last executing test programs:

3m32.066149906s ago: executing program 4 (id=255):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001d00)=""/134, 0x86}], 0x1, 0x3c, 0x5)

3m30.919978771s ago: executing program 4 (id=263):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)

3m28.264777528s ago: executing program 4 (id=268):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fchdir(0xffffffffffffffff)
clock_gettime(0x0, 0x0)
r2 = dup(r1)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m27.318099741s ago: executing program 4 (id=270):
sched_setaffinity(0x0, 0x0, 0x0)
pipe(0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfea4, 0xd)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
mkdir(0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)

3m24.013413305s ago: executing program 4 (id=282):
syslog(0x4, &(0x7f00000001c0)=""/210, 0xd2)

3m16.848528613s ago: executing program 4 (id=299):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800304, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0x1}}, {@block_validity}]}, 0xff, 0x4a1, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x104)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)=ANY=[])
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil)
shmat(r5, &(0x7f0000001000/0x3000)=nil, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24048811)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8080c61)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x100000000a, 0x7, 0xf})

3m15.967558525s ago: executing program 32 (id=299):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800304, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0x1}}, {@block_validity}]}, 0xff, 0x4a1, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x104)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0)
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)=ANY=[])
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil)
shmat(r5, &(0x7f0000001000/0x3000)=nil, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24048811)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8080c61)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x100000000a, 0x7, 0xf})

59.727510978s ago: executing program 5 (id=739):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x100, 0x70, 0x8, 0x1ff, 0xb, 0x100, 0xfeba, 0x407, 0x8000, 0x0, 0x100, 0x9}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

55.402198797s ago: executing program 5 (id=752):
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e0100000824030100021007f8bc5f70195877"], 0x0)

53.575218062s ago: executing program 5 (id=758):
unshare(0x24060400)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000003c0)={[{@inlinecrypt}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

51.706579897s ago: executing program 5 (id=763):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1201008, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="747970653dd88d17102c6e6c733d61736369692c00b65c5e80ee881a8017a99080db5f384bdecc38aad57f2265deb9bc09ceaa37a446dd9779c499df84c71ac5709884f5a46a6157a859efa0011b98ed9e0084e7f30840308a546dfc131f58f11e2885d3d93d1ea670d769ec2f0aa0c9e9bc2dce36eb80f93e9c66e51cd63047e63897ad645ff9e1c43c323948225427a038840483468e20afe97ee11df867f724292017e27da8ee18b36e12ec848a02f157f0c97084870848c3f5103ccfd56e4127491ea8e57c6de2a2684c421731b94b9a8eb0a73852ee4f6b71e76393bd", @ANYRES64, @ANYBLOB="ddfc36c1a86d80c396383ffcc197726f90603a191b7251c97237be8b92a4e2bee79ac5b0a630acc01ff6292ade8efe9a2912e4d5c0a67df08eb1b07fed89a1ed56983cea56d5a14532e0ca6acc7a0c89adaa25f5a6ab6af98d2a5615273b84368fe9a8162067e4931fc69722717bf6fa16ed2b3637b6a2d728ce8e1da3aaf1c1675d818a3346c6ec8521fb5e76a80770c3c036017ab72c5284bf759b76b729d4eaa7a132ebd7f6043c22b32b", @ANYRES16=0x0], 0x4, 0x5d9, &(0x7f00000010c0)="$eJzs3U9rHOcdB/DvrNZrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWWdhV/Pvaz8zx6Zn7zm9/OjHZXAgV4aS3PpfkwRZbn3tsqxzvbne7OdufuoJ/kbJJG9T/NsvvPZOpBMpt+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umWpTnLpBcZ79I3jFcMjLINeHwSfBI+f7z/HuPupY4zNYbT6i+IZz8VMci7JdH0fGJy4jRPM8FhMzAUIAAAAx+iV3exmK+fHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJvXf/y/q1hj0Z1MM/v5/q/5a6v6p9nDcCQAAAAAAAADAC/CD3exmK+cH48dF9TP/t6vBherxO/k4m1nNRi5nKyvppZeNLCSZGQnU2lrp9TYWDrHl4r5bLp7M8QIAAAAAAADAt9Rfsrz3838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgERTLVX1TtwqA/k0YzyXSSVrneveQfg/5p9nDcCQAAAMAJeGU3u9nK+cH4cVG953+jet8/nY+znl7W0ks3q7lZfRbQf9ff2NnudHe2O3fL9nTc3/77SGlUEdP/7GH/PV+q1mjn1p1mvc0f82G6uZlGtWXp0iCf/fO6X+ZU/KZ2yMxu1ssiKb5ffxoyGWaqipzJraxVNZqvcyur8erBlTjis/PknhbSGH7yc+EYan6uXpY1n57omi+OnH1vHFyJ5EfX/rt+u7t+5/atzbnJOaSv6clKdEYq8eZLVYn5qhIXh+Pl/D43MpfZvJ+NrOVPWUkvq5nN9aq3Up/P5ePMwZVa+sro/edl0qqfl/5d9Gg5vV1tez5r+UM+zM2s5pdZzNW8k4X8qvp3deQZvniIq75xtKv+hz+tO68lRbu/nBBlXV8dqevoPXemmhv9yl6VXnvx98bm9+rOVFI0hzlNgicrsTBSidcPrsRfH5ePm931Oxu3Vz465P5+Ui/L7xJnn/td4iTr1KrP3v4rla+eHeXc6/vOLVRzF4ZzjafmLg7nnnelturXcE9HWqzm3tx3rlPNXRqZaw/nLg9fbwEw8c797Fyr/a/239uftR+0b7ffm/7d2XfOvtXKmUdnft2cn/px463ib/ksf957/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx9m598emel213d0NHR0Rl2xn1n4iRc6d396MrmJ5/+fO3uygerH6yud+Z/sfhuZ2Hx3atXbq11V+f7j+NOk2Oyd9GPOxMAAAAAAAAAAACO4iR+nXTcxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTyX5sMUWZi/PF+Od7Y73bIN+ntrNpI0y+X/kqkHyWz6LTMj4Ypn7efaF5838+X9G3uxGoP1pw7a7nDu1S1LdZJLLzDeo28crxgeYRn0+iA4jNv/AwAA///YHBzc")
getpid()

51.110170726s ago: executing program 5 (id=765):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001600)={0x2, 0x17, 0x4, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x800)

50.599529762s ago: executing program 5 (id=767):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x3}, 0x1c)
listen(r3, 0x4)
syz_emit_ethernet(0x56, &(0x7f0000000640)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x7}]}}}}}}}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2645, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
r5 = socket(0x2, 0x3, 0xff)
close(r5)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)

50.136228349s ago: executing program 33 (id=767):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x3}, 0x1c)
listen(r3, 0x4)
syz_emit_ethernet(0x56, &(0x7f0000000640)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x7}]}}}}}}}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2645, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
r5 = socket(0x2, 0x3, 0xff)
close(r5)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)

17.238491426s ago: executing program 3 (id=872):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x41, 0x9ea, &(0x7f0000004100)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000240)='./file0/bus\x00', 0x80000000)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

13.356938979s ago: executing program 3 (id=881):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x28, 0x1, 0x0)
r3 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}})
io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0)

11.903512919s ago: executing program 2 (id=884):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="040001"])

11.578265383s ago: executing program 2 (id=886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)

11.577598143s ago: executing program 1 (id=887):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000001b40)=0x9)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x1a0, 0x388, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'vxcan1\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [0x0, 0xffffff00, 0x0, 0xffffffff], 'batadv_slave_1\x00', 'wlan0\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'vxcan1\x00', 'vlan1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
recvmmsg(r1, &(0x7f000000a400), 0x6fe, 0x10163, 0x0)

11.366949886s ago: executing program 2 (id=888):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, 0x0, 0x0, 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2645, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

11.347715046s ago: executing program 0 (id=889):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0), 0x0, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x400)
syz_open_procfs(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@delalloc}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")

10.631903956s ago: executing program 2 (id=890):
unshare(0x64050800)
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x800)
syz_io_uring_setup(0xba, 0x0, &(0x7f0000000040), &(0x7f0000000840))
io_uring_enter(0xffffffffffffffff, 0xb15, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000038000107000000000000000006000000aacd73dc31686e37b57ae7659f004f017f52882f1c"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000)

9.61182416s ago: executing program 0 (id=891):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x41, 0x9ea, &(0x7f0000004100)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000240)='./file0/bus\x00', 0x80000000)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

9.525990251s ago: executing program 1 (id=892):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
socket$nl_generic(0x10, 0x3, 0x10)
ptrace$cont(0x9, r2, 0xb, 0x80000000000)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101)
r4 = epoll_create1(0x80000)
epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x7f36be39)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x1f})

9.026814798s ago: executing program 1 (id=893):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000140)={0x640c, 0x0})
r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000001200)={0x2, 0x7, "c014fa", 0x1, 0x1})
r4 = syz_usb_connect(0x6, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0xe9, 0x53, 0x2c, 0x20, 0x45e, 0x4cc, 0x779e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x3, 0x60, 0x6, [{{0x9, 0x4, 0x91, 0xa, 0x0, 0x74, 0xf, 0x51, 0x5}}]}}]}}, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x1}, 0x8)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@noload}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x103800, 0x0)
ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f00000001c0)={0x0, 0x9, 0x8})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ptrace(0x11, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
ptrace(0x10, 0x0)
add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ptrace(0x11, 0x0)

8.749474472s ago: executing program 3 (id=894):
r0 = socket(0x200000000000011, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x448a, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r2, 0x1, 0x20, 0x6, @local}, 0x14)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4)
recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)

8.282139488s ago: executing program 3 (id=895):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
write$tcp_mem(r4, &(0x7f0000000240)={0x8, 0x2d, 0x9, 0x3a, 0x7, 0x2c}, 0x48)

7.294241101s ago: executing program 1 (id=897):
timerfd_create(0x0, 0x0)
socket$inet(0x2b, 0x801, 0x0)
unshare(0x600)
pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x3, 0x0, 0x0, 0x1}, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x2128, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0)

7.022338405s ago: executing program 6 (id=898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x0, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)

6.975975606s ago: executing program 1 (id=899):
mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0)

6.761415459s ago: executing program 6 (id=900):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, 0x0, 0x0, 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2645, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

6.465784192s ago: executing program 2 (id=901):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0)
io_setup(0x7, &(0x7f0000000380))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
clock_adjtime(0x3, &(0x7f0000000280)={0x6, 0x8, 0x1, 0x0, 0x7f, 0xe6, 0x1, 0x1, 0x5, 0x7ff, 0x1, 0x23c4, 0x100000000000000, 0x2, 0xffffffff, 0xa, 0xffffffffffffffff, 0x2, 0x7f, 0x4, 0x9d8, 0x5, 0x7, 0x7537, 0xffffffff, 0x7})
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, &(0x7f0000000500)="260f6e9b00000000b80d0000000f23c00f21f83503000f000f23f8640fc7bf04000000c4e16a5f7b8c9a1900000082000f664baa3ff4f0ff0e0f5b38", 0x3c}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x4)
r5 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000440)={@dev, @private, @multicast2}, 0x0)
sendmsg$key(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r4], 0x78}}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x41, 0x3, 0x3, '\x00', 0x8})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
nanosleep(0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

6.323979805s ago: executing program 0 (id=902):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0xfffe, @multicast, 'bond0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
close(r0)

5.708263253s ago: executing program 6 (id=903):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
socket$nl_generic(0x10, 0x3, 0x10)
ptrace$cont(0x9, r2, 0xb, 0x80000000000)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101)
r4 = epoll_create1(0x80000)
epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x7f36be39)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x1f})

5.637064214s ago: executing program 0 (id=904):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000001b40)=0x9)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x1a0, 0x388, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'vxcan1\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [0x0, 0xffffff00, 0x0, 0xffffffff], 'batadv_slave_1\x00', 'wlan0\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'vxcan1\x00', 'vlan1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
recvmmsg(r1, &(0x7f000000a400), 0x6fe, 0x10163, 0x0)

4.511062839s ago: executing program 0 (id=905):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x68}}, 0x24040880)

4.307019812s ago: executing program 3 (id=906):
socket$netlink(0x10, 0x3, 0x4)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x11)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0)
semget$private(0x0, 0x4000, 0x0)
unshare(0x20060400)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)

4.238158223s ago: executing program 0 (id=907):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil})
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7ffffffe, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)
r9 = socket(0xf, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x1070bd25, 0x40, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x40001}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20050081}, 0x0)

3.668699711s ago: executing program 1 (id=908):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080), 0x4)
listen(r3, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94)
r4 = syz_pidfd_open(0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000640)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x2, 0x2000000, {0x0, 0xfc01, 0x9, 0x0, 0x8, 0xfdff, 0xffff, 0x20, 0x0, 0x9, 0x0, 0x7, 0x7fff, 0x3, "d20bddda7d1db9342de76eec7967fe97752251560ed100"}})
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x80044d12, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e000102000000000000", @ANYRES32=r4, @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8100)
openat$nullb(0xffffffffffffff9c, 0x0, 0x240, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018)
r9 = syz_open_dev$sndpcmp(&(0x7f0000003700), 0x1ff, 0x3)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, 0x0)

