371151][T12323] 9pnet_fd: Insufficient options for proto=fd
[  318.658539][T12317] loop3: detected capacity change from 0 to 32768
[  318.682129][T12317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2472 (12317)
[  318.712587][T12317] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  318.733169][T12317] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  318.751820][T12317] BTRFS info (device loop3): using free space tree
[  318.822767][T12317] BTRFS info (device loop3): enabling ssd optimizations
[  318.859598][T12317] BTRFS info (device loop3): auto enabling async discard
[  318.861713][T12325] loop6: detected capacity change from 0 to 32768
[  318.924748][T12325] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.2475 (12325)
[  319.196934][ T5754] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by udevd (5754)
[  319.201993][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  319.469803][ T5807] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  319.697710][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.732008][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.762253][ T5807] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  319.775556][ T5807] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  319.792350][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.865117][ T5807] usb 7-1: config 0 descriptor??
[  320.312856][ T5807] kovaplus 0003:1E7D:2D50.000D: item fetching failed at offset 4/5
[  320.329128][ T5807] kovaplus 0003:1E7D:2D50.000D: parse failed
[  320.335724][ T5807] kovaplus: probe of 0003:1E7D:2D50.000D failed with error -22
[  320.614737][ T5807] usb 7-1: USB disconnect, device number 6
[  320.994935][T12381] loop5: detected capacity change from 0 to 32768
[  321.015910][T12381] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2494 (12381)
[  321.045490][T12381] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  321.056615][T12381] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  321.068860][T12381] BTRFS info (device loop5): using free space tree
[  321.209630][T12405] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2500'.
[  321.219171][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2500'.
[  321.277925][T12381] BTRFS info (device loop5): enabling ssd optimizations
[  321.300607][T12381] BTRFS info (device loop5): auto enabling async discard
[  321.420431][   T28] audit: type=1800 audit(2000000437.079:44): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2494" name="file2" dev="loop5" ino=261 res=0 errno=0
[  321.440960][    C1] vkms_vblank_simulate: vblank timer overrun
[  321.593463][T10781] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  321.649691][ T1186] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  321.886443][ T1186] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.912310][ T1186] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.943218][ T1186] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  321.980880][ T1186] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.010216][ T1186] usb 7-1: config 0 descriptor??
[  322.329572][ T5808] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  322.458120][ T1186] playstation 0003:054C:0BA0.000E: unknown main item tag 0x0
[  322.480632][ T1186] playstation 0003:054C:0BA0.000E: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.6-1/input0
[  322.503800][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  322.549976][ T5808] usb 6-1: Using ep0 maxpacket: 8
[  322.563257][ T5808] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  322.601293][ T5808] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  322.620718][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.629260][ T5808] usb 6-1: Product: syz
[  322.653846][ T5808] usb 6-1: Manufacturer: syz
[  322.658742][ T1186] playstation 0003:054C:0BA0.000E: Invalid byte count transferred, expected 16 got 1
[  322.679217][ T5808] usb 6-1: SerialNumber: syz
[  322.684269][ T1186] playstation 0003:054C:0BA0.000E: Failed to retrieve DualShock4 pairing info: -22
[  322.696077][ T5808] usb 6-1: config 0 descriptor??
[  322.720352][ T1186] playstation 0003:054C:0BA0.000E: Failed to get MAC address from DualShock4
[  322.732647][ T5808] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  322.741733][ T1186] playstation 0003:054C:0BA0.000E: Failed to create dualshock4.
[  322.749787][ T5808] usb 6-1: setting power ON
[  322.754318][ T5808] dvb-usb: bulk message failed: -22 (2/0)
[  322.772212][ T1186] playstation: probe of 0003:054C:0BA0.000E failed with error -22
[  322.786685][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  322.821048][ T5808] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  322.838595][ T5808] usb 6-1: media controller created
[  322.912270][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  322.944240][ T1186] usb 7-1: USB disconnect, device number 7
[  322.962492][T12418] dvb-usb: bulk message failed: -22 (3/0)
[  322.973315][T12418] cxusb: i2c rd: len=147 is too big!
[  322.973315][T12418] 
[  323.001580][ T5808] usb 6-1: selecting invalid altsetting 6
[  323.007357][ T5808] usb 6-1: digital interface selection failed (-22)
[  323.029841][ T5808] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  323.030512][T12418] dvb-usb: bulk message failed: -22 (5/0)
[  323.050119][ T5808] usb 6-1: setting power OFF
[  323.084739][ T5808] dvb-usb: bulk message failed: -22 (2/0)
[  323.105351][ T5808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  323.130617][ T5808] (NULL device *): no alternate interface
[  323.213097][ T5808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  323.265307][ T5808] usb 6-1: USB disconnect, device number 8
[  323.347568][T12430] loop3: detected capacity change from 0 to 7
[  323.367424][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.377381][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.385884][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.395118][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.404588][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.414148][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.424445][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.433678][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.449630][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.458926][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.491258][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.500499][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.508587][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.517789][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.525750][ T9136] ldm_validate_partition_table(): Disk read failed.
[  323.544014][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.553235][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.569465][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.578750][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.619059][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.628426][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  323.652189][ T9136] Dev loop3: unable to read RDB block 0
[  323.671392][ T9136]  loop3: unable to read partition table
[  323.685101][ T9136] loop3: partition table beyond EOD, truncated
[  323.722392][T12430] ldm_validate_partition_table(): Disk read failed.
[  323.740493][T12430] Dev loop3: unable to read RDB block 0
[  323.810629][T12430]  loop3: unable to read partition table
[  323.816572][T12430] loop3: partition table beyond EOD, truncated
[  323.897212][T12430] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õÖ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  324.056434][T12436] netlink: 'syz.5.2510': attribute type 10 has an invalid length.
[  324.087900][T12436] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2510'.
[  325.119684][ T5808] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  325.395234][ T5808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.426019][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.457871][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.485939][ T5808] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  325.492883][T12456] loop6: detected capacity change from 0 to 32768
[  325.527490][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.540269][T12456] (syz.6.2519,12456,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  325.550663][ T5808] usb 6-1: config 0 descriptor??
[  325.600417][T12456] (syz.6.2519,12456,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  325.656770][T12456] JBD2: Ignoring recovery information on journal
[  325.730390][T12456] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  325.948454][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'.
[  326.028249][ T5808] hid-rmi 0003:0461:4E72.000F: unknown main item tag 0x2
[  326.045883][ T5808] hid-rmi 0003:0461:4E72.000F: unknown main item tag 0x0
[  326.080221][ T5808] hid-rmi 0003:0461:4E72.000F: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.5-1/input0
[  326.260865][   T23] usb 6-1: USB disconnect, device number 9
[  326.372814][T10858] ocfs2: Unmounting device (7,6) on (node local)
[  326.766589][T12491] use of bytesused == 0 is deprecated and will be removed in the future,
[  326.776913][T12491] use the actual size instead.