2.842779142s ago: executing program 6 (id=909):
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000002c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00')
rt_sigaction(0x40, &(0x7f0000000140)={0x0, 0x10000003, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300))
preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
rmdir(0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
timerfd_create(0x8, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r5, 0x400, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f00000001c0)={[{@inlinecrypt}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x463, &(0x7f0000000e00)="$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")

1.012839657s ago: executing program 6 (id=910):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x0, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)

465.131584ms ago: executing program 6 (id=911):
socket$can_j1939(0x1d, 0x2, 0x7)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x5b2)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x10800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000040))
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000)
socket$kcm(0x10, 0x2, 0x0)
gettid()

76.294119ms ago: executing program 3 (id=912):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000240)='./file0/bus\x00', 0x80000000)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

0s ago: executing program 2 (id=913):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, 0x0, 0x0, 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2645, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

kernel console output (not intermixed with test programs):

duct=0, SerialNumber=0
[  205.963287][ T4364] usb 6-1: config 0 descriptor??
[  205.996844][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  206.189325][   T14] usb 6-1: USB disconnect, device number 2
[  207.208110][ T5933] loop2: detected capacity change from 0 to 128
[  207.452455][ T5933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  207.467894][ T5936] loop3: detected capacity change from 0 to 512
[  207.532390][ T5933] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.626336][ T5936] EXT4-fs: Ignoring removed mblk_io_submit option
[  207.772921][ T5936] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  207.871896][ T5936] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.439: attempt to clear invalid blocks 2 len 1
[  208.020518][ T5936] EXT4-fs (loop3): Remounting filesystem read-only
[  208.027245][ T5936] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  208.127405][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  208.280296][ T5936] EXT4-fs (loop3): Remounting filesystem read-only
[  208.287164][ T5936] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.439: invalid indirect mapped block 1819239214 (level 0)
[  208.508213][ T5936] EXT4-fs (loop3): Remounting filesystem read-only
[  208.530692][ T5936] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.439: invalid indirect mapped block 1819239214 (level 1)
[  208.758062][ T5936] EXT4-fs (loop3): Remounting filesystem read-only
[  208.776446][ T5936] EXT4-fs (loop3): 1 truncate cleaned up
[  208.794180][ T5963] loop1: detected capacity change from 0 to 512
[  208.813609][ T5936] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  208.851983][ T5966] loop2: detected capacity change from 0 to 512
[  208.859166][ T5966] EXT4-fs: inline encryption not supported
[  208.865120][ T5966] EXT4-fs: Ignoring removed bh option
[  208.883142][ T5966] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  208.941700][ T5966] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.443: corrupted in-inode xattr
[  208.956356][ T5966] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.443: couldn't read orphan inode 15 (err -117)
[  208.969115][ T5966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  209.086625][ T5963] EXT4-fs: Ignoring removed nobh option
[  209.151569][ T5963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  209.163476][ T5936] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work
[  209.247971][ T5963] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.447: invalid indirect mapped block 256 (level 2)
[  209.270667][ T5963] EXT4-fs (loop1): 2 truncates cleaned up
[  209.283393][ T5963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  210.930656][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  210.950199][ T4449] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:12: bg 0: block 5: invalid block bitmap
[  211.148467][ T4449] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  211.196755][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  211.210232][ T4449] EXT4-fs (loop1): This should not happen!! Data will be lost
[  211.210232][ T4449] 
[  211.282098][ T5984] loop5: detected capacity change from 0 to 256
[  211.290532][ T4449] EXT4-fs (loop1): Total free blocks count 0
[  211.296881][ T4449] EXT4-fs (loop1): Free/Dirty block details
[  211.378947][ T4449] EXT4-fs (loop1): free_blocks=0
[  211.416611][ T5984] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  211.470619][ T4449] EXT4-fs (loop1): dirty_blocks=4992
[  211.475991][ T4449] EXT4-fs (loop1): Block reservation details
[  211.524790][   T26] audit: type=1800 audit(1746876623.412:39): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.452" name="file2" dev="loop5" ino=1048652 res=0 errno=0
[  211.578487][ T4449] EXT4-fs (loop1): i_reserved_data_blocks=4992
[  211.655713][   T26] audit: type=1800 audit(1746876623.462:40): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.452" name="file2" dev="loop5" ino=1048652 res=0 errno=0
[  211.789018][ T4449] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  211.870437][ T4299] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  212.050429][ T4299] usb 6-1: Using ep0 maxpacket: 8
[  212.057552][ T4299] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  212.200438][ T4299] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  212.245472][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.280290][ T6003] device batadv_slave_0 entered promiscuous mode
[  212.282053][ T4299] usb 6-1: config 0 descriptor??
[  212.319299][ T5998] device batadv_slave_0 left promiscuous mode
[  212.705447][ T4364] usb 6-1: USB disconnect, device number 3
[  213.616181][ T6028] loop1: detected capacity change from 0 to 1024
[  213.665952][ T6028] EXT4-fs: Ignoring removed bh option
[  213.777759][ T6028] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  214.552597][ T6034] loop5: detected capacity change from 0 to 512
[  214.628069][ T6028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  214.637984][ T6034] EXT4-fs: Ignoring removed mblk_io_submit option
[  214.705728][ T6034] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  214.754407][ T6046] loop3: detected capacity change from 0 to 256
[  215.023655][ T6034] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.463: attempt to clear invalid blocks 2 len 1
[  215.024056][ T6034] EXT4-fs (loop5): Remounting filesystem read-only
[  215.024192][ T6034] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  215.024554][ T6034] EXT4-fs (loop5): Remounting filesystem read-only
[  215.024656][ T6034] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.463: invalid indirect mapped block 1819239214 (level 0)
[  215.025001][ T6034] EXT4-fs (loop5): Remounting filesystem read-only
[  215.025031][ T6034] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.463: invalid indirect mapped block 1819239214 (level 1)
[  215.025364][ T6034] EXT4-fs (loop5): Remounting filesystem read-only
[  215.025777][ T6034] EXT4-fs (loop5): 1 truncate cleaned up
[  215.025809][ T6034] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  215.028387][ T6034] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.463: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  215.028804][ T6034] EXT4-fs (loop5): Remounting filesystem read-only
[  216.045682][ T6046] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  216.045797][ T6046] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  216.045832][ T6046] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  216.047298][   T26] audit: type=1800 audit(1746876627.932:41): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.465" name="file1" dev="loop3" ino=1048654 res=0 errno=0
[  216.094962][ T6046] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  216.103778][ T6034] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work
[  216.931728][ T5413] EXT4-fs (loop5): unmounting filesystem.
[  217.771081][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  217.868961][ T6076] loop2: detected capacity change from 0 to 256
[  217.914047][ T6076] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  217.949623][   T26] audit: type=1800 audit(1746876629.832:42): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.474" name="file2" dev="loop2" ino=1048655 res=0 errno=0
[  218.037861][   T26] audit: type=1800 audit(1746876629.842:43): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.474" name="file2" dev="loop2" ino=1048655 res=0 errno=0
[  218.227109][ T6082] loop5: detected capacity change from 0 to 512
[  218.234372][ T6082] EXT4-fs: inline encryption not supported
[  218.240709][ T6082] EXT4-fs: Ignoring removed bh option
[  218.240969][ T1170] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  218.255256][ T6082] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  218.303654][ T6082] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.476: corrupted in-inode xattr
[  218.319299][ T6082] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.476: couldn't read orphan inode 15 (err -117)
[  218.337566][ T6082] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  219.305282][ T6097] loop1: detected capacity change from 0 to 512
[  219.426519][ T5413] EXT4-fs (loop5): unmounting filesystem.
[  219.674713][ T6097] EXT4-fs: Ignoring removed mblk_io_submit option
[  220.912951][ T6097] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  220.930401][ T1170] usb 3-1: Using ep0 maxpacket: 8
[  220.975418][ T6097] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.480: attempt to clear invalid blocks 2 len 1
[  221.054925][ T1170] usb 3-1: device descriptor read/all, error -71
[  221.160478][ T6097] EXT4-fs (loop1): Remounting filesystem read-only
[  221.167215][ T6097] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  221.335848][ T6097] EXT4-fs (loop1): Remounting filesystem read-only
[  221.400728][ T6097] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.480: invalid indirect mapped block 1819239214 (level 0)
[  221.476160][ T6097] EXT4-fs (loop1): Remounting filesystem read-only
[  221.499690][ T6097] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.480: invalid indirect mapped block 1819239214 (level 1)
[  221.670959][ T6097] EXT4-fs (loop1): Remounting filesystem read-only
[  221.688507][ T6097] EXT4-fs (loop1): 1 truncate cleaned up
[  221.738021][ T6097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  221.826960][ T6097] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.480: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  221.997287][ T6097] EXT4-fs (loop1): Remounting filesystem read-only
[  222.125695][ T6097] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work
[  222.331024][ T6134] loop2: detected capacity change from 0 to 1024
[  222.349365][ T6134] EXT4-fs: Ignoring removed bh option
[  222.436008][   T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  222.460710][ T6134] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  222.647393][   T14] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  222.679229][   T14] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  223.652915][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  223.681844][ T6134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  223.711953][ T6150] loop3: detected capacity change from 0 to 512
[  223.719144][ T6150] EXT4-fs: inline encryption not supported
[  223.725087][ T6150] EXT4-fs: Ignoring removed bh option
[  223.751008][ T6150] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  223.781821][ T6150] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.492: corrupted in-inode xattr
[  223.806912][ T6150] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.492: couldn't read orphan inode 15 (err -117)
[  223.819321][ T6150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  223.838392][   T14] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  223.848960][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  223.857145][   T14] usb 6-1: SerialNumber: syz
[  223.865349][ T6131] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  224.083233][ T6131] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  225.343657][   T14] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42
[  225.375747][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  225.388254][ T6159] loop1: detected capacity change from 0 to 256
[  225.481000][ T6159] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  225.553424][   T14] usb 6-1: USB disconnect, device number 4
[  225.573964][   T26] audit: type=1800 audit(1746876637.462:44): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.493" name="file2" dev="loop1" ino=1048656 res=0 errno=0
[  225.615850][   T14] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device
[  225.698096][   T26] audit: type=1800 audit(1746876637.492:45): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.493" name="file2" dev="loop1" ino=1048656 res=0 errno=0
[  225.951635][ T4303] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  226.141029][ T4303] usb 2-1: Using ep0 maxpacket: 8
[  226.153992][ T4303] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  226.168820][ T6175] netlink: 52 bytes leftover after parsing attributes in process `syz.0.499'.
[  226.197002][ T4303] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  226.227636][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.269624][ T4303] usb 2-1: config 0 descriptor??
[  226.492186][ T4300] usb 2-1: USB disconnect, device number 8
[  226.638417][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  227.637391][ T6195] loop5: detected capacity change from 0 to 512
[  227.671853][ T6195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  227.732440][ T6195] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.972142][ T6195] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  228.064161][ T6195] EXT4-fs error (device loop5): __ext4_new_inode:1350: inode #18: comm syz.5.503: mark_inode_dirty error
[  228.124971][ T6195] EXT4-fs error (device loop5) in __ext4_new_inode:1352: Corrupt filesystem
[  228.200742][ T6195] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  228.292221][ T6195] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #18: comm syz.5.503: mark_inode_dirty error
[  228.382038][ T6195] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  228.668270][ T6208] loop2: detected capacity change from 0 to 512
[  228.675513][ T6208] EXT4-fs: inline encryption not supported
[  228.681463][ T6208] EXT4-fs: Ignoring removed bh option
[  228.699103][ T6208] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  228.782960][ T6208] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.506: corrupted in-inode xattr
[  228.803654][ T6208] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.506: couldn't read orphan inode 15 (err -117)
[  228.819116][ T6208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  228.884855][ T6212] loop1: detected capacity change from 0 to 512
[  228.917276][ T6212] EXT4-fs: Ignoring removed nobh option
[  228.933575][ T6212] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  228.941360][ T5413] EXT4-fs (loop5): unmounting filesystem.
[  228.966097][ T6212] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.507: invalid indirect mapped block 256 (level 2)
[  229.040151][ T6212] EXT4-fs (loop1): 2 truncates cleaned up
[  229.066611][ T6212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  230.245977][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  230.285052][ T4446] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:10: bg 0: block 5: invalid block bitmap
[  230.345549][ T4446] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  230.460051][ T4446] EXT4-fs (loop1): This should not happen!! Data will be lost
[  230.460051][ T4446] 
[  230.601044][ T4446] EXT4-fs (loop1): Total free blocks count 0
[  230.639257][ T4446] EXT4-fs (loop1): Free/Dirty block details
[  230.679575][ T4446] EXT4-fs (loop1): free_blocks=0
[  230.704475][ T4446] EXT4-fs (loop1): dirty_blocks=2456
[  230.734408][ T4446] EXT4-fs (loop1): Block reservation details
[  230.767858][ T4446] EXT4-fs (loop1): i_reserved_data_blocks=2456
[  231.579299][ T4446] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 404 with error 28
[  231.665617][ T6240] loop2: detected capacity change from 0 to 256
[  231.816115][ T6240] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  232.040572][   T26] audit: type=1800 audit(1746876643.842:46): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.516" name="file2" dev="loop2" ino=1048657 res=0 errno=0
[  232.260684][  T952] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  232.470425][  T952] usb 3-1: Using ep0 maxpacket: 8
[  232.477737][  T952] usb 3-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  232.518974][  T952] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  232.619402][  T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.738721][  T952] usb 3-1: config 0 descriptor??
[  232.960225][  T952] usb 3-1: USB disconnect, device number 11
[  233.209642][ T6261] loop1: detected capacity change from 0 to 8192
[  233.407859][ T6265] loop3: detected capacity change from 0 to 512
[  233.415326][ T6265] EXT4-fs: inline encryption not supported
[  233.421282][ T6265] EXT4-fs: Ignoring removed bh option
[  233.436628][ T6265] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  233.494033][ T6265] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.522: corrupted in-inode xattr
[  233.507581][ T6265] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.522: couldn't read orphan inode 15 (err -117)
[  233.520813][ T6265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  234.597489][ T6273] loop5: detected capacity change from 0 to 764
[  235.416560][ T6279] loop2: detected capacity change from 0 to 256
[  235.660028][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  235.940211][ T6297] loop3: detected capacity change from 0 to 1024
[  237.058682][ T6310] loop1: detected capacity change from 0 to 512
[  237.378530][ T6310] EXT4-fs: Ignoring removed mblk_io_submit option
[  237.495460][ T6310] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  237.568961][ T6310] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.535: attempt to clear invalid blocks 2 len 1
[  237.654705][ T6319] loop3: detected capacity change from 0 to 256
[  237.678840][ T6310] EXT4-fs (loop1): Remounting filesystem read-only
[  237.735175][ T6310] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  237.810566][ T6319] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  237.882861][ T6310] EXT4-fs (loop1): Remounting filesystem read-only
[  237.956519][ T6310] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.535: invalid indirect mapped block 1819239214 (level 0)
[  238.019607][ T6310] EXT4-fs (loop1): Remounting filesystem read-only
[  238.030784][ T6310] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.535: invalid indirect mapped block 1819239214 (level 1)
[  238.103860][ T6310] EXT4-fs (loop1): Remounting filesystem read-only
[  238.129703][ T6310] EXT4-fs (loop1): 1 truncate cleaned up
[  238.147258][ T6310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  238.200447][  T952] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  238.225616][ T6310] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.535: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  238.300914][ T6310] EXT4-fs (loop1): Remounting filesystem read-only
[  238.440274][ T6310] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work
[  238.550397][  T952] usb 4-1: Using ep0 maxpacket: 8
[  238.571277][  T952] usb 4-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  238.583645][  T952] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  238.626127][  T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.401147][  T952] usb 4-1: config 0 descriptor??
[  239.623739][  T952] usb 4-1: USB disconnect, device number 6
[  239.897864][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  240.183440][ T6339] loop1: detected capacity change from 0 to 1024
[  240.220217][ T6339] hfsplus: unable to parse mount options
[  241.032643][ T6354] loop3: detected capacity change from 0 to 128
[  241.688941][ T6369] loop5: detected capacity change from 0 to 128
[  243.456500][ T6377] loop1: detected capacity change from 0 to 512
[  243.788866][ T6384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  244.426409][ T6377] EXT4-fs: Ignoring removed nobh option
[  244.467700][ T6377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  244.514224][ T6388] loop2: detected capacity change from 0 to 512
[  244.552527][ T6388] EXT4-fs: Ignoring removed mblk_io_submit option
[  244.600702][ T6377] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.550: invalid indirect mapped block 256 (level 2)
[  244.659462][ T6388] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  244.666900][ T6377] EXT4-fs (loop1): 2 truncates cleaned up
[  244.681680][ T6377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  244.740403][ T6388] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.553: attempt to clear invalid blocks 2 len 1
[  245.059191][ T6388] EXT4-fs (loop2): Remounting filesystem read-only
[  245.076661][ T6388] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  245.706081][ T6388] EXT4-fs (loop2): Remounting filesystem read-only
[  245.721022][ T6388] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.553: invalid indirect mapped block 1819239214 (level 0)
[  245.750534][ T6392] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  245.830949][ T6388] EXT4-fs (loop2): Remounting filesystem read-only
[  245.870553][ T6388] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.553: invalid indirect mapped block 1819239214 (level 1)
[  245.906274][ T4452] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1824 with error 28
[  245.946169][ T4452] EXT4-fs (loop1): This should not happen!! Data will be lost
[  245.946169][ T4452] 
[  245.956437][ T6388] EXT4-fs (loop2): Remounting filesystem read-only
[  245.979283][ T6388] EXT4-fs (loop2): 1 truncate cleaned up
[  245.980614][ T4452] EXT4-fs (loop1): Total free blocks count 0
[  245.996134][ T6388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  246.000577][ T4452] EXT4-fs (loop1): Free/Dirty block details
[  246.033784][ T6388] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.553: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  246.045492][ T4452] EXT4-fs (loop1): free_blocks=0
[  246.074042][ T6388] EXT4-fs (loop2): Remounting filesystem read-only
[  246.090393][ T4452] EXT4-fs (loop1): dirty_blocks=1824
[  246.095780][ T4452] EXT4-fs (loop1): Block reservation details
[  246.140367][ T4452] EXT4-fs (loop1): i_reserved_data_blocks=1824
[  246.155764][ T6388] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work
[  246.269708][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  246.814546][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  248.467512][ T6433] loop2: detected capacity change from 0 to 256
[  249.603399][ T6446] loop2: detected capacity change from 0 to 512
[  249.724726][ T6446] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  250.356503][ T6463] loop5: detected capacity change from 0 to 512
[  250.410542][ T4300] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  250.449248][ T6463] EXT4-fs: Ignoring removed nobh option
[  250.542334][ T6465] loop3: detected capacity change from 0 to 512
[  250.544060][ T6463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  250.600394][ T4300] usb 3-1: Using ep0 maxpacket: 8
[  250.607348][ T4300] usb 3-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  250.627592][ T6465] EXT4-fs: Ignoring removed mblk_io_submit option
[  250.655928][ T4300] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  250.684023][ T6465] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  250.702672][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.731252][ T6463] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.568: invalid indirect mapped block 256 (level 2)
[  250.731365][ T6465] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.569: attempt to clear invalid blocks 2 len 1
[  250.770674][ T6465] EXT4-fs (loop3): Remounting filesystem read-only
[  250.777592][ T6465] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  250.803006][ T6465] EXT4-fs (loop3): Remounting filesystem read-only
[  250.810242][ T4300] usb 3-1: config 0 descriptor??
[  250.820476][ T6465] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.569: invalid indirect mapped block 1819239214 (level 0)
[  250.856504][ T6463] EXT4-fs (loop5): 2 truncates cleaned up
[  250.880704][ T6465] EXT4-fs (loop3): Remounting filesystem read-only
[  250.887302][ T6465] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.569: invalid indirect mapped block 1819239214 (level 1)
[  250.925713][ T6463] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  250.970551][ T6465] EXT4-fs (loop3): Remounting filesystem read-only
[  250.980015][ T6465] EXT4-fs (loop3): 1 truncate cleaned up
[  251.021006][ T6465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  251.040238][ T4300] usb 3-1: USB disconnect, device number 12
[  251.084389][ T6465] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.569: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  251.305999][ T6465] EXT4-fs (loop3): Remounting filesystem read-only
[  252.058562][ T4447] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm kworker/u4:11: bg 0: block 5: invalid block bitmap
[  252.330955][ T4447] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  252.396567][ T4447] EXT4-fs (loop5): This should not happen!! Data will be lost
[  252.396567][ T4447] 
[  252.452162][ T4447] EXT4-fs (loop5): Total free blocks count 0
[  252.468478][ T4447] EXT4-fs (loop5): Free/Dirty block details
[  252.480727][ T4447] EXT4-fs (loop5): free_blocks=0
[  252.496051][ T4447] EXT4-fs (loop5): dirty_blocks=3968
[  252.509608][ T4447] EXT4-fs (loop5): Block reservation details
[  252.514886][ T6488] loop2: detected capacity change from 0 to 512
[  252.531623][ T4447] EXT4-fs (loop5): i_reserved_data_blocks=3968
[  252.628357][ T6488] ext4: Unknown parameter 'nouser_xattr'
[  252.668264][ T4447] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1916 with error 28
[  252.939323][ T6494] loop1: detected capacity change from 0 to 512
[  252.946738][ T6494] EXT4-fs: inline encryption not supported
[  252.952742][ T6494] EXT4-fs: Ignoring removed bh option
[  252.964744][ T6494] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  253.642775][ T6494] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.574: corrupted in-inode xattr
[  253.655290][ T6494] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.574: couldn't read orphan inode 15 (err -117)
[  253.668880][ T6494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  253.690048][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  254.052776][ T6502] loop2: detected capacity change from 0 to 512
[  254.165910][ T6502] EXT4-fs error (device loop2): ext4_quota_enable:7010: comm syz.2.577: inode #50331648: comm syz.2.577: iget: illegal inode #
[  254.247207][ T6502] EXT4-fs (loop2): Remounting filesystem read-only
[  254.274496][ T6502] EXT4-fs error (device loop2): ext4_quota_enable:7013: comm syz.2.577: Bad quota inode: 50331648, type: 2
[  254.368819][ T6498] loop3: detected capacity change from 0 to 256
[  254.425341][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  254.431633][ T6502] EXT4-fs (loop2): Remounting filesystem read-only
[  254.438213][ T6502] EXT4-fs warning (device loop2): ext4_enable_quotas:7054: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix.
[  254.484024][ T6502] EXT4-fs (loop2): mount failed
[  254.494442][   T26] audit: type=1800 audit(1746876666.382:47): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.576" name="file2" dev="loop3" ino=1048659 res=0 errno=0
[  254.648094][ T6502] loop2: detected capacity change from 0 to 256
[  254.698218][ T6502] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  254.767870][ T6502] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  255.748079][ T6528] loop1: detected capacity change from 0 to 1024
[  255.757835][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  255.765162][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  255.808508][ T6528] EXT4-fs: Ignoring removed bh option
[  255.817316][ T6528] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  255.979530][ T6528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  258.020075][ T6546] loop3: detected capacity change from 0 to 512
[  258.719405][ T6546] EXT4-fs: Ignoring removed mblk_io_submit option
[  258.764128][ T6546] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  258.782707][ T6546] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.586: attempt to clear invalid blocks 2 len 1
[  258.805220][ T6546] EXT4-fs (loop3): Remounting filesystem read-only
[  258.818983][ T6546] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  258.834226][ T6546] EXT4-fs (loop3): Remounting filesystem read-only
[  258.845112][ T6546] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.586: invalid indirect mapped block 1819239214 (level 0)
[  258.864333][ T6546] EXT4-fs (loop3): Remounting filesystem read-only
[  258.875706][ T6546] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.586: invalid indirect mapped block 1819239214 (level 1)
[  258.900789][ T6546] EXT4-fs (loop3): Remounting filesystem read-only
[  258.914510][ T6546] EXT4-fs (loop3): 1 truncate cleaned up
[  258.927675][ T6546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  258.952263][ T6546] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.586: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  259.054354][ T6546] EXT4-fs (loop3): Remounting filesystem read-only
[  259.162369][ T6546] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work
[  260.730011][ T6568] loop2: detected capacity change from 0 to 512
[  260.737449][ T6568] EXT4-fs: inline encryption not supported
[  260.743415][ T6568] EXT4-fs: Ignoring removed bh option
[  260.978171][ T6568] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  261.392118][ T6568] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.589: corrupted in-inode xattr
[  261.404649][ T6568] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.589: couldn't read orphan inode 15 (err -117)
[  261.417070][ T6568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  261.440967][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  261.508511][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  261.647393][ T6577] loop3: detected capacity change from 0 to 256
[  261.763879][ T6577] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  261.915298][   T26] audit: type=1800 audit(1746876673.802:48): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.592" name="file2" dev="loop3" ino=1048662 res=0 errno=0
[  262.185786][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  262.371930][ T6591] loop3: detected capacity change from 0 to 512
[  262.481330][ T6591] EXT4-fs: Ignoring removed nobh option
[  262.519032][ T6591] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  262.801876][ T6591] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.597: invalid indirect mapped block 256 (level 2)
[  262.850942][ T6591] EXT4-fs (loop3): 2 truncates cleaned up
[  262.878936][ T6591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  263.884707][   T11] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap
[  263.931578][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  263.956792][   T11] EXT4-fs (loop3): This should not happen!! Data will be lost
[  263.956792][   T11] 
[  263.977118][   T11] EXT4-fs (loop3): Total free blocks count 0
[  263.997524][   T11] EXT4-fs (loop3): Free/Dirty block details
[  264.027781][   T11] EXT4-fs (loop3): free_blocks=0
[  264.044883][   T11] EXT4-fs (loop3): dirty_blocks=4076
[  264.068945][   T11] EXT4-fs (loop3): Block reservation details
[  264.110560][   T11] EXT4-fs (loop3): i_reserved_data_blocks=4076
[  264.239082][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2024 with error 28
[  264.547418][   T14] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  264.670603][ T4300] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  264.724003][ T6624] loop3: detected capacity change from 0 to 512
[  264.730412][   T14] usb 6-1: Using ep0 maxpacket: 8