[  327.083164][T12504] overlayfs: regular lower layers cannot follow data lower layers
[  327.252922][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'.
[  327.315723][T12515] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.630772][ T1302] block nbd1: Possible stuck request ffff888021ef8000: control (read@0,1024B). Runtime 150 seconds
[  327.641936][ T1302] block nbd1: Possible stuck request ffff888021ef8200: control (read@1024,1024B). Runtime 150 seconds
[  327.653822][ T1302] block nbd1: Possible stuck request ffff888021ef8400: control (read@2048,1024B). Runtime 150 seconds
[  327.665385][ T1302] block nbd1: Possible stuck request ffff888021ef8600: control (read@3072,1024B). Runtime 150 seconds
[  328.044362][T12529] loop6: detected capacity change from 0 to 32768
[  328.079332][T12529] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.2550 (12529)
[  328.096078][T12538] kvm: kvm [12537]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003
[  328.132784][T12529] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  328.175323][T12529] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  328.225229][T12529] BTRFS info (device loop6): using free space tree
[  328.394288][T12562] loop5: detected capacity change from 0 to 4096
[  328.425265][T12529] BTRFS info (device loop6): enabling ssd optimizations
[  328.442573][T12529] BTRFS info (device loop6): auto enabling async discard
[  328.496344][T12562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.637826][   T28] audit: type=1800 audit(2000000444.289:45): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2550" name="file2" dev="loop6" ino=261 res=0 errno=0
[  328.730524][T10781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.841985][T10858] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  329.127911][ T9136] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop6 scanned by udevd (9136)
[  329.661338][T12572] loop3: detected capacity change from 0 to 32768
[  330.438213][T12593] loop6: detected capacity change from 0 to 40427
[  330.458521][T12593] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  330.503508][T12593] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  330.525385][T12596] loop5: detected capacity change from 0 to 32768
[  330.543151][T12593] F2FS-fs (loop6): invalid crc_offset: 33558524
[  330.601742][T12593] F2FS-fs (loop6): Found nat_bits in checkpoint
[  330.613955][T12596] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  330.718349][T12593] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  330.731712][T12593] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  330.837305][T12596] XFS (loop5): Ending clean mount
[  330.892874][T12596] XFS (loop5): Quotacheck needed: Please wait.
[  331.010292][T12596] XFS (loop5): Quotacheck: Done.
[  331.191247][T10781] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  332.186686][T12647] netlink: 'syz.3.2590': attribute type 1 has an invalid length.
[  332.199071][T12647] netlink: 'syz.3.2590': attribute type 2 has an invalid length.
[  332.260021][ T5808] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  332.479747][ T5808] usb 6-1: Using ep0 maxpacket: 32
[  332.497178][ T5808] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  332.509833][ T5808] usb 6-1: config 0 has no interface number 0
[  332.530116][ T5808] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  332.548080][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.558578][ T5808] usb 6-1: Product: syz
[  332.570457][ T5808] usb 6-1: Manufacturer: syz
[  332.572519][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2597'.
[  332.575083][ T5808] usb 6-1: SerialNumber: syz
[  332.577779][ T5808] usb 6-1: config 0 descriptor??
[  332.604971][ T5808] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  332.816600][ T5808] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  332.830773][ T5808] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  333.246704][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  333.254775][ T5808] usb 6-1: USB disconnect, device number 10
[  333.280827][ T5808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  333.308218][ T5808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  333.332237][ T5808] quatech2 6-1:0.51: device disconnected
[  334.365536][T12675] loop6: detected capacity change from 0 to 40427
[  334.401108][T12675] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  334.408881][T12675] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  334.490330][T12675] F2FS-fs (loop6): invalid crc value
[  334.539661][T12675] F2FS-fs (loop6): Found nat_bits in checkpoint
[  334.673553][T12675] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  334.692757][T12675] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  334.819006][   T28] audit: type=1800 audit(2000000450.469:46): pid=12675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2604" name="file1" dev="loop6" ino=10 res=0 errno=0
[  334.839484][    C1] vkms_vblank_simulate: vblank timer overrun
[  335.885678][T12750] loop6: detected capacity change from 0 to 1024
[  335.895678][T12750] EXT4-fs: Ignoring removed orlov option
[  335.903499][T12750] EXT4-fs: Ignoring removed nobh option
[  335.946569][T12750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.086263][T10858] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.191736][T12759] sctp: [Deprecated]: syz.6.2637 (pid 12759) Use of int in max_burst socket option.
[  336.191736][T12759] Use struct sctp_assoc_value instead
[  336.446461][T12757] loop5: detected capacity change from 0 to 32768
[  336.528476][T12757] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  336.541581][T12757] JBD2: Ignoring recovery information on journal
[  336.597918][T12757] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  336.828465][T10781] ocfs2: Unmounting device (7,5) on (node local)
[  336.943800][T12782] loop5: detected capacity change from 0 to 512
[  336.974545][T12782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.997700][T12782] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.171074][T10781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.366142][T12793] loop5: detected capacity change from 0 to 256
[  337.448540][T12793] FAT-fs (loop5): Directory bread(block 64) failed
[  337.461688][T12793] FAT-fs (loop5): Directory bread(block 65) failed
[  337.501681][T12793] FAT-fs (loop5): Directory bread(block 66) failed
[  337.508284][T12793] FAT-fs (loop5): Directory bread(block 67) failed
[  337.537181][T12793] FAT-fs (loop5): Directory bread(block 68) failed
[  337.549643][T12793] FAT-fs (loop5): Directory bread(block 69) failed
[  337.556437][T12793] FAT-fs (loop5): Directory bread(block 70) failed
[  337.580976][T12793] FAT-fs (loop5): Directory bread(block 71) failed
[  337.635796][T12793] FAT-fs (loop5): Directory bread(block 72) failed
[  337.664011][T12793] FAT-fs (loop5): Directory bread(block 73) failed
[  337.724496][T12805] loop3: detected capacity change from 0 to 128
[  337.798955][   T28] audit: type=1800 audit(2000000453.449:47): pid=12793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2650" name=B4 dev="loop5" ino=1048649 res=0 errno=0
[  337.845119][T12807] loop6: detected capacity change from 0 to 1024
[  337.916272][T12807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.990277][T12807] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.221440][ T2893] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm kworker/u4:8: bg 0: block 112: padding at end of block bitmap is not set
[  338.246562][ T2893] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 117
[  338.266783][ T2893] EXT4-fs (loop6): This should not happen!! Data will be lost
[  338.266783][ T2893] 
[  338.280714][T12815] loop5: detected capacity change from 0 to 128
[  338.301054][T10858] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  338.321162][T12815] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  338.359522][T12815] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.400756][T12811] loop3: detected capacity change from 0 to 32768
[  338.502247][T12811] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  338.518917][T12824] tun0: tun_chr_ioctl cmd 1074025677
[  338.528148][T10781] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  338.548025][T12824] tun0: linktype set to 270
[  338.658538][T12811] XFS (loop3): Ending clean mount
[  338.707999][T12811] XFS (loop3): Quotacheck needed: Please wait.
[  338.880097][T12811] XFS (loop3): Quotacheck: Done.
[  338.892319][T12840] loop6: detected capacity change from 0 to 1024
[  338.991230][T12840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.214988][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  339.240845][T10858] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.329221][T12848] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  339.400145][T12848] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  339.484344][T12848] REISERFS (device loop5): using ordered data mode
[  339.515487][T12848] reiserfs: using flush barriers
[  339.552544][T12848] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  339.626754][T12848] REISERFS (device loop5): checking transaction log (loop5)
[  340.014141][T12848] REISERFS (device loop5): Using r5 hash to sort names
[  340.034044][T12848] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  340.338317][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2683'.
[  340.400501][T12876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2683'.
[  340.504326][T12881] set_capacity_and_notify: 1 callbacks suppressed
[  340.504340][T12881] loop3: detected capacity change from 0 to 256
[  340.676355][T12881] FAT-fs (loop3): Directory bread(block 64) failed
[  340.720509][T12881] FAT-fs (loop3): Directory bread(block 65) failed
[  340.727271][T12881] FAT-fs (loop3): Directory bread(block 66) failed
[  340.766459][T12881] FAT-fs (loop3): Directory bread(block 67) failed
[  340.785777][T12881] FAT-fs (loop3): Directory bread(block 68) failed
[  340.808653][T12881] FAT-fs (loop3): Directory bread(block 69) failed
[  340.821453][T12881] FAT-fs (loop3): Directory bread(block 70) failed
[  340.841901][T12881] FAT-fs (loop3): Directory bread(block 71) failed
[  340.848564][T12881] FAT-fs (loop3): Directory bread(block 72) failed
[  340.886028][T12881] FAT-fs (loop3): Directory bread(block 73) failed
[  340.994135][T12881] syz.3.2686: attempt to access beyond end of device
[  340.994135][T12881] loop3: rw=1, sector=1224, nr_sectors = 64 limit=256
[  341.035793][T12881] syz.3.2686: attempt to access beyond end of device
[  341.035793][T12881] loop3: rw=1, sector=1320, nr_sectors = 36 limit=256
[  342.927150][T12944] netlink: 'syz.5.2714': attribute type 10 has an invalid length.
[  342.935249][T12944] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2714'.
[  343.754569][T12969] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2725'.
[  343.776095][T12971] loop3: detected capacity change from 0 to 1024
[  343.849248][   T11] hfsplus: b-tree write err: -5, ino 25
[  343.862233][   T11] hfsplus: b-tree write err: -5, ino 4
[  343.875976][   T11] hfsplus: b-tree write err: -5, ino 2
[  343.879490][ T5836] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  343.946869][T12973] netlink: 'syz.5.2727': attribute type 6 has an invalid length.
[  343.969169][T12975] loop3: detected capacity change from 0 to 512
[  343.979888][T12975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  344.012485][T12975] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2728: invalid indirect mapped block 256 (level 2)
[  344.058725][T12975] EXT4-fs (loop3): 2 truncates cleaned up
[  344.080697][ T5836] usb 7-1: Using ep0 maxpacket: 8
[  344.081097][T12975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.118538][ T5836] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[  344.129712][T12977] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  344.134603][ T5836] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  344.152447][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.160628][ T5836] usb 7-1: Product: syz
[  344.164992][ T5836] usb 7-1: Manufacturer: syz
[  344.169764][ T5836] usb 7-1: SerialNumber: syz
[  344.177171][ T5836] usb 7-1: config 0 descriptor??
[  344.195136][ T5836] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  344.218714][ T5836] usb 7-1: setting power ON
[  344.235668][ T5836] dvb-usb: bulk message failed: -22 (2/0)
[  344.272726][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  344.286179][ T5836] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  344.296406][ T5836] usb 7-1: media controller created
[  344.298074][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.341312][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  344.375669][ T5836] usb 7-1: selecting invalid altsetting 6
[  344.407648][ T5836] usb 7-1: digital interface selection failed (-22)
[  344.430019][T12964] dvb-usb: bulk message failed: -22 (3/0)
[  344.435873][ T5836] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  344.460311][ T5836] usb 7-1: setting power OFF
[  344.472718][ T5836] dvb-usb: bulk message failed: -22 (2/0)
[  344.498170][ T5836] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  344.518479][ T5836] (NULL device *): no alternate interface
[  344.582702][ T5836] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  344.603495][ T5836] usb 7-1: USB disconnect, device number 8
[  344.934357][T13001] loop3: detected capacity change from 0 to 4096
[  345.013010][T13005] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  345.415860][T13019] syz.3.2746[13019] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  345.415989][T13019] syz.3.2746[13019] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  345.607532][T13027] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2750'.
[  346.236023][T13051] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2761'.
[  346.306918][T13055] misc userio: Begin command sent, but we're already running
[  346.808273][T13057] loop6: detected capacity change from 0 to 40427
[  346.820086][T13057] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  346.826493][T13057] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  346.861409][T13057] F2FS-fs (loop6): invalid crc value
[  347.086492][T13057] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  347.094360][T13057] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  347.322974][T10858] syz-executor: attempt to access beyond end of device
[  347.322974][T10858] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  347.357641][T10858] syz-executor: attempt to access beyond end of device
[  347.357641][T10858] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  347.497975][T12671] syz.6.2601: attempt to access beyond end of device
[  347.497975][T12671] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  347.524565][T12671] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  347.536344][T13089] loop3: detected capacity change from 0 to 1024
[  347.582701][T13089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.609589][  T786] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  347.651158][   T28] audit: type=1800 audit(2000000463.309:48): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2778" name="file1" dev="loop3" ino=15 res=0 errno=0
[  347.778000][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.808933][  T786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.824771][  T786] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  347.867043][  T786] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  347.886488][  T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.900768][  T786] usb 6-1: Product: syz
[  347.905062][  T786] usb 6-1: Manufacturer: syz
[  347.915887][  T786] usb 6-1: SerialNumber: syz
[  347.936860][  T786] usb 6-1: config 0 descriptor??
[  348.137489][T13098] loop3: detected capacity change from 0 to 256
[  348.159081][   T42] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.224660][T13098] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  348.293396][   T42] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.464419][   T42] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.535659][  T786] usb 6-1: USB disconnect, device number 11
[  348.598199][   T42] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.982696][T13111] loop3: detected capacity change from 0 to 256
[  349.467303][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  349.486352][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  349.499501][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  349.527100][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  349.530269][T13119] loop3: detected capacity change from 0 to 4096
[  349.547417][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  349.555573][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  350.289514][ T5862] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  350.427909][T13155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2801'.