[  264.732352][   T14] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  264.766686][   T14] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  264.767745][ T6624] EXT4-fs: Ignoring removed mblk_io_submit option
[  264.808270][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.836805][   T14] usb 6-1: config 0 descriptor??
[  264.887710][ T6624] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  264.903500][ T6624] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.603: attempt to clear invalid blocks 2 len 1
[  264.926107][ T4300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  264.926747][ T6624] EXT4-fs (loop3): Remounting filesystem read-only
[  264.943454][ T6624] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  264.960594][ T4300] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  264.968185][ T6624] EXT4-fs (loop3): Remounting filesystem read-only
[  264.976310][ T6624] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.603: invalid indirect mapped block 1819239214 (level 0)
[  265.000368][ T6624] EXT4-fs (loop3): Remounting filesystem read-only
[  265.007047][ T6624] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.603: invalid indirect mapped block 1819239214 (level 1)
[  265.031121][ T4300] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  265.040907][ T6624] EXT4-fs (loop3): Remounting filesystem read-only
[  265.058222][ T6624] EXT4-fs (loop3): 1 truncate cleaned up
[  265.066059][ T6624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  265.085601][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  265.108088][ T6624] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.603: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  265.125712][ T4300] usb 3-1: SerialNumber: syz
[  265.151949][ T1170] usb 6-1: USB disconnect, device number 5
[  265.157288][ T6624] EXT4-fs (loop3): Remounting filesystem read-only
[  265.258382][ T6624] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work
[  265.396343][ T4300] usb 3-1: 0:2 : does not exist
[  265.465357][ T4300] usb 3-1: USB disconnect, device number 13
[  265.681282][ T6630] loop1: detected capacity change from 0 to 1024
[  265.690411][ T6630] EXT4-fs: Ignoring removed bh option
[  265.697027][ T6630] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  265.749981][ T6630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  265.772469][ T4477] udevd[4477]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.878565][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  266.459226][ T6646] loop3: detected capacity change from 0 to 512
[  266.466499][ T6646] EXT4-fs: inline encryption not supported
[  266.472490][ T6646] EXT4-fs: Ignoring removed bh option
[  266.510671][ T4300] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  266.541482][ T6646] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  266.643132][ T6646] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.607: corrupted in-inode xattr
[  266.656788][ T6646] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.607: couldn't read orphan inode 15 (err -117)
[  266.682128][ T6646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  266.790839][ T4300] usb 6-1: Using ep0 maxpacket: 16
[  266.824554][ T4300] usb 6-1: config 0 interface 0 has no altsetting 0
[  266.988337][ T4300] usb 6-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00
[  267.064297][ T4300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.075471][ T6648] loop2: detected capacity change from 0 to 512
[  267.117947][ T4300] usb 6-1: config 0 descriptor??
[  267.180467][ T6648] EXT4-fs: Ignoring removed nobh option
[  267.250913][ T6648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  267.392660][ T6648] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.610: invalid indirect mapped block 256 (level 2)
[  267.514932][ T6648] EXT4-fs (loop2): 2 truncates cleaned up
[  267.651625][ T6648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  267.753054][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  268.727014][ T4300] wacom 0003:056A:0301.0009: unknown main item tag 0x0
[  268.743684][ T4300] wacom 0003:056A:0301.0009: Unknown device_type for 'HID 056a:0301'. Assuming pen.
[  268.831734][ T4300] wacom 0003:056A:0301.0009: hidraw0: USB HID v0.06 Device [HID 056a:0301] on usb-dummy_hcd.5-1/input0
[  269.081637][ T4300] input: Wacom Bamboo One M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0301.0009/input/input7
[  269.974468][ T4300] usb 6-1: USB disconnect, device number 6
[  270.470562][ T6626] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  270.577058][   T41] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1340 with error 28
[  270.610189][   T41] EXT4-fs (loop2): This should not happen!! Data will be lost
[  270.610189][   T41] 
[  270.637444][ T6668] loop5: detected capacity change from 0 to 512
[  270.649348][   T41] EXT4-fs (loop2): Total free blocks count 0
[  270.684020][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  270.695488][ T6668] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.711814][   T41] EXT4-fs (loop2): Free/Dirty block details
[  270.731420][   T41] EXT4-fs (loop2): free_blocks=0
[  270.740156][   T41] EXT4-fs (loop2): dirty_blocks=1340
[  270.743000][ T6661] fido_id[6661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  270.756262][   T41] EXT4-fs (loop2): Block reservation details
[  270.821565][   T41] EXT4-fs (loop2): i_reserved_data_blocks=1340
[  270.829094][ T6668] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  270.860847][ T6668] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.617: attempt to clear invalid blocks 2 len 1
[  270.926124][ T6668] EXT4-fs (loop5): Remounting filesystem read-only
[  270.956262][ T6668] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  270.984899][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  271.021472][ T6668] EXT4-fs (loop5): Remounting filesystem read-only
[  271.028752][ T6668] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.617: invalid indirect mapped block 1819239214 (level 0)
[  271.048505][ T6668] EXT4-fs (loop5): Remounting filesystem read-only
[  271.055567][ T6668] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.617: invalid indirect mapped block 1819239214 (level 1)
[  271.075725][ T6668] EXT4-fs (loop5): Remounting filesystem read-only
[  271.086294][ T6668] EXT4-fs (loop5): 1 truncate cleaned up
[  271.098029][ T6668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  271.139668][ T6668] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.617: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  271.164352][ T4300] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  271.173288][ T6668] EXT4-fs (loop5): Remounting filesystem read-only
[  271.252568][ T6668] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work
[  271.286002][  T952] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  271.360106][ T4300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.380400][ T4300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.400678][ T4300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  271.442656][ T4300] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  271.460427][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.488719][ T4300] usb 4-1: config 0 descriptor??
[  271.505751][  T952] usb 2-1: Using ep0 maxpacket: 8
[  271.513605][  T952] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  271.539528][  T952] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  271.567910][  T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.588104][  T952] usb 2-1: config 0 descriptor??
[  271.649959][ T6680] loop2: detected capacity change from 0 to 1024
[  271.708291][ T6680] hfsplus: unable to parse mount options
[  271.818336][  T952] usb 2-1: USB disconnect, device number 9
[  271.919050][ T4300] plantronics 0003:047F:FFFF.000A: item fetching failed at offset 12/15
[  271.948672][ T4300] plantronics 0003:047F:FFFF.000A: parse failed
[  271.955797][ T4300] plantronics: probe of 0003:047F:FFFF.000A failed with error -22
[  271.986681][ T5413] EXT4-fs (loop5): unmounting filesystem.
[  272.120667][ T4300] usb 4-1: USB disconnect, device number 7
[  274.753074][ T6697] tty tty2: ldisc open failed (-12), clearing slot 1
[  275.570739][ T6703] loop1: detected capacity change from 0 to 512
[  275.577932][ T6703] EXT4-fs: inline encryption not supported
[  275.583940][ T6703] EXT4-fs: Ignoring removed bh option
[  275.596601][ T6703] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  275.720251][ T6703] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.624: corrupted in-inode xattr
[  275.736778][ T6703] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.624: couldn't read orphan inode 15 (err -117)
[  275.755222][ T6703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  276.364692][ T6712] loop2: detected capacity change from 0 to 512
[  276.495578][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  276.544255][ T6712] EXT4-fs: Ignoring removed nobh option
[  276.593168][ T6712] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  276.679528][ T6718] loop3: detected capacity change from 0 to 512
[  276.731015][ T6712] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.627: invalid indirect mapped block 256 (level 2)
[  276.757161][ T6718] EXT4-fs: Ignoring removed mblk_io_submit option
[  276.796097][ T6720] loop1: detected capacity change from 0 to 1024
[  276.808685][ T6718] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  276.859165][ T6712] EXT4-fs (loop2): 2 truncates cleaned up
[  276.896779][ T6712] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  276.927243][ T6718] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.632: attempt to clear invalid blocks 2 len 1
[  277.023957][ T6720] kvm: MONITOR instruction emulated as NOP!
[  277.042392][ T6718] EXT4-fs (loop3): Remounting filesystem read-only
[  277.056841][ T6718] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  277.136073][ T6718] EXT4-fs (loop3): Remounting filesystem read-only
[  277.155895][ T6718] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.632: invalid indirect mapped block 1819239214 (level 0)
[  277.201617][ T6718] EXT4-fs (loop3): Remounting filesystem read-only
[  277.208402][ T6718] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.632: invalid indirect mapped block 1819239214 (level 1)
[  277.225805][ T6718] EXT4-fs (loop3): Remounting filesystem read-only
[  277.791159][ T6718] EXT4-fs (loop3): 1 truncate cleaned up
[  277.817443][ T6718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  277.906968][ T6718] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.632: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  278.057053][ T6718] EXT4-fs (loop3): Remounting filesystem read-only
[  278.111010][ T4446] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:10: bg 0: block 5: invalid block bitmap
[  278.185049][ T4446] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1656 with error 28
[  278.229707][ T6718] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work
[  278.234960][ T4446] EXT4-fs (loop2): This should not happen!! Data will be lost
[  278.234960][ T4446] 
[  278.256117][ T4446] EXT4-fs (loop2): Total free blocks count 0
[  278.262885][ T4446] EXT4-fs (loop2): Free/Dirty block details
[  278.263947][ T6736] loop1: detected capacity change from 0 to 128
[  278.268801][ T4446] EXT4-fs (loop2): free_blocks=0
[  278.296429][ T4446] EXT4-fs (loop2): dirty_blocks=1656
[  278.305589][ T4446] EXT4-fs (loop2): Block reservation details
[  278.316772][ T4446] EXT4-fs (loop2): i_reserved_data_blocks=1656
[  278.331715][ T6736] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  278.388352][ T6736] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  278.412889][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  278.951437][ T4308] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  279.191158][ T4308] usb 3-1: Using ep0 maxpacket: 8
[  279.207939][ T4308] usb 3-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  279.451409][ T4308] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  279.491388][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.551152][ T4308] usb 3-1: config 0 descriptor??
[  279.629727][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  279.681205][ T6752] netlink: 96 bytes leftover after parsing attributes in process `syz.0.642'.
[  279.811487][ T4308] usb 3-1: USB disconnect, device number 14
[  280.844073][ T6764] loop2: detected capacity change from 0 to 1024
[  280.851409][ T6764] EXT4-fs: Ignoring removed bh option
[  281.336639][ T6764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  281.431709][ T6764] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  281.591249][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  281.695903][ T6771] loop5: detected capacity change from 0 to 128
[  281.758902][ T6771] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  281.823457][ T6774] loop3: detected capacity change from 0 to 512
[  281.834791][ T6774] EXT4-fs: inline encryption not supported
[  281.840893][ T6774] EXT4-fs: Ignoring removed bh option
[  281.900700][ T6774] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  282.034121][ T6774] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.643: corrupted in-inode xattr
[  282.049066][ T6774] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.643: couldn't read orphan inode 15 (err -117)
[  282.064251][ T6774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  282.402910][ T6778] loop2: detected capacity change from 0 to 512
[  282.418282][ T6778] EXT4-fs: Ignoring removed nobh option
[  282.431305][ T6778] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  282.483865][ T6778] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.647: invalid indirect mapped block 256 (level 2)
[  282.527770][ T6771] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  282.555973][ T6778] EXT4-fs (loop2): 2 truncates cleaned up
[  282.575909][ T6778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  283.487469][   T41] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[  283.572901][   T41] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1548 with error 117
[  283.623623][   T41] EXT4-fs (loop2): This should not happen!! Data will be lost
[  283.623623][   T41] 
[  283.632163][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  283.713127][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  284.218026][ T6799] loop2: detected capacity change from 0 to 8192
[  284.478921][ T6808] loop3: detected capacity change from 0 to 1024
[  284.591951][ T6808] EXT4-fs: Ignoring removed bh option
[  284.619068][ T6808] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  284.715742][ T6808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  284.918688][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  285.832441][ T6828] loop2: detected capacity change from 0 to 512
[  285.854650][ T6828] EXT4-fs: inline encryption not supported
[  285.861220][ T6828] EXT4-fs: Ignoring removed bh option
[  285.891195][ T6828] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  286.001340][ T6828] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.662: corrupted in-inode xattr
[  286.013797][ T6828] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.662: couldn't read orphan inode 15 (err -117)
[  286.026253][ T6828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  286.089696][ T6834] loop3: detected capacity change from 0 to 512
[  286.182223][ T6834] EXT4-fs: Ignoring removed nobh option
[  286.200442][ T6834] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  286.227942][ T6834] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.666: invalid indirect mapped block 256 (level 2)
[  286.377680][ T6834] EXT4-fs (loop3): 2 truncates cleaned up
[  286.400498][ T6834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  286.623902][ T6839] loop5: detected capacity change from 0 to 8192
[  287.810856][ T6832] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  287.826794][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  288.091504][ T4452] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 912 with error 28
[  288.138867][ T4452] EXT4-fs (loop3): This should not happen!! Data will be lost
[  288.138867][ T4452] 
[  288.213675][ T4452] EXT4-fs (loop3): Total free blocks count 0
[  288.219733][ T4452] EXT4-fs (loop3): Free/Dirty block details
[  288.363226][ T4452] EXT4-fs (loop3): free_blocks=0
[  288.479863][ T4452] EXT4-fs (loop3): dirty_blocks=912
[  288.605560][ T4452] EXT4-fs (loop3): Block reservation details
[  288.738855][ T4452] EXT4-fs (loop3): i_reserved_data_blocks=912