[  350.439261][T13155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2801'.
[  350.462224][T13155] erspan0: entered promiscuous mode
[  350.482917][T13155] gretap0: entered promiscuous mode
[  350.488949][ T5862] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  350.497488][T13155] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  350.509725][ T5862] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  350.514465][T13155] Cannot create hsr debugfs directory
[  350.518606][ T5862] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  350.518630][ T5862] usb 4-1: config 220 has no interface number 2
[  350.518697][ T5862] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  350.673070][ T5862] usb 4-1: config 220 interface 0 has no altsetting 0
[  350.680087][ T5862] usb 4-1: config 220 interface 76 has no altsetting 0
[  350.687150][ T5862] usb 4-1: config 220 interface 1 has no altsetting 0
[  350.715435][ T5862] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  350.775785][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.850296][ T5862] usb 4-1: Product: syz
[  350.854555][ T5862] usb 4-1: Manufacturer: syz
[  350.859171][ T5862] usb 4-1: SerialNumber: syz
[  351.175864][ T5862] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  351.202838][ T5862] usb 4-1: No valid video chain found.
[  351.214822][T13125] chnl_net:caif_netlink_parms(): no params data found
[  351.217444][ T5862] usb 4-1: selecting invalid altsetting 0
[  351.300243][ T5862] usb 4-1: selecting invalid altsetting 0
[  351.329917][ T5862] usbtest: probe of 4-1:220.1 failed with error -22
[  351.357271][ T5862] usb 4-1: USB disconnect, device number 19
[  351.535769][T13180] autofs4:pid:13180:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32766.2895), cmd(0xc018937c)
[  351.557030][T13180] autofs4:pid:13180:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937c)
[  351.699562][ T5084] Bluetooth: hci4: command tx timeout
[  351.807436][T13125] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.879494][T13125] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.886772][T13125] bridge_slave_0: entered allmulticast mode
[  351.916975][T13125] bridge_slave_0: entered promiscuous mode
[  352.012062][T13199] 9pnet_fd: Insufficient options for proto=fd
[  352.042603][T13125] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.053294][T13125] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.069108][T13125] bridge_slave_1: entered allmulticast mode
[  352.078669][T13125] bridge_slave_1: entered promiscuous mode
[  352.192293][   T42] hsr_slave_0: left promiscuous mode
[  352.203367][   T42] hsr_slave_1: left promiscuous mode
[  352.215197][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.223261][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.231596][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.239188][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.247438][   T42] bridge_slave_1: left promiscuous mode
[  352.253223][ T5862] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  352.263399][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.275720][   T42] bridge_slave_0: left allmulticast mode
[  352.281826][   T42] bridge_slave_0: left promiscuous mode
[  352.287734][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.358589][   T42] veth1_macvtap: left promiscuous mode
[  352.364736][   T42] veth0_macvtap: left promiscuous mode
[  352.371080][   T42] veth1_vlan: left promiscuous mode
[  352.376640][   T42] veth0_vlan: left promiscuous mode
[  352.441062][ T5862] usb 6-1: Using ep0 maxpacket: 16
[  352.450937][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.482614][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.502965][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  352.531051][ T5862] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  352.550503][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.564414][ T5862] usb 6-1: config 0 descriptor??
[  352.730923][ T1186] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  352.991615][ T1186] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  353.000650][ T5862] shield 0003:0955:7214.0010: unknown main item tag 0x0
[  353.021905][ T5862] shield 0003:0955:7214.0010: unknown main item tag 0x0
[  353.029138][ T5862] shield 0003:0955:7214.0010: item fetching failed at offset 2/5
[  353.040575][ T1186] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  353.042667][ T5862] shield 0003:0955:7214.0010: Parse failed
[  353.056189][ T5862] shield: probe of 0003:0955:7214.0010 failed with error -22
[  353.059754][ T1186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  353.086187][ T1186] usb 4-1: SerialNumber: syz
[  353.226424][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  353.275412][ T5862] usb 6-1: USB disconnect, device number 12
[  353.651845][   T42] team0 (unregistering): Port device team_slave_1 removed
[  353.731157][   T42] team0 (unregistering): Port device team_slave_0 removed
[  353.780909][ T5084] Bluetooth: hci4: command tx timeout
[  353.803551][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  353.924111][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.649113][   T42] bond0 (unregistering): Released all slaves
[  354.862884][T13125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.908378][T13125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.041935][T13125] team0: Port device team_slave_0 added
[  355.068680][T13125] team0: Port device team_slave_1 added
[  355.186003][T13125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.197829][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.223971][    C1] vkms_vblank_simulate: vblank timer overrun
[  355.257463][T13125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.365695][T13125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.389900][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.450681][T13220] loop5: detected capacity change from 0 to 32768
[  355.457302][T13125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.517447][ T1186] cdc_ether: probe of 4-1:1.0 failed with error -71
[  355.551691][ T1186] usb 4-1: USB disconnect, device number 20
[  355.623384][T13220] JBD2: Ignoring recovery information on journal
[  355.764632][T13220] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  355.840845][T13125] hsr_slave_0: entered promiscuous mode
[  355.870207][ T5084] Bluetooth: hci4: command tx timeout
[  355.901140][T13125] hsr_slave_1: entered promiscuous mode
[  355.943468][T13125] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  356.004511][T13125] Cannot create hsr debugfs directory
[  356.165022][T10781] ocfs2: Unmounting device (7,5) on (node local)
[  356.664237][T13125] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  356.682578][T13125] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  356.708903][T13125] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  356.749520][T13125] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  357.027370][T13125] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.095719][T13125] 8021q: adding VLAN 0 to HW filter on device team0
[  357.133158][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.140645][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.221478][ T1303] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.228655][ T1303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.457795][T13257] loop5: detected capacity change from 0 to 32768
[  357.700730][ T1302] block nbd1: Possible stuck request ffff888021ef8000: control (read@0,1024B). Runtime 180 seconds
[  357.712427][ T1302] block nbd1: Possible stuck request ffff888021ef8200: control (read@1024,1024B). Runtime 180 seconds
[  357.723607][ T1302] block nbd1: Possible stuck request ffff888021ef8400: control (read@2048,1024B). Runtime 180 seconds
[  357.735942][ T1302] block nbd1: Possible stuck request ffff888021ef8600: control (read@3072,1024B). Runtime 180 seconds
[  357.947062][ T5084] Bluetooth: hci4: command tx timeout
[  357.952583][T13125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.981171][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'.
[  358.766601][T13125] veth0_vlan: entered promiscuous mode
[  358.810035][T13125] veth1_vlan: entered promiscuous mode
[  358.916159][T13125] veth0_macvtap: entered promiscuous mode
[  358.945328][T13125] veth1_macvtap: entered promiscuous mode
[  358.996478][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2849'.
[  359.028553][T13324] loop5: detected capacity change from 0 to 8192
[  359.036883][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.058294][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.111623][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.124226][T13333] loop3: detected capacity change from 0 to 1024
[  359.155159][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.174556][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.249820][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.279696][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.299125][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.333403][T13125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.411383][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.455590][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.519119][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.567452][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.600893][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.615618][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.626984][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.638212][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.649058][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.660040][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.671957][T13125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.707931][T13125] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.718052][T13125] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.727464][T13125] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.737700][T13125] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.032531][ T2903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.048866][ T2903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.105494][T13358] loop3: detected capacity change from 0 to 1024
[  360.113785][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.136869][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.190879][T13358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  360.204567][T13358] ext4 filesystem being mounted at /692/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.490399][ T2903] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: comm kworker/u4:9: lblock 0 mapped to illegal pblock 0 (length 1)
[  360.546739][ T2903] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  360.603055][ T2903] EXT4-fs (loop3): This should not happen!! Data will be lost
[  360.603055][ T2903] 
[  360.644201][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  360.942791][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  360.951795][T13394] loop3: detected capacity change from 0 to 256
[  361.039116][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2870'.
[  361.079488][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2870'.
[  361.122882][T13398] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  361.169850][T13398] macvlan2: entered allmulticast mode
[  361.184043][T13398] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  362.730858][T13454] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2889'.
[  363.659826][ T5809] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  363.851453][ T5809] usb 4-1: Using ep0 maxpacket: 8
[  363.894047][ T5809] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  363.924556][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.968636][ T5809] usb 4-1: Product: syz
[  363.988546][ T5809] usb 4-1: Manufacturer: syz
[  364.012416][ T5809] usb 4-1: SerialNumber: syz
[  364.046915][ T5809] usb 4-1: config 0 descriptor??
[  364.080267][ T5809] gspca_main: se401-2.14.0 probing 047d:5003
[  364.649468][ T5809] usb 4-1: reset high-speed USB device number 21 using dummy_hcd
[  364.768395][T13516] nbd: must specify a size in bytes for the device
[  365.084350][T13506] loop5: detected capacity change from 0 to 32768
[  365.116272][T13506] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2904 (13506)
[  365.167826][T13529] trusted_key: syz.7.2913 sent an empty control message without MSG_MORE.
[  365.188749][T13506] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  365.227324][T13506] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  365.249523][T13506] BTRFS info (device loop5): enabling auto defrag
[  365.269474][T13506] BTRFS info (device loop5): use no compression
[  365.287463][T13506] BTRFS info (device loop5): max_inline at 4096
[  365.318011][ T5809] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  365.345620][T13506] BTRFS info (device loop5): using free space tree
[  365.349509][ T5809] se401: probe of 4-1:0.0 failed with error -71
[  365.374796][ T5809] usb 4-1: USB disconnect, device number 21
[  365.525206][T13506] BTRFS info (device loop5): enabling ssd optimizations
[  365.555327][T13506] BTRFS info (device loop5): auto enabling async discard
[  365.759899][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  365.914857][T13564] loop7: detected capacity change from 0 to 512
[  365.957380][T13564] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  365.971334][ T5808] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  366.043795][T13564] EXT4-fs error (device loop7): ext4_orphan_get:1424: comm syz.7.2919: bad orphan inode 131083
[  366.180538][T13564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  366.342777][T10781] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  366.410104][T13125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.549985][T13578] loop7: detected capacity change from 0 to 64
[  366.637675][ T9136] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop5 scanned by udevd (9136)
[  366.980898][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  367.222003][    T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  367.269001][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.308423][    T9] usb 6-1: config 0 descriptor??
[  367.330347][    T9] cp210x 6-1:0.0: cp210x converter detected
[  367.747177][    T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  367.767743][    T9] usb 6-1: cp210x converter now attached to ttyUSB0
[  367.986353][ T1186] usb 6-1: USB disconnect, device number 13
[  368.011406][ T1186] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  368.037784][ T1186] cp210x 6-1:0.0: device disconnected
[  369.302184][T13670] dummy0: entered allmulticast mode
[  369.320064][T13670] dummy0: left allmulticast mode
[  369.763161][T13687] input: syz0 as /devices/virtual/input/input26
[  370.310260][T13676] loop3: detected capacity change from 0 to 40427
[  370.328781][T13676] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  370.368449][T13676] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  370.395896][T13676] F2FS-fs (loop3): invalid crc value
[  370.438477][T13676] F2FS-fs (loop3): Found nat_bits in checkpoint
[  370.543028][T13676] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  370.550694][T13676] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  370.699520][ T5862] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  370.907759][ T5862] usb 6-1: Using ep0 maxpacket: 8
[  370.918339][ T5862] usb 6-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30
[  370.949423][ T5862] usb 6-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.970624][ T5862] usb 6-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0
[  370.989685][ T5862] usb 6-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193
[  371.019469][ T5862] usb 6-1: config 0 interface 0 has no altsetting 0
[  371.026177][ T5862] usb 6-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00
[  371.049876][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.067425][ T5862] usb 6-1: config 0 descriptor??
[  371.139764][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.514321][ T5862] wacom 0003:056A:010E.0011: unbalanced collection at end of report description
[  371.526026][ T5862] wacom 0003:056A:010E.0011: parse failed
[  371.559545][ T5862] wacom: probe of 0003:056A:010E.0011 failed with error -22
[  371.816083][ T5862] usb 6-1: USB disconnect, device number 14
[  372.416790][T13763] netlink: 'syz.5.2996': attribute type 14 has an invalid length.
[  373.380750][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3008'.
[  373.410535][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3008'.
[  373.448261][T13790] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  373.508855][T13792] 9pnet_fd: Insufficient options for proto=fd
[  373.557220][T13796] loop7: detected capacity change from 0 to 1024
[  373.698829][T13801] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3015'.
[  373.715349][T13801] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3015'.
[  373.771359][T13801] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3015'.
[  373.792267][T13801] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3015'.
[  374.009813][ T1186] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  374.239539][ T1186] usb 4-1: Using ep0 maxpacket: 32
[  374.256262][ T1186] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  374.289434][ T1186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.320827][T13825] loop5: detected capacity change from 0 to 512
[  374.328475][T13825] EXT4-fs: Ignoring removed nomblk_io_submit option
[  374.330020][ T1186] gspca_main: nw80x-2.14.0 probing 055f:d001
[  374.381040][T13825] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.3026: iget: bad extended attribute block 262144
[  374.403427][T13825] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.3026: couldn't read orphan inode 15 (err -117)
[  374.427712][T13825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.510340][T10781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.665377][T13837] netlink: 'syz.5.3030': attribute type 4 has an invalid length.
[  374.674360][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3030'.