[  288.926272][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  289.098265][ T6850] loop2: detected capacity change from 0 to 512
[  289.146955][ T6854] netlink: 96 bytes leftover after parsing attributes in process `syz.3.669'.
[  289.157556][ T6850] EXT4-fs: Ignoring removed mblk_io_submit option
[  289.197919][ T6856] loop5: detected capacity change from 0 to 2048
[  289.205440][ T6854] loop3: detected capacity change from 0 to 256
[  289.216690][ T6854] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  289.238521][ T6850] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  289.246756][ T6854] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  289.308577][ T6850] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.671: attempt to clear invalid blocks 2 len 1
[  289.347427][ T6856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  289.390792][ T6850] EXT4-fs (loop2): Remounting filesystem read-only
[  289.411733][ T6854] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  289.451515][ T6850] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  289.634848][ T6850] EXT4-fs (loop2): Remounting filesystem read-only
[  289.651387][ T6850] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.671: invalid indirect mapped block 1819239214 (level 0)
[  289.751591][ T6850] EXT4-fs (loop2): Remounting filesystem read-only
[  289.775615][ T6850] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.671: invalid indirect mapped block 1819239214 (level 1)
[  289.854724][ T6850] EXT4-fs (loop2): Remounting filesystem read-only
[  290.016889][ T6850] EXT4-fs (loop2): 1 truncate cleaned up
[  290.030560][ T6850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  290.067809][ T6850] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.671: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  290.219872][ T6850] EXT4-fs (loop2): Remounting filesystem read-only
[  290.552955][ T6871] loop1: detected capacity change from 0 to 1024
[  290.595880][ T6850] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work
[  290.606390][ T6871] EXT4-fs: Ignoring removed bh option
[  290.637943][ T6874] loop3: detected capacity change from 0 to 2048
[  290.671804][ T6871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  290.708478][ T6874] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  290.862385][ T6879] loop5: detected capacity change from 0 to 2048
[  290.914628][ T6871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  290.972377][ T6879]  loop5: p1 < > p3
[  290.980715][ T6879] loop5: p3 size 134217728 extends beyond EOD, truncated
[  291.249496][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  291.314093][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  291.896337][ T6889] loop1: detected capacity change from 0 to 512
[  292.126353][ T6889] EXT4-fs: inline encryption not supported
[  292.132899][ T6889] EXT4-fs: Ignoring removed bh option
[  292.173437][ T6889] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  292.353582][ T4477] udevd[4477]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  292.367163][ T6889] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.680: corrupted in-inode xattr
[  292.379687][ T6889] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.680: couldn't read orphan inode 15 (err -117)
[  292.396003][ T6889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  292.441639][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  292.617944][ T6897] loop3: detected capacity change from 0 to 512
[  292.666687][ T6897] EXT4-fs: Ignoring removed nobh option
[  292.687708][ T6897] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  292.763740][ T6897] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.682: invalid indirect mapped block 256 (level 2)
[  292.802094][ T6897] EXT4-fs (loop3): 2 truncates cleaned up
[  292.808705][ T6897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  293.653971][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  293.850401][ T6858] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  293.908000][ T4447] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1548 with error 28
[  293.958206][ T4447] EXT4-fs (loop3): This should not happen!! Data will be lost
[  293.958206][ T4447] 
[  293.982444][ T4447] EXT4-fs (loop3): Total free blocks count 0
[  293.988647][ T4447] EXT4-fs (loop3): Free/Dirty block details
[  293.999610][ T4447] EXT4-fs (loop3): free_blocks=0
[  294.020383][ T4447] EXT4-fs (loop3): dirty_blocks=1548
[  294.025912][ T4447] EXT4-fs (loop3): Block reservation details
[  294.046141][ T4447] EXT4-fs (loop3): i_reserved_data_blocks=1548
[  294.148438][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  294.174648][ T6916] loop1: detected capacity change from 0 to 512
[  294.196652][ T6916] EXT4-fs: inline encryption not supported
[  294.202780][ T6916] EXT4-fs: Ignoring removed nobh option
[  294.409131][ T6916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  295.716819][ T6936] loop5: detected capacity change from 0 to 1024
[  295.732636][   T26] audit: type=1800 audit(1746876707.622:49): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.688" name="file0" dev="loop1" ino=15 res=0 errno=0
[  295.806301][ T6936] EXT4-fs: Ignoring removed bh option
[  295.842533][ T6936] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  295.845698][ T6927] loop3: detected capacity change from 0 to 8192
[  295.902277][ T6936] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  295.944071][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  296.147721][ T5413] EXT4-fs (loop5): unmounting filesystem.
[  296.889809][ T6948] loop5: detected capacity change from 0 to 512
[  296.900633][ T6948] EXT4-fs: inline encryption not supported
[  296.906760][ T6948] EXT4-fs: Ignoring removed bh option
[  297.002355][ T6948] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  297.193760][ T6948] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.696: corrupted in-inode xattr
[  297.206330][ T6948] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.696: couldn't read orphan inode 15 (err -117)
[  297.219117][ T6948] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  297.359491][ T6954] loop1: detected capacity change from 0 to 512
[  297.364338][ T6952] loop2: detected capacity change from 0 to 2048
[  297.398052][ T6954] EXT4-fs: Ignoring removed nobh option
[  297.422645][ T6954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  297.478253][ T6952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.488565][ T6954] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.699: invalid indirect mapped block 256 (level 2)
[  297.506665][ T6954] EXT4-fs (loop1): 2 truncates cleaned up
[  297.524231][ T6954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  297.533475][   T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  299.055888][   T32] usb 4-1: Using ep0 maxpacket: 8
[  299.073745][   T32] usb 4-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  299.088204][    T9] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap
[  299.116736][    T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  299.130544][   T32] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  299.135643][ T6967] loop2: detected capacity change from 0 to 512
[  299.139597][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.149767][ T6967] EXT4-fs: inline encryption not supported
[  299.166364][    T9] EXT4-fs (loop1): This should not happen!! Data will be lost
[  299.166364][    T9] 
[  299.176532][    T9] EXT4-fs (loop1): Total free blocks count 0
[  299.183011][    T9] EXT4-fs (loop1): Free/Dirty block details
[  299.189022][    T9] EXT4-fs (loop1): free_blocks=0
[  299.194533][    T9] EXT4-fs (loop1): dirty_blocks=4804
[  299.199985][    T9] EXT4-fs (loop1): Block reservation details
[  299.206716][    T9] EXT4-fs (loop1): i_reserved_data_blocks=4804
[  299.209288][ T6967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  299.230503][ T6967] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.233049][   T32] usb 4-1: config 0 descriptor??
[  299.257245][ T5413] EXT4-fs (loop5): unmounting filesystem.
[  299.329854][    T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  299.442750][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  299.556913][ T1170] usb 4-1: USB disconnect, device number 8
[  300.291796][ T6976] loop2: detected capacity change from 0 to 2048
[  300.414649][ T6976]  loop2: p1 < > p3
[  300.434757][ T6976] loop2: p3 size 134217728 extends beyond EOD, truncated
[  300.454639][ T6985] loop1: detected capacity change from 0 to 512
[  300.502820][ T6985] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  300.540632][ T6985] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  300.570796][ T6985] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.702: Corrupt directory, running e2fsck is recommended
[  300.591287][ T6985] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  300.616911][ T6985] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.702: corrupted in-inode xattr
[  300.786667][ T6993] loop3: detected capacity change from 0 to 1024
[  300.794618][ T6993] EXT4-fs: Ignoring removed bh option
[  300.808558][ T6993] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  300.857097][ T6985] EXT4-fs (loop1): Remounting filesystem read-only
[  300.864639][ T6985] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.702: couldn't read orphan inode 15 (err -117)
[  300.908440][ T6985] EXT4-fs (loop1): Remounting filesystem read-only
[  300.941587][ T6985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  301.138872][ T6993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  301.257246][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  301.277480][ T6996] loop5: detected capacity change from 0 to 2048
[  301.291485][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  301.311620][ T6996] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿ8º.ѵ»”†±<K" or missing value
[  301.497128][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  301.521840][ T4341] udevd[4341]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  302.547601][ T7012] loop2: detected capacity change from 0 to 512
[  302.555389][ T7012] EXT4-fs: Ignoring removed nobh option
[  302.570436][ T7012] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  302.641138][ T7012] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.713: invalid indirect mapped block 256 (level 2)
[  302.660626][ T7012] EXT4-fs (loop2): 2 truncates cleaned up
[  302.676643][ T7012] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  304.136445][ T1170] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  304.435950][ T4441] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:9: bg 0: block 5: invalid block bitmap
[  304.460433][ T1170] usb 2-1: Using ep0 maxpacket: 8
[  304.478819][ T1170] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  304.479278][ T4441] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  304.506352][ T1170] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  304.516073][ T1170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.573208][ T4441] EXT4-fs (loop2): This should not happen!! Data will be lost
[  304.573208][ T4441] 
[  304.878364][ T4441] EXT4-fs (loop2): Total free blocks count 0
[  304.888486][ T4441] EXT4-fs (loop2): Free/Dirty block details
[  304.920325][ T4441] EXT4-fs (loop2): free_blocks=0
[  304.925334][ T4441] EXT4-fs (loop2): dirty_blocks=3592
[  304.937069][ T7035] loop5: detected capacity change from 0 to 1024
[  304.953708][ T4441] EXT4-fs (loop2): Block reservation details
[  304.984168][ T4441] EXT4-fs (loop2): i_reserved_data_blocks=3592
[  305.092494][ T1170] usb 2-1: config 0 descriptor??
[  305.095020][    T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1540 with error 28
[  305.114716][ T7035] EXT4-fs: Ignoring removed nobh option
[  305.148992][ T7035] EXT4-fs: inline encryption not supported
[  305.178811][ T7035] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  305.356657][ T1170] usb 2-1: USB disconnect, device number 10
[  305.367108][ T7035] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  305.446808][ T7035] EXT4-fs (loop5): shut down requested (1)
[  305.660892][ T5413] EXT4-fs (loop5): unmounting filesystem.
[  306.555091][ T7051] loop5: detected capacity change from 0 to 512
[  306.618908][ T7051] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  306.702580][ T7051] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  306.835148][ T7051] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.723: Corrupt directory, running e2fsck is recommended
[  306.886693][ T7060] loop2: detected capacity change from 0 to 512
[  306.901232][ T7060] EXT4-fs: Ignoring removed mblk_io_submit option
[  306.911359][ T7051] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  306.929669][ T7051] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.723: corrupted in-inode xattr
[  306.967704][ T7060] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  306.976946][ T7051] EXT4-fs (loop5): Remounting filesystem read-only
[  306.983233][ T7060] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.725: attempt to clear invalid blocks 2 len 1
[  307.005578][ T7060] EXT4-fs (loop2): Remounting filesystem read-only
[  307.012777][ T7051] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.723: couldn't read orphan inode 15 (err -117)
[  307.031154][ T7060] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  307.051714][ T7051] EXT4-fs (loop5): Remounting filesystem read-only
[  307.058839][ T7060] EXT4-fs (loop2): Remounting filesystem read-only
[  307.069900][ T7051] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  307.088700][ T7060] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.725: invalid indirect mapped block 1819239214 (level 0)
[  307.133112][ T7061] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns
[  307.137972][ T7060] EXT4-fs (loop2): Remounting filesystem read-only
[  307.182006][ T7060] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.725: invalid indirect mapped block 1819239214 (level 1)
[  307.234816][ T5413] EXT4-fs (loop5): unmounting filesystem.
[  307.241968][ T7060] EXT4-fs (loop2): Remounting filesystem read-only
[  307.295522][ T7060] EXT4-fs (loop2): 1 truncate cleaned up
[  307.307762][ T7060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  307.337053][ T7060] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.725: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  307.365469][ T7060] EXT4-fs (loop2): Remounting filesystem read-only
[  308.262578][ T7060] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work
[  308.630765][ T7079] loop1: detected capacity change from 0 to 1024
[  308.639610][ T7079] EXT4-fs: Ignoring removed bh option
[  308.703235][ T7079] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  308.840202][ T7079] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  309.036476][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  309.139425][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  309.212698][ T7087] loop5: detected capacity change from 0 to 256
[  309.513106][ T7093] loop5: detected capacity change from 0 to 256
[  309.529454][ T7093] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x09567547, utbl_chksum : 0xe619d30d)
[  309.550516][ T1170] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  309.567742][   T26] audit: type=1800 audit(1746877788.453:50): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.738" name="file2" dev="loop5" ino=1048668 res=0 errno=0
[  309.780476][ T1170] usb 2-1: Using ep0 maxpacket: 8
[  309.787841][ T1170] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  309.817873][ T1170] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  309.847594][ T1170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.887529][ T1170] usb 2-1: config 0 descriptor??
[  310.109123][ T4300] usb 2-1: USB disconnect, device number 11
[  310.873547][ T4299] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  311.064574][ T4299] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  311.090330][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.098380][ T4299] usb 6-1: Product: syz
[  311.110698][ T4299] usb 6-1: Manufacturer: syz
[  311.115360][ T4299] usb 6-1: SerialNumber: syz
[  312.332222][ T4299] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  312.832135][ T4299] cdc_ncm 6-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048
[  312.910153][ T7120] loop2: detected capacity change from 0 to 1024
[  312.919061][ T7120] EXT4-fs: Ignoring removed bh option