[  374.923751][T13845] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28
[  375.138981][ T1186] gspca_nw80x: reg_r err -71
[  375.155718][ T1186] nw80x: probe of 4-1:3.0 failed with error -71
[  375.188341][ T1186] usb 4-1: USB disconnect, device number 22
[  375.335391][T13856] loop7: detected capacity change from 0 to 1024
[  375.354899][T13856] EXT4-fs: Ignoring removed nomblk_io_submit option
[  375.377420][T13856] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  375.441228][T13856] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  375.460701][T13856] System zones: 0-1, 3-36
[  375.483630][T13856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.823517][T13125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.461377][T13924] loop5: detected capacity change from 0 to 64
[  378.309188][T13921] loop3: detected capacity change from 0 to 32768
[  378.832726][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  379.469533][T13967] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3070'.
[  379.712520][T13975] loop7: detected capacity change from 0 to 4096
[  379.817764][T13981] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  379.948681][   T28] audit: type=1800 audit(2000000495.599:49): pid=13975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3071" name="file1" dev="loop7" ino=15 res=0 errno=0
[  380.058899][T13975] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  380.118003][T13975] Remounting filesystem read-only
[  380.257925][T13125] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  380.278937][T13125] NILFS (loop7): discard dirty page: offset=8192, ino=6
[  380.304780][T13125] NILFS (loop7): discard dirty block: blocknr=25, size=4096
[  380.336299][T13125] NILFS (loop7): discard dirty page: offset=0, ino=5
[  380.359893][T13125] NILFS (loop7): discard dirty block: blocknr=27, size=4096
[  380.399815][T13125] NILFS (loop7): discard dirty page: offset=0, ino=3
[  380.406549][T13125] NILFS (loop7): discard dirty block: blocknr=28, size=4096
[  380.462557][T13125] NILFS (loop7): discard dirty page: offset=4096, ino=3
[  380.479299][T13125] NILFS (loop7): discard dirty block: blocknr=29, size=4096
[  380.487129][T13125] NILFS (loop7): discard dirty page: offset=925696, ino=3
[  380.497232][T13125] NILFS (loop7): discard dirty block: blocknr=36, size=4096
[  380.857487][T14015] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  380.902877][ T5767] Bluetooth: hci2: command 0x0406 tx timeout
[  381.490265][T14009] loop7: detected capacity change from 0 to 32768
[  381.518028][T14009] XFS: noikeep mount option is deprecated.
[  381.528053][T14010] loop5: detected capacity change from 0 to 32768
[  381.568531][T14033] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3090'.
[  381.608054][T14009] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  381.641758][T14010] JBD2: Ignoring recovery information on journal
[  381.818182][T14049] loop3: detected capacity change from 0 to 512
[  381.852825][T14010] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  381.902050][   T28] audit: type=1800 audit(2000000497.559:50): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3093" name="file2" dev="loop3" ino=1048661 res=0 errno=0
[  381.922931][    C1] vkms_vblank_simulate: vblank timer overrun
[  381.946027][T14009] XFS (loop7): Ending clean mount
[  381.956363][T14049] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216)
[  381.990059][T14049] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960)
[  382.026391][T14049] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960)
[  382.026756][T14009] XFS (loop7): Quotacheck needed: Please wait.
[  382.051004][T14049] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960)
[  382.071853][T14049] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960)
[  382.219070][T14009] XFS (loop7): Quotacheck: Done.
[  382.391277][T10781] ocfs2: Unmounting device (7,5) on (node local)
[  382.663510][T13125] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.956887][T14082] loop5: detected capacity change from 0 to 1024
[  383.211570][ T2903] hfsplus: b-tree write err: -5, ino 25
[  383.217380][ T2903] hfsplus: b-tree write err: -5, ino 4
[  383.240232][ T2903] hfsplus: b-tree write err: -5, ino 2
[  384.116851][   T42] wlan1: Trigger new scan to find an IBSS to join
[  384.890032][T14130] loop5: detected capacity change from 0 to 4096
[  385.009235][T14130] ntfs: volume version 3.1.
[  385.561186][T14151] loop7: detected capacity change from 0 to 8
[  385.623119][T14153] loop3: detected capacity change from 0 to 512
[  385.660750][T14151] SQUASHFS error: Unable to read directory block [629:fe]
[  385.688186][T14153] EXT4-fs (loop3): 1 truncate cleaned up
[  385.738349][T14153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.937839][   T28] audit: type=1800 audit(2000000501.589:51): pid=14153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3121" name="file1" dev="loop3" ino=13 res=0 errno=0
[  385.940453][T14153] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.3121: bg 0: block 465: padding at end of block bitmap is not set
[  386.047696][T14153] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28
[  386.090068][T14153] EXT4-fs (loop3): This should not happen!! Data will be lost
[  386.090068][T14153] 
[  386.118566][T14153] EXT4-fs (loop3): Total free blocks count 0
[  386.135246][T14153] EXT4-fs (loop3): Free/Dirty block details
[  386.143466][T14153] EXT4-fs (loop3): free_blocks=0
[  386.152149][T14153] EXT4-fs (loop3): dirty_blocks=9
[  386.158156][T14153] EXT4-fs (loop3): Block reservation details
[  386.164726][T14153] EXT4-fs (loop3): i_reserved_data_blocks=9
[  386.331342][T14175] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3127'.
[  386.361086][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.499744][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.797287][T14168] loop7: detected capacity change from 0 to 32768
[  387.131868][T14179] loop5: detected capacity change from 0 to 32768
[  387.158898][T14179] XFS: noikeep mount option is deprecated.
[  387.207650][T14179] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  387.512945][T14179] XFS (loop5): Ending clean mount
[  387.526960][T14179] XFS (loop5): Quotacheck needed: Please wait.
[  387.576916][T14211] loop3: detected capacity change from 0 to 64
[  387.704113][T14179] XFS (loop5): Quotacheck: Done.
[  387.725538][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3141'.
[  387.740709][T14215] netlink: 'syz.2.3141': attribute type 14 has an invalid length.
[  387.759267][T14215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3141'.
[  387.790097][ T1302] block nbd1: Possible stuck request ffff888021ef8000: control (read@0,1024B). Runtime 210 seconds
[  387.801689][ T1302] block nbd1: Possible stuck request ffff888021ef8200: control (read@1024,1024B). Runtime 210 seconds
[  387.814326][ T1302] block nbd1: Possible stuck request ffff888021ef8400: control (read@2048,1024B). Runtime 210 seconds
[  387.825879][ T1302] block nbd1: Possible stuck request ffff888021ef8600: control (read@3072,1024B). Runtime 210 seconds
[  388.081532][T10781] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  388.117298][T14221] loop3: detected capacity change from 0 to 128
[  388.511123][T14227] loop3: detected capacity change from 0 to 1024
[  388.667310][T14214] loop7: detected capacity change from 0 to 32768
[  388.706688][T14214] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  388.898095][T14214] XFS (loop7): Ending clean mount
[  388.938407][T14214] XFS (loop7): Quotacheck needed: Please wait.