[  312.929116][ T7120] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  312.951002][ T4299] cdc_ncm 6-1:1.0: setting rx_max = 2048
[  312.973195][ T7120] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  313.012860][ T4263] EXT4-fs (loop2): unmounting filesystem.
[  313.045599][ T4299] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  313.084874][ T4299] usb 6-1: USB disconnect, device number 7
[  313.115083][ T4299] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP)
[  313.624817][ T7125] loop3: detected capacity change from 0 to 256
[  313.707797][ T7127] loop2: detected capacity change from 0 to 2048
[  313.800072][ T7127] EXT4-fs: Ignoring removed orlov option
[  313.848546][ T7127] EXT4-fs: Ignoring removed nomblk_io_submit option
[  314.014733][ T7127] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  314.219003][ T7146] loop1: detected capacity change from 0 to 512
[  314.285096][ T7146] EXT4-fs: Ignoring removed i_version option
[  314.331122][ T7146] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  314.350545][ T4299] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  314.396859][ T7146] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  314.411941][ T7146] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.502323][ T7152] loop3: detected capacity change from 0 to 512
[  314.512509][ T7152] EXT4-fs: inline encryption not supported
[  314.518551][ T7152] EXT4-fs: Ignoring removed bh option
[  314.533928][ T7152] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  314.630674][  T952] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  314.652541][ T4299] usb 6-1: Using ep0 maxpacket: 8
[  314.674025][ T4299] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  314.744300][ T4299] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  314.794549][ T7146] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.754: corrupted inode contents
[  314.841629][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.882364][  T952] usb 3-1: Using ep0 maxpacket: 32
[  314.926751][  T952] usb 3-1: unable to get BOS descriptor or descriptor too short
[  314.952175][ T4299] usb 6-1: config 0 descriptor??
[  314.971091][ T7146] EXT4-fs (loop1): Remounting filesystem read-only
[  314.977921][ T7146] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.754: mark_inode_dirty error
[  315.022749][  T952] usb 3-1: unable to read config index 0 descriptor/start: -71
[  315.063154][ T7152] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.753: corrupted in-inode xattr
[  315.068217][ T7146] EXT4-fs (loop1): Remounting filesystem read-only
[  315.083371][  T952] usb 3-1: can't read configurations, error -71
[  315.090669][ T7152] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.753: couldn't read orphan inode 15 (err -117)
[  315.105530][ T7146] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.754: corrupted inode contents
[  315.117583][ T7152] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  315.172892][ T7146] EXT4-fs (loop1): Remounting filesystem read-only
[  315.207526][ T7154] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.754: corrupted inode contents
[  315.225577][ T4301] usb 6-1: USB disconnect, device number 8
[  315.254187][ T7154] EXT4-fs (loop1): Remounting filesystem read-only
[  315.260934][ T7154] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.754: mark_inode_dirty error
[  315.273250][ T7154] EXT4-fs (loop1): Remounting filesystem read-only
[  315.280130][ T7154] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.754: corrupted inode contents
[  315.306291][ T7154] EXT4-fs (loop1): Remounting filesystem read-only
[  315.313487][ T7154] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.754: mark_inode_dirty error
[  315.333179][ T7154] EXT4-fs (loop1): Remounting filesystem read-only
[  315.340112][ T7154] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.754: corrupted inode contents
[  315.366352][ T7154] EXT4-fs (loop1): Remounting filesystem read-only
[  315.378818][ T7154] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.754: mark_inode_dirty error
[  315.396343][ T7154] EXT4-fs (loop1): Remounting filesystem read-only
[  315.415651][ T7146] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.754: corrupted inode contents
[  315.862689][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  316.056572][ T7167] loop3: detected capacity change from 0 to 512
[  316.085514][ T7167] EXT4-fs: Ignoring removed nobh option
[  316.112639][ T7166] loop5: detected capacity change from 0 to 512
[  316.135933][ T7167] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  316.978079][ T7166] EXT4-fs: inline encryption not supported
[  317.042887][ T7167] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.759: invalid indirect mapped block 256 (level 2)
[  317.107980][ T7167] EXT4-fs (loop3): 2 truncates cleaned up
[  317.140391][ T7167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  317.165631][ T7166] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  317.180839][ T7166] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.281267][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  317.287708][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  317.416461][ T7166] EXT4-fs (loop5): unmounting filesystem.
[  317.788650][ T4446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:10: bg 0: block 5: invalid block bitmap
[  317.842610][ T7182] loop1: detected capacity change from 0 to 1024
[  317.849846][ T7182] EXT4-fs: Ignoring removed bh option
[  317.868176][ T7182] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  317.881609][ T4446] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  317.904616][ T4446] EXT4-fs (loop3): This should not happen!! Data will be lost
[  317.904616][ T4446] 
[  317.913794][ T7181] loop5: detected capacity change from 0 to 1024
[  317.921411][ T4446] EXT4-fs (loop3): Total free blocks count 0
[  317.932292][ T4446] EXT4-fs (loop3): Free/Dirty block details
[  317.940214][ T7182] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  317.982254][ T4446] EXT4-fs (loop3): free_blocks=0
[  317.987360][ T4446] EXT4-fs (loop3): dirty_blocks=3788
[  317.993208][ T4446] EXT4-fs (loop3): Block reservation details
[  317.999239][ T4446] EXT4-fs (loop3): i_reserved_data_blocks=3788
[  318.038261][ T4446] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1736 with error 28
[  318.101591][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  318.344171][ T7188] loop3: detected capacity change from 0 to 512
[  318.487107][ T7188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  318.537778][ T7188] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  318.659627][ T7194] loop1: detected capacity change from 0 to 512
[  318.698495][ T7194] EXT4-fs: Ignoring removed mblk_io_submit option
[  318.727234][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  318.765611][ T7194] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  318.834959][ T7194] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.766: attempt to clear invalid blocks 2 len 1
[  318.918156][ T4304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.929780][ T7194] EXT4-fs (loop1): Remounting filesystem read-only
[  318.947549][ T7194] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  319.018524][ T7194] EXT4-fs (loop1): Remounting filesystem read-only
[  319.031728][ T7194] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.766: invalid indirect mapped block 1819239214 (level 0)
[  319.036493][ T7139] EXT4-fs warning (device loop2): kmmpd:168: kmmpd being stopped since MMP feature has been disabled.
[  319.066919][ T7194] EXT4-fs (loop1): Remounting filesystem read-only
[  319.079101][ T4304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.086871][ T7194] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.766: invalid indirect mapped block 1819239214 (level 1)
[  319.140389][ T7194] EXT4-fs (loop1): Remounting filesystem read-only
[  319.158053][ T7194] EXT4-fs (loop1): 1 truncate cleaned up
[  319.171772][ T7194] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  319.199360][ T4304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.225328][ T7193] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.766: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  319.265549][ T7193] EXT4-fs (loop1): Remounting filesystem read-only
[  319.360896][ T7193] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work
[  319.378997][ T4304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.787795][  T952] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  320.022281][  T952] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.101592][  T952] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  320.184228][  T952] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  320.230322][  T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.306805][  T952] usb 4-1: config 0 descriptor??
[  320.432090][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  320.467653][ T4259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.489722][ T4259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.498395][ T4259] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.521684][ T4259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  320.531089][ T4259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  320.546288][ T4259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  320.564342][   T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.573557][   T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.607349][   T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.626056][   T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  320.634196][   T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  320.661091][   T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  320.762851][  T952] usb 4-1: string descriptor 0 read error: -71
[  320.779529][  T952] usb 4-1: USB disconnect, device number 9
[  321.160698][ T4308] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  321.360534][ T4308] usb 2-1: Using ep0 maxpacket: 16
[  321.372023][ T4308] usb 2-1: config 0 has no interfaces?
[  321.401934][ T4308] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  321.417568][ T4308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.425797][ T4308] usb 2-1: Product: syz
[  321.430000][ T4308] usb 2-1: Manufacturer: syz
[  321.438734][ T4308] usb 2-1: SerialNumber: syz
[  321.456347][ T4308] usb 2-1: config 0 descriptor??
[  321.583382][ T7216] chnl_net:caif_netlink_parms(): no params data found
[  321.702585][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.772319][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.000520][ T4364] usb 2-1: USB disconnect, device number 12
[  322.742059][   T49] Bluetooth: hci2: command 0x0409 tx timeout
[  323.435464][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.468045][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.510019][ T7216] device bridge_slave_0 entered promiscuous mode
[  323.589861][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.610635][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.659529][ T7216] device bridge_slave_1 entered promiscuous mode
[  323.824217][ T7272] loop1: detected capacity change from 0 to 512
[  323.846728][ T7272] EXT4-fs: Ignoring removed mblk_io_submit option
[  323.902922][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.941641][ T7272] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  323.972411][ T7272] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.788: attempt to clear invalid blocks 2 len 1
[  323.973021][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.000684][ T7272] EXT4-fs (loop1): Remounting filesystem read-only
[  324.007530][ T7272] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  324.048990][ T7272] EXT4-fs (loop1): Remounting filesystem read-only
[  324.056017][ T7272] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.788: invalid indirect mapped block 1819239214 (level 0)
[  324.080242][ T7272] EXT4-fs (loop1): Remounting filesystem read-only
[  324.086916][ T7272] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.788: invalid indirect mapped block 1819239214 (level 1)
[  324.122473][ T7272] EXT4-fs (loop1): Remounting filesystem read-only
[  324.147131][ T7272] EXT4-fs (loop1): 1 truncate cleaned up
[  324.157566][ T7272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  324.187922][ T7272] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.788: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  324.228562][ T7272] EXT4-fs (loop1): Remounting filesystem read-only
[  324.272348][ T7216] team0: Port device team_slave_0 added
[  324.310881][ T7216] team0: Port device team_slave_1 added
[  324.348901][ T7272] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work
[  324.437729][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.452560][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.544192][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.585244][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.612657][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.684999][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.790532][   T49] Bluetooth: hci2: command 0x041b tx timeout
[  324.794683][ T7216] device hsr_slave_0 entered promiscuous mode
[  324.850130][ T7216] device hsr_slave_1 entered promiscuous mode
[  324.857086][ T7216] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  324.866309][ T7216] Cannot create hsr debugfs directory
[  324.933033][ T4304] device hsr_slave_0 left promiscuous mode
[  324.954084][ T4304] device hsr_slave_1 left promiscuous mode
[  324.991520][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.998999][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.041215][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.079839][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.107766][ T4304] device bridge_slave_1 left promiscuous mode
[  325.124899][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.169159][ T4304] device bridge_slave_0 left promiscuous mode
[  325.176438][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.271142][ T4304] device veth1_macvtap left promiscuous mode
[  325.293761][ T4304] device veth0_macvtap left promiscuous mode
[  325.320449][ T4304] device veth1_vlan left promiscuous mode
[  325.326355][ T4304] device veth0_vlan left promiscuous mode
[  325.430043][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  325.668977][ T7290] loop1: detected capacity change from 0 to 512
[  325.702960][ T7290] EXT4-fs: Ignoring removed nobh option
[  325.739326][ T7290] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  325.830792][ T7290] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.790: invalid indirect mapped block 256 (level 2)
[  325.881263][ T7290] EXT4-fs (loop1): 2 truncates cleaned up
[  325.907617][ T7290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  326.622898][    T9] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap
[  326.726710][    T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  326.740683][    T9] EXT4-fs (loop1): This should not happen!! Data will be lost
[  326.740683][    T9] 
[  326.750968][    T9] EXT4-fs (loop1): Total free blocks count 0
[  326.756994][    T9] EXT4-fs (loop1): Free/Dirty block details
[  326.764502][    T9] EXT4-fs (loop1): free_blocks=0
[  326.772068][    T9] EXT4-fs (loop1): dirty_blocks=6220
[  326.777492][    T9] EXT4-fs (loop1): Block reservation details
[  326.783903][    T9] EXT4-fs (loop1): i_reserved_data_blocks=6220
[  326.881216][    T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  327.116997][   T14] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  327.333136][   T14] usb 3-1: Using ep0 maxpacket: 8
[  327.340992][   T14] usb 3-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  327.369418][   T14] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  327.379421][ T7312] loop1: detected capacity change from 0 to 1024
[  327.379659][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.386756][ T7312] EXT4-fs: Ignoring removed bh option
[  327.399925][ T7312] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  327.427361][   T14] usb 3-1: config 0 descriptor??
[  327.487829][ T7312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  327.562330][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  327.664292][ T4300] usb 3-1: USB disconnect, device number 17
[  328.048759][ T4304] team0 (unregistering): Port device team_slave_1 removed
[  328.900401][ T4301] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  329.011484][ T4304] team0 (unregistering): Port device team_slave_0 removed
[  329.133385][ T4301] usb 2-1: Using ep0 maxpacket: 16
[  329.151031][ T4301] usb 2-1: config 0 has no interfaces?
[  329.158959][ T4301] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  329.169175][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.177544][ T4301] usb 2-1: Product: syz
[  329.182245][ T4301] usb 2-1: Manufacturer: syz
[  329.186896][ T4301] usb 2-1: SerialNumber: syz
[  329.193458][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.321325][ T4301] usb 2-1: config 0 descriptor??
[  329.339382][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.554822][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.567071][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.317860][ T4304] bond0 (unregistering): Released all slaves
[  330.519192][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  330.567272][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  330.619799][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  330.636205][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  330.649938][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  330.664092][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  330.717335][ T7304] device wlan1 left promiscuous mode
[  331.024506][ T7339] loop3: detected capacity change from 0 to 256
[  331.234884][ T7216] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  331.284139][ T7216] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  331.472636][ T7342] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  331.482968][ T7342] FAT-fs (loop3): Filesystem has been set read-only
[  331.489653][ T7342] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  331.499951][ T7342] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  331.514207][ T7342] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  331.570360][   T26] audit: type=1800 audit(1746877810.403:51): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.803" name="file1" dev="loop3" ino=1048670 res=0 errno=0
[  332.084741][ T4308] usb 2-1: USB disconnect, device number 13
[  332.131886][ T7216] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  332.182250][ T7216] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  332.359470][ T7347] loop3: detected capacity change from 0 to 1764
[  332.625630][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.693745][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  332.702523][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  332.748289][ T7216] 8021q: adding VLAN 0 to HW filter on device team0
[  332.838752][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  332.868691][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  332.936754][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.944020][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.020745][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  333.118571][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  333.180245][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.187541][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.290837][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  333.336659][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  333.376429][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  333.434669][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  333.469153][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  333.497223][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  333.522748][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  333.721429][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  333.916758][ T7216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  334.034483][ T7216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  334.061521][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  334.100807][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  334.121325][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  334.170780][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  334.209455][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  334.490634][ T4308] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  334.720390][ T4308] usb 2-1: Using ep0 maxpacket: 8
[  334.728646][ T4308] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  334.765818][ T4308] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  334.798379][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.848689][ T4308] usb 2-1: config 0 descriptor??
[  335.033564][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  335.048806][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  335.074834][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.079726][ T4308] usb 2-1: USB disconnect, device number 14
[  337.114192][ T7405] loop1: detected capacity change from 0 to 512
[  337.154273][ T7405] EXT4-fs: Ignoring removed mblk_io_submit option
[  337.251211][ T7405] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  337.307926][ T7405] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.811: attempt to clear invalid blocks 2 len 1
[  337.315568][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  337.340926][ T7405] EXT4-fs (loop1): Remounting filesystem read-only
[  337.347927][ T7405] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  337.371455][ T7405] EXT4-fs (loop1): Remounting filesystem read-only
[  337.378189][ T7405] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.811: invalid indirect mapped block 1819239214 (level 0)
[  337.419409][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  337.448511][ T7405] EXT4-fs (loop1): Remounting filesystem read-only
[  337.477507][ T7405] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.811: invalid indirect mapped block 1819239214 (level 1)
[  337.538267][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  337.562514][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  337.566289][ T7405] EXT4-fs (loop1): Remounting filesystem read-only
[  337.585147][ T7405] EXT4-fs (loop1): 1 truncate cleaned up
[  337.593312][ T7405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  337.685157][ T7405] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.811: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  337.720604][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  337.729681][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  337.740248][ T7405] EXT4-fs (loop1): Remounting filesystem read-only
[  337.766800][ T7216] device veth0_vlan entered promiscuous mode
[  337.780569][   T14] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  337.840225][ T7405] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work
[  337.884977][ T7216] device veth1_vlan entered promiscuous mode
[  337.940089][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  337.952135][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  337.961347][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  337.971789][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  337.980725][   T14] usb 3-1: Using ep0 maxpacket: 16
[  337.989677][ T7216] device veth0_macvtap entered promiscuous mode
[  337.998074][   T14] usb 3-1: config 0 has no interfaces?
[  338.005050][ T7216] device veth1_macvtap entered promiscuous mode
[  338.019689][   T14] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  338.038754][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.043396][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.057663][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.067518][   T14] usb 3-1: Product: syz
[  338.067540][   T14] usb 3-1: Manufacturer: syz
[  338.067555][   T14] usb 3-1: SerialNumber: syz
[  338.083050][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.083887][   T14] usb 3-1: config 0 descriptor??
[  338.094720][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.116354][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.133911][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.144465][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.155848][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.167756][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.176518][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  338.186443][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  338.198029][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.209591][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.222717][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.234427][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.244837][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.255898][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.266336][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.277455][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.289357][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.298401][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  338.308342][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  338.323160][ T7216] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.333270][ T7216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.375385][ T7216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.400756][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.410574][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.423185][ T7216] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.436734][ T4308] usb 3-1: USB disconnect, device number 18
[  338.582870][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  338.639829][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.658726][ T7431] loop3: detected capacity change from 0 to 512
[  338.690390][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.725091][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  338.758097][ T7431] EXT4-fs: Ignoring removed nobh option
[  338.779161][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.791893][ T7431] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  338.806849][ T7440] loop1: detected capacity change from 0 to 1024
[  338.813350][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.820941][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  338.886913][ T7440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  338.917694][ T7431] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.818: invalid indirect mapped block 256 (level 2)
[  338.961107][ T7431] EXT4-fs (loop3): 2 truncates cleaned up
[  338.999405][ T7431] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  339.112243][ T7440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  339.171170][ T7448] netlink: 40 bytes leftover after parsing attributes in process `syz.6.770'.
[  339.549636][ T7440] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.817: Allocating blocks 497-513 which overlap fs metadata
[  339.589240][ T7440] EXT4-fs (loop1): pa ffff88805505d540: logic 256, phys. 385, len 8
[  339.597810][ T7440] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1
[  339.666394][ T7449] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  339.700077][   T41] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[  339.735676][   T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  339.751689][   T41] EXT4-fs (loop3): This should not happen!! Data will be lost
[  339.751689][   T41] 
[  339.776806][   T41] EXT4-fs (loop3): Total free blocks count 0
[  339.790595][   T41] EXT4-fs (loop3): Free/Dirty block details
[  339.808720][   T41] EXT4-fs (loop3): free_blocks=0
[  339.818916][   T41] EXT4-fs (loop3): dirty_blocks=3708
[  339.824914][   T41] EXT4-fs (loop3): Block reservation details
[  339.833877][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  339.840446][  T952] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  339.866005][   T41] EXT4-fs (loop3): i_reserved_data_blocks=3708
[  339.959759][   T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1656 with error 28
[  340.160456][  T952] usb 3-1: Using ep0 maxpacket: 8
[  340.167389][  T952] usb 3-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  340.190474][  T952] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  340.309941][ T7462] loop1: detected capacity change from 0 to 512
[  340.320201][ T7462] EXT4-fs: inline encryption not supported
[  340.326275][ T7462] EXT4-fs: Ignoring removed bh option
[  340.336257][ T7462] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  340.476240][ T7462] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.824: corrupted in-inode xattr
[  340.490806][ T7462] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.824: couldn't read orphan inode 15 (err -117)
[  340.509631][ T7462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  340.864893][  T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.882469][  T952] usb 3-1: config 0 descriptor??
[  340.930387][ T4308] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  341.023520][ T7465] loop3: detected capacity change from 0 to 1764
[  341.104566][  T952] usb 3-1: USB disconnect, device number 19
[  341.122311][ T4308] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  341.143955][ T4308] usb 7-1: config 0 has no interfaces?
[  341.166122][ T4308] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  341.180416][ T4308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.188477][ T4308] usb 7-1: Product: syz
[  341.220609][ T4308] usb 7-1: Manufacturer: syz
[  341.225279][ T4308] usb 7-1: SerialNumber: syz
[  341.266922][ T4308] usb 7-1: config 0 descriptor??
[  341.408628][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  341.536972][ T4308] usb 7-1: USB disconnect, device number 2
[  342.010164][ T7479] loop1: detected capacity change from 0 to 512
[  342.064416][ T7479] EXT4-fs: Ignoring removed mblk_io_submit option
[  342.152316][ T7479] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  342.229213][ T7479] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.828: attempt to clear invalid blocks 2 len 1
[  342.294805][ T7479] EXT4-fs (loop1): Remounting filesystem read-only
[  342.331128][ T7479] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  342.344314][ T7487] loop6: detected capacity change from 0 to 1024
[  342.374302][ T7479] EXT4-fs (loop1): Remounting filesystem read-only
[  342.392442][ T7479] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.828: invalid indirect mapped block 1819239214 (level 0)
[  342.405156][ T7487] EXT4-fs: Ignoring removed oldalloc option
[  342.444838][ T7479] EXT4-fs (loop1): Remounting filesystem read-only
[  342.450098][ T7487] EXT4-fs: Ignoring removed bh option
[  342.465261][ T7479] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.828: invalid indirect mapped block 1819239214 (level 1)
[  342.502130][ T7487] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  342.507893][ T7479] EXT4-fs (loop1): Remounting filesystem read-only
[  342.545183][ T7479] EXT4-fs (loop1): 1 truncate cleaned up
[  342.563817][ T7479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  342.586519][ T7487] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  342.634515][ T7476] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.828: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  342.659670][ T7476] EXT4-fs (loop1): Remounting filesystem read-only
[  342.705249][ T7476] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work
[  343.090397][ T7216] EXT4-fs (loop6): unmounting filesystem.
[  343.513889][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  345.506020][   T14] kernel write not supported for file [eventfd] (pid: 14 comm: kworker/0:1)
[  348.100354][ T7575] capability: warning: `syz.1.853' uses 32-bit capabilities (legacy support in use)
[  348.802286][ T7589] loop6: detected capacity change from 0 to 256
[  349.330138][ T7599] loop6: detected capacity change from 0 to 512
[  349.352625][ T7599] EXT4-fs: Ignoring removed nobh option
[  349.405752][ T7599] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  349.551957][ T7599] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.861: invalid indirect mapped block 256 (level 2)
[  349.681219][ T7599] EXT4-fs (loop6): 2 truncates cleaned up
[  349.738805][ T7599] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  351.068466][   T41] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[  351.081068][ T7619] loop1: detected capacity change from 0 to 1024
[  351.108526][ T7619] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  351.117672][   T41] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  351.190867][   T41] EXT4-fs (loop6): This should not happen!! Data will be lost