[  389.102053][T14214] XFS (loop7): Quotacheck: Done.
[  389.150384][   T42] wlan1: Trigger new scan to find an IBSS to join
[  389.179987][ T5808] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  389.295444][T13125] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  389.401493][ T5808] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  389.430483][ T5808] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  389.440493][ T5808] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  389.451375][ T5808] usb 6-1: config 220 has no interface number 2
[  389.481985][ T5808] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  389.530342][ T5808] usb 6-1: config 220 interface 0 has no altsetting 0
[  389.537421][ T5808] usb 6-1: config 220 interface 76 has no altsetting 0
[  389.556106][ T5808] usb 6-1: config 220 interface 1 has no altsetting 0
[  389.596399][ T5808] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  389.629380][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.637618][ T5808] usb 6-1: Product: syz
[  389.679587][ T5808] usb 6-1: Manufacturer: syz
[  389.684245][ T5808] usb 6-1: SerialNumber: syz
[  389.834683][T14257] loop7: detected capacity change from 0 to 512
[  389.849912][T14257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  389.900200][T14257] EXT4-fs error (device loop7): ext4_orphan_get:1398: inode #15: comm syz.7.3153: iget: bad i_size value: 38620345925642
[  389.968589][ T5808] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  389.998215][T14257] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.3153: couldn't read orphan inode 15 (err -117)
[  390.019203][ T5808] usb 6-1: No valid video chain found.
[  390.032392][ T5808] usb 6-1: selecting invalid altsetting 0
[  390.046807][T14257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.084021][ T5808] usb 6-1: selecting invalid altsetting 0
[  390.091595][ T1303] wlan1: Creating new IBSS network, BSSID a6:eb:02:5d:90:c9
[  390.112423][ T5808] usbtest: probe of 6-1:220.1 failed with error -22
[  390.152319][ T5808] usb 6-1: USB disconnect, device number 15
[  390.226507][T14263] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm syz.7.3153: bg 0: block 5: invalid block bitmap
[  390.309406][T14263] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 528 with error 28
[  390.364283][T14263] EXT4-fs (loop7): This should not happen!! Data will be lost
[  390.364283][T14263] 
[  390.380606][T14263] EXT4-fs (loop7): Total free blocks count 0
[  390.396965][T14263] EXT4-fs (loop7): Free/Dirty block details
[  390.412130][T14263] EXT4-fs (loop7): free_blocks=0
[  390.422808][T14263] EXT4-fs (loop7): dirty_blocks=528
[  390.434963][T14263] EXT4-fs (loop7): Block reservation details
[  390.447807][T14263] EXT4-fs (loop7): i_reserved_data_blocks=528
[  390.586059][T13125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.951075][T14274] loop3: detected capacity change from 0 to 8192
[  391.014437][T14274] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  391.028393][T14274] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  391.038184][T14274] REISERFS (device loop3): using ordered data mode
[  391.045646][T14274] reiserfs: using flush barriers
[  391.052685][T14274] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  391.076135][T14274] REISERFS (device loop3): checking transaction log (loop3)
[  391.333650][T14274] REISERFS (device loop3): Using tea hash to sort names
[  391.341335][T14274] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  391.379519][T14274] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  391.755927][T14285] loop7: detected capacity change from 0 to 32768
[  391.807936][T14285] JBD2: Ignoring recovery information on journal
[  391.973084][T14285] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  392.232002][T14313] loop3: detected capacity change from 0 to 128
[  392.276201][T14320] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3183'.
[  392.287700][T14320] netlink: 'syz.2.3183': attribute type 9 has an invalid length.
[  392.297246][T14320] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3183'.
[  392.304556][ T9136] blk_print_req_error: 23 callbacks suppressed
[  392.304570][ T9136] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  392.307559][T14320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3183'.
[  392.465526][T13125] ocfs2: Unmounting device (7,7) on (node local)
[  393.542666][   T29] INFO: task syz.1.1722:10476 blocked for more than 143 seconds.
[  393.556673][   T29]       Not tainted syzkaller #0
[  393.562011][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  393.571944][   T29] task:syz.1.1722      state:D stack:24008 pid:10476 ppid:8159   flags:0x00004006
[  393.581415][   T29] Call Trace:
[  393.584812][   T29]  <TASK>
[  393.588150][   T29]  __schedule+0x1553/0x45a0
[  393.592932][   T29]  ? asan.module_dtor+0x20/0x20
[  393.597918][   T29]  ? __mutex_lock+0x6a4/0xcc0
[  393.602814][   T29]  ? __mutex_trylock_common+0x8a/0x260
[  393.608457][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  393.614837][   T29]  schedule+0xbd/0x170
[  393.619128][   T29]  schedule_preempt_disabled+0x13/0x20
[  393.625611][   T29]  __mutex_lock+0x6a9/0xcc0
[  393.630519][   T29]  ? __mutex_lock+0x4f9/0xcc0
[  393.635576][   T29]  ? sync_bdevs+0x1af/0x330
[  393.640304][ T5809] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  393.649222][   T29]  ? mutex_lock_nested+0x20/0x20
[  393.657785][   T29]  ? _atomic_dec_and_lock+0x93/0x120
[  393.668729][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  393.677693][   T29]  sync_bdevs+0x1af/0x330
[  393.686698][   T29]  ksys_sync+0xc6/0x170
[  393.694413][   T29]  ? sync_filesystem+0x220/0x220
[  393.704103][   T29]  ? syscall_enter_from_user_mode+0x25/0x80
[  393.714627][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  393.721206][   T29]  __ia32_sys_sync+0xe/0x20
[  393.725896][   T29]  do_syscall_64+0x55/0xa0
[  393.731071][   T29]  ? clear_bhb_loop+0x40/0x90
[  393.736215][   T29]  ? clear_bhb_loop+0x40/0x90
[  393.741051][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  393.747234][   T29] RIP: 0033:0x7f0e2879c819
[  393.751830][   T29] RSP: 002b:00007f0e29632028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  393.760499][   T29] RAX: ffffffffffffffda RBX: 00007f0e28a15fa0 RCX: 00007f0e2879c819
[  393.768603][   T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  393.777163][   T29] RBP: 00007f0e28a15fa0 R08: 0000000000000000 R09: 0000000000000000
[  393.785386][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.793815][   T29] R13: 00007f0e28a16038 R14: 00007f0e28a15fa0 R15: 00007fff3d4f4d28
[  393.802348][   T29]  </TASK>
[  393.805666][   T29] 
[  393.805666][   T29] Showing all locks held in the system:
[  393.813702][   T29] 1 lock held by khungtaskd/29:
[  393.818799][   T29]  #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  393.833747][ T5809] usb 4-1: Using ep0 maxpacket: 32
[  393.841094][ T5809] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  393.849683][ T5809] usb 4-1: config 0 has no interface number 0
[  393.855976][   T29] 2 locks held by getty/5523:
[  393.861467][ T5809] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  393.873155][   T29]  #0: ffff88802e1100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  393.884009][   T29]  #1: ffffc900015d02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  393.894599][ T5809] usb 4-1: config 0 interface 85 has no altsetting 0
[  393.901763][   T29] 1 lock held by udevd/5756:
[  393.906979][   T29]  #0: ffff888021dc34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  393.919193][   T29] 3 locks held by kworker/1:3/5809:
[  393.925027][ T5809] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  393.934494][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.949803][   T29] 2 locks held by kworker/1:5/5862:
[  393.957109][   T29]  #0: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  393.967361][ T5809] usb 4-1: Product: syz
[  393.972027][ T5809] usb 4-1: Manufacturer: syz
[  393.976749][ T5809] usb 4-1: SerialNumber: syz
[  393.981936][   T29]  #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0
[  393.997677][ T5809] usb 4-1: config 0 descriptor??