[  351.190867][   T41] 
[  351.192556][ T7619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  351.235552][   T41] EXT4-fs (loop6): Total free blocks count 0
[  351.246285][ T7619] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.257022][   T41] EXT4-fs (loop6): Free/Dirty block details
[  351.300412][   T41] EXT4-fs (loop6): free_blocks=0
[  351.308232][   T41] EXT4-fs (loop6): dirty_blocks=5124
[  351.322074][   T41] EXT4-fs (loop6): Block reservation details
[  351.338345][   T41] EXT4-fs (loop6): i_reserved_data_blocks=5124
[  351.420421][   T41] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  351.829376][ T7633] loop3: detected capacity change from 0 to 1024
[  351.838021][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  352.140424][ T4308] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  352.275123][ T7642] loop3: detected capacity change from 0 to 1764
[  352.290519][  T127] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  352.340471][ T4308] usb 7-1: Using ep0 maxpacket: 8
[  352.358943][ T4308] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  352.410086][ T4308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.448914][ T4308] usb 7-1: config 0 descriptor??
[  352.492270][  T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.518340][  T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.563382][  T127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  352.615739][  T127] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  352.637801][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.682943][  T127] usb 2-1: config 0 descriptor??
[  353.123021][  T127] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  353.151111][  T127] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  354.256835][ T4403] usb 2-1: USB disconnect, device number 15
[  354.282100][ T4308] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  354.304816][ T4308] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[  354.361910][ T4308] asix: probe of 7-1:0.0 failed with error -71
[  354.426726][ T4308] usb 7-1: USB disconnect, device number 3
[  354.767031][ T7663] fido_id[7663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  356.214693][ T4403] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  356.422177][ T4403] usb 2-1: config 0 has an invalid interface number: 241 but max is 0
[  356.500413][ T4403] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  356.548888][ T4403] usb 2-1: config 0 has no interface number 0
[  356.573441][ T4403] usb 2-1: config 0 interface 241 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  356.624879][ T4403] usb 2-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60
[  356.692808][ T4403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.734571][ T4403] usb 2-1: Product: syz
[  356.738802][ T4403] usb 2-1: Manufacturer: syz
[  356.780335][ T4403] usb 2-1: SerialNumber: syz
[  356.811957][ T4403] usb 2-1: config 0 descriptor??
[  357.159529][ T4403] usb 2-1: USB disconnect, device number 16
[  360.535939][ T7735] loop1: detected capacity change from 0 to 512
[  360.609729][ T7735] EXT4-fs: Ignoring removed mblk_io_submit option
[  360.678942][ T7735] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  360.697740][ T7735] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.893: attempt to clear invalid blocks 2 len 1
[  360.780581][ T7735] EXT4-fs (loop1): Remounting filesystem read-only
[  360.787419][ T7735] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  360.843520][ T7735] EXT4-fs (loop1): Remounting filesystem read-only
[  360.854873][ T7735] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.893: invalid indirect mapped block 1819239214 (level 0)
[  360.890101][ T7735] EXT4-fs (loop1): Remounting filesystem read-only
[  360.913045][ T7735] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.893: invalid indirect mapped block 1819239214 (level 1)
[  360.990975][ T7735] EXT4-fs (loop1): Remounting filesystem read-only
[  361.018545][ T7735] EXT4-fs (loop1): 1 truncate cleaned up
[  361.057304][ T7735] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  361.136105][ T7735] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.893: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  361.413145][ T7735] EXT4-fs (loop1): Remounting filesystem read-only
[  361.443960][ T7735] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work
[  361.987862][ T7759] netlink: 'syz.6.896': attribute type 29 has an invalid length.
[  362.080759][ T7759] netlink: 'syz.6.896': attribute type 29 has an invalid length.
[  362.090343][ T7761] netlink: 604 bytes leftover after parsing attributes in process `syz.6.896'.
[  362.103410][ T4255] EXT4-fs (loop1): unmounting filesystem.
[  362.136442][ T7760] netlink: 'syz.6.896': attribute type 29 has an invalid length.
[  362.798824][ T7771] loop6: detected capacity change from 0 to 512
[  362.807887][ T4308] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  362.842059][ T7771] EXT4-fs: Ignoring removed nobh option
[  362.848402][ T7771] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  362.966307][ T7771] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.900: invalid indirect mapped block 256 (level 2)
[  362.980602][ T4308] usb 2-1: device descriptor read/64, error -71
[  363.024594][ T7771] EXT4-fs (loop6): 2 truncates cleaned up
[  363.035866][ T7771] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  363.675825][ T4308] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  363.702214][ T4322] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap
[  363.740776][ T4322] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  363.763598][ T4322] EXT4-fs (loop6): This should not happen!! Data will be lost
[  363.763598][ T4322] 
[  363.780349][ T4322] EXT4-fs (loop6): Total free blocks count 0
[  363.790443][ T4322] EXT4-fs (loop6): Free/Dirty block details
[  363.800486][ T4322] EXT4-fs (loop6): free_blocks=0
[  363.805468][ T4322] EXT4-fs (loop6): dirty_blocks=10740
[  363.821248][ T4322] EXT4-fs (loop6): Block reservation details
[  363.831041][ T4308] usb 2-1: device descriptor read/64, error -71
[  363.845968][ T4322] EXT4-fs (loop6): i_reserved_data_blocks=10740
[  364.066712][ T4322] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  364.079744][ T4308] usb usb2-port1: attempt power cycle
[  365.122659][   T26] audit: type=1326 audit(1746877844.013:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  365.180393][ T4308] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  365.221142][ T4308] usb 2-1: device descriptor read/8, error -71
[  365.345539][   T26] audit: type=1326 audit(1746877844.043:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  365.601974][   T26] audit: type=1326 audit(1746877844.043:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  365.624358][ T4308] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  365.693894][ T4308] usb 2-1: device descriptor read/8, error -71
[  365.770604][   T26] audit: type=1326 audit(1746877844.053:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  365.794358][   T26] audit: type=1326 audit(1746877844.053:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  365.820649][ T4308] usb usb2-port1: unable to enumerate USB device
[  365.912385][   T26] audit: type=1326 audit(1746877844.083:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  366.067066][   T26] audit: type=1326 audit(1746877844.263:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  366.160416][   T26] audit: type=1326 audit(1746877844.263:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  366.192015][   T26] audit: type=1326 audit(1746877844.273:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  366.398631][   T26] audit: type=1326 audit(1746877844.273:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab238e969 code=0x7ffc0000
[  366.795946][ T4364] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  366.970756][ T7818] loop6: detected capacity change from 0 to 512
[  366.981122][ T7818] EXT4-fs: inline encryption not supported
[  366.987136][ T7818] EXT4-fs: Ignoring removed bh option
[  367.032124][ T7818] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  367.634070][ T7818] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.909: corrupted in-inode xattr
[  367.646773][ T7818] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.909: couldn't read orphan inode 15 (err -117)
[  367.660113][ T7818] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  367.679574][ T4364] usb 2-1: config 0 has no interfaces?
[  367.732840][ T4364] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  367.830406][ T4364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.930577][ T4364] usb 2-1: Product: syz
[  368.044160][ T4364] usb 2-1: Manufacturer: syz
[  368.048837][ T4364] usb 2-1: SerialNumber: syz
[  368.196912][ T4364] usb 2-1: config 0 descriptor??
[  368.477486][ T7216] EXT4-fs (loop6): unmounting filesystem.
[  378.641416][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  378.647784][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  440.073620][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  440.080024][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  474.570224][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  474.577308][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7832/1:b..l
[  474.585654][    C0] 	(detected by 0, t=10502 jiffies, g=37669, q=186 ncpus=2)
[  474.592932][    C0] task:syz.6.911       state:R  running task     stack:25824 pid:7832  ppid:7216   flags:0x00004000
[  474.604624][    C0] Call Trace:
[  474.607905][    C0]  <TASK>
[  474.610839][    C0]  __schedule+0x10e9/0x40d0
[  474.615371][    C0]  ? release_firmware_map_entry+0x18a/0x18a
[  474.621264][    C0]  ? lock_chain_count+0x20/0x20
[  474.626120][    C0]  ? stack_trace_save+0x98/0xe0
[  474.630973][    C0]  ? preempt_schedule_irq+0xa6/0x150
[  474.636259][    C0]  preempt_schedule_irq+0xb1/0x150
[  474.641373][    C0]  ? preempt_schedule_notrace+0x110/0x110
[  474.647096][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[  474.652971][    C0]  irqentry_exit+0x63/0x70
[  474.657384][    C0]  asm_sysvec_reschedule_ipi+0x16/0x20
[  474.662841][    C0] RIP: 0010:__reset_page_owner+0xbf/0x1a0
[  474.668561][    C0] Code: 8c 00 00 00 e8 42 06 a6 ff 41 83 ee 01 0f 82 ba 00 00 00 e8 33 06 a6 ff 4c 89 ff be 08 00 00 00 e8 26 7b f7 ff 49 0f ba 37 01 <4c> 8b 2d 6a 7c c8 0a 4b 8d 7c 2f 0c 48 89 f8 48 c1 e8 03 42 0f b6
[  474.688173][    C0] RSP: 0018:ffffc900033f72e8 EFLAGS: 00000257
[  474.694243][    C0] RAX: ffffffff81dacd01 RBX: 1ffffffff1947254 RCX: ffffffff81dacd8a
[  474.702217][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88801ad13148
[  474.710186][    C0] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed10035a262a
[  474.718169][    C0] R10: ffffed10035a262a R11: 1ffff110035a2629 R12: dffffc0000000000
[  474.726153][    C0] R13: ffff88801ad13120 R14: 0000000000000006 R15: ffff88801ad13148
[  474.734134][    C0]  ? __reset_page_owner+0x31/0x1a0
[  474.739257][    C0]  ? __reset_page_owner+0xba/0x1a0
[  474.744404][    C0]  ? __reset_page_owner+0xba/0x1a0
[  474.749517][    C0]  free_unref_page_prepare+0x8b4/0x9a0
[  474.755002][    C0]  free_unref_page+0x2e/0x3f0
[  474.759707][    C0]  __unfreeze_partials+0x1a5/0x200
[  474.764844][    C0]  put_cpu_partial+0x17c/0x250
[  474.769620][    C0]  ? put_cpu_partial+0x6e/0x250
[  474.774486][    C0]  qlist_free_all+0x76/0xe0
[  474.778998][    C0]  kasan_quarantine_reduce+0x144/0x160
[  474.784461][    C0]  __kasan_slab_alloc+0x1e/0x80
[  474.789328][    C0]  slab_post_alloc_hook+0x4b/0x480
[  474.794438][    C0]  ? slab_pre_alloc_hook+0x59/0x310
[  474.799649][    C0]  kmem_cache_alloc+0x123/0x2f0
[  474.804499][    C0]  ? ptlock_alloc+0x1c/0x60
[  474.809101][    C0]  ptlock_alloc+0x1c/0x60
[  474.813458][    C0]  pte_alloc_one+0xc5/0x2f0
[  474.818000][    C0]  ? pfn_modify_allowed+0x560/0x560
[  474.823249][    C0]  ? hugepage_vma_check+0x466/0x540
[  474.828501][    C0]  handle_mm_fault+0x280a/0x3e70
[  474.833445][    C0]  ? mt_find+0x145/0x810
[  474.837701][    C0]  ? numa_migrate_prep+0x250/0x250
[  474.842819][    C0]  ? lock_chain_count+0x20/0x20
[  474.847701][    C0]  ? lock_mm_and_find_vma+0xae/0x2f0
[  474.853006][    C0]  do_user_addr_fault+0x51f/0xb10
[  474.858059][    C0]  exc_page_fault+0x60/0x100
[  474.862671][    C0]  asm_exc_page_fault+0x22/0x30
[  474.867532][    C0] RIP: 0010:copy_user_short_string+0xa/0x40
[  474.873433][    C0] Code: 83 f8 12 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10
[  474.893039][    C0] RSP: 0018:ffffc900033f7a48 EFLAGS: 00050202
[  474.899102][    C0] RAX: ffffffff8407a201 RBX: 0000000000000038 RCX: 0000000000000007
[  474.907069][    C0] RDX: 0000000000000000 RSI: 0000200000033000 RDI: ffffc900033f7ae0
[  474.915054][    C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff5200067ef63
[  474.923021][    C0] R10: fffff5200067ef63 R11: 1ffff9200067ef5c R12: 00007fffffffefc8
[  474.931010][    C0] R13: dffffc0000000000 R14: ffffc900033f7ae0 R15: 0000200000033000
[  474.939008][    C0]  ? _copy_from_user+0x51/0x170
[  474.943878][    C0]  _copy_from_user+0xf4/0x170
[  474.948568][    C0]  ___sys_recvmsg+0x12b/0x510
[  474.953273][    C0]  ? __sys_recvmsg+0x270/0x270
[  474.958066][    C0]  ? __lock_acquire+0x7c50/0x7c50
[  474.963103][    C0]  ? __might_fault+0xc2/0x120
[  474.967808][    C0]  ? __might_fault+0xa6/0x120
[  474.972506][    C0]  do_recvmmsg+0x359/0x7d0
[  474.976940][    C0]  ? __sys_recvmmsg+0x280/0x280
[  474.981814][    C0]  ? __up_read+0x27c/0x660
[  474.986248][    C0]  __x64_sys_recvmmsg+0x18d/0x240
[  474.991289][    C0]  ? do_recvmmsg+0x7d0/0x7d0
[  474.995898][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  475.001122][    C0]  do_syscall_64+0x4c/0xa0
[  475.005552][    C0]  ? clear_bhb_loop+0x45/0xa0
[  475.010246][    C0]  ? clear_bhb_loop+0x45/0xa0
[  475.014960][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.020874][    C0] RIP: 0033:0x7f9ad978e969
[  475.025307][    C0] RSP: 002b:00007f9ada653038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  475.033728][    C0] RAX: ffffffffffffffda RBX: 00007f9ad99b6080 RCX: 00007f9ad978e969
[  475.041699][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 000000000000000d
[  475.049668][    C0] RBP: 00007f9ad9810ab1 R08: 0000000000000000 R09: 0000000000000000
[  475.057650][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  475.065628][    C0] R13: 0000000000000001 R14: 00007f9ad99b6080 R15: 00007ffc9a7a39f8
[  475.073618][    C0]  </TASK>
[  475.076631][    C0] rcu: rcu_preempt kthread starved for 9822 jiffies! g37669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  475.087733][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  475.097696][    C0] rcu: RCU grace-period kthread stack dump:
[  475.103578][    C0] task:rcu_preempt     state:R  running task     stack:26912 pid:16    ppid:2      flags:0x00004000
[  475.114357][    C0] Call Trace:
[  475.117651][    C0]  <TASK>
[  475.120581][    C0]  __schedule+0x10e9/0x40d0
[  475.125103][    C0]  ? release_firmware_map_entry+0x18a/0x18a
[  475.131028][    C0]  schedule+0xb9/0x180
[  475.135097][    C0]  schedule_timeout+0x15c/0x280
[  475.139949][    C0]  ? console_conditional_schedule+0x40/0x40
[  475.145844][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  475.151742][    C0]  ? update_process_times+0x1b0/0x1b0
[  475.157121][    C0]  ? prepare_to_swait_event+0x335/0x350
[  475.162670][    C0]  rcu_gp_fqs_loop+0x2f2/0x1310
[  475.167519][    C0]  ? rcu_gp_kthread+0x380/0x380
[  475.172365][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  475.178517][    C0]  ? rcu_gp_init+0x14b0/0x14b0
[  475.183294][    C0]  ? rcu_gp_cleanup+0xb4c/0xca0
[  475.188168][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  475.193392][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  475.198649][    C0]  rcu_gp_kthread+0x95/0x380
[  475.203257][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  475.208372][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  475.214386][    C0]  ? __kthread_parkme+0x162/0x1c0
[  475.219424][    C0]  kthread+0x29d/0x330
[  475.223522][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  475.228632][    C0]  ? kthread_blkcg+0xd0/0xd0
[  475.233230][    C0]  ret_from_fork+0x1f/0x30
[  475.237660][    C0]  </TASK>
[  475.240676][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  475.247026][    C0] Sending NMI from CPU 0 to CPUs 1:
[  475.252359][    C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10