[  394.004250][   T29] 1 lock held by syz.1.1722/10476:
[  394.017696][   T29]  #0: ffff888021dc34c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330
[  394.027818][   T29] 1 lock held by syz.5.3203/14361:
[  394.033501][   T29] 
[  394.035978][   T29] =============================================
[  394.035978][   T29] 
[  394.045214][   T29] NMI backtrace for cpu 1
[  394.049578][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  394.056781][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  394.066850][   T29] Call Trace:
[  394.070146][   T29]  <TASK>
[  394.073080][   T29]  dump_stack_lvl+0x18c/0x250
[  394.077779][   T29]  ? show_regs_print_info+0x20/0x20
[  394.082999][   T29]  ? load_image+0x400/0x400
[  394.087532][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  394.092480][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  394.098642][   T29]  ? _printk+0xde/0x130
[  394.102811][   T29]  ? load_image+0x400/0x400
[  394.107364][   T29]  ? load_image+0x400/0x400
[  394.111896][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  394.117974][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  394.123951][   T29]  watchdog+0xf3d/0xf80
[  394.128105][   T29]  ? watchdog+0x1e1/0xf80
[  394.132433][   T29]  kthread+0x2fa/0x390
[  394.136592][   T29]  ? hungtask_pm_notify+0x90/0x90
[  394.141612][   T29]  ? kthread_blkcg+0xd0/0xd0
[  394.146204][   T29]  ret_from_fork+0x48/0x80
[  394.150619][   T29]  ? kthread_blkcg+0xd0/0xd0
[  394.155206][   T29]  ret_from_fork_asm+0x11/0x20
[  394.159974][   T29]  </TASK>
[  394.163058][    C1] vkms_vblank_simulate: vblank timer overrun
[  394.169793][   T29] Sending NMI from CPU 1 to CPUs 0:
[  394.175115][    C0] NMI backtrace for cpu 0
[  394.175127][    C0] CPU: 0 PID: 1303 Comm: kworker/u4:6 Not tainted syzkaller #0
[  394.175142][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  394.175152][    C0] Workqueue: bat_events batadv_nc_worker
[  394.175170][    C0] RIP: 0010:lock_release+0x56d/0x8c0
[  394.175191][    C0] Code: ff ff ff 65 0f c1 05 fa d7 99 7e 83 f8 01 75 7f 43 c6 44 2f 04 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 <f7> 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24
[  394.175204][    C0] RSP: 0018:ffffc90004f6fa40 EFLAGS: 00000046
[  394.175216][    C0] RAX: 0000000000000001 RBX: 787ecb18009b4bcb RCX: 6d0a97d2b1b77200
[  394.175226][    C0] RDX: 0000000000000002 RSI: ffffffff8acadb60 RDI: ffffffff8b1c89a0
[  394.175243][    C0] RBP: ffffc90004f6fb50 R08: ffffffff8e8b02af R09: 1ffffffff1d16055
[  394.175254][    C0] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: ffff888024bde530
[  394.175265][    C0] R13: dffffc0000000000 R14: ffff888024bde4d0 R15: 1ffff920009edf54
[  394.175275][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  394.175289][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  394.175299][    C0] CR2: 00007f1315be7158 CR3: 000000005d99a000 CR4: 00000000003506f0
[  394.175312][    C0] Call Trace:
[  394.175318][    C0]  <TASK>
[  394.175328][    C0]  ? batadv_nc_worker+0xd2/0x610
[  394.175343][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  394.175361][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  394.175380][    C0]  ? batadv_nc_worker+0xd2/0x610
[  394.175395][    C0]  batadv_nc_worker+0x291/0x610
[  394.175411][    C0]  ? process_scheduled_works+0x96f/0x15d0
[  394.175430][    C0]  process_scheduled_works+0xa5d/0x15d0
[  394.175462][    C0]  ? worker_attach_to_pool+0x380/0x380
[  394.175483][    C0]  ? assign_work+0x3d2/0x5d0
[  394.175508][    C0]  worker_thread+0xa55/0xfc0
[  394.175539][    C0]  kthread+0x2fa/0x390
[  394.175553][    C0]  ? pr_cont_work+0x560/0x560
[  394.175570][    C0]  ? kthread_blkcg+0xd0/0xd0
[  394.175584][    C0]  ret_from_fork+0x48/0x80
[  394.175602][    C0]  ? kthread_blkcg+0xd0/0xd0
[  394.175616][    C0]  ret_from_fork_asm+0x11/0x20
[  394.175643][    C0]  </TASK>
[  394.329639][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  394.329654][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  394.329670][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  394.329679][   T29] Call Trace:
[  394.329686][   T29]  <TASK>
[  394.329692][   T29]  dump_stack_lvl+0x18c/0x250
[  394.329720][   T29]  ? show_regs_print_info+0x20/0x20
[  394.329743][   T29]  ? load_image+0x400/0x400
[  394.329771][   T29]  panic+0x2dc/0x730
[  394.329788][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  394.329814][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  394.329831][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  394.329853][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  394.329876][   T29]  watchdog+0xf7c/0xf80
[  394.329897][   T29]  ? watchdog+0x1e1/0xf80
[  394.329923][   T29]  kthread+0x2fa/0x390
[  394.329938][   T29]  ? hungtask_pm_notify+0x90/0x90
[  394.329957][   T29]  ? kthread_blkcg+0xd0/0xd0
[  394.329971][   T29]  ret_from_fork+0x48/0x80
[  394.329989][   T29]  ? kthread_blkcg+0xd0/0xd0
[  394.330004][   T29]  ret_from_fork_asm+0x11/0x20
[  394.330038][   T29]  </TASK>
[  394.333333][    C1] vkms_vblank_simulate: vblank timer overrun
[  394.333775][   T29] Kernel Offset: disabled
[  394.508499][   T29] Rebooting in 86400 seconds..