last executing test programs:

5m35.085305529s ago: executing program 3 (id=52):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ff0300", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xffff}}}}}}, 0x0)

5m34.827045835s ago: executing program 3 (id=54):
unshare(0x40400)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000000, 0x204031, 0xffffffffffffffff, 0xffffc000)
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4)

5m34.691949078s ago: executing program 3 (id=55):
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='-', 0x1)

5m34.472844261s ago: executing program 3 (id=58):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c6661756c745f747970653d30303030303030303030303030303033323736372c6d656d6f72793d6c6f772c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c646973636172642c6e6f657874656e745f63616368652c6e6f71756f74612c636865636b706f696e743d64697361626c652c00363101be2f2414c1ff59cf0ff87782bcde43f7989389b5df0c89a39b9879753e01c3936df8f39b60655e3609ad58e855a62cde73be8487d7f660b8da7993b53c4bea49f4e3f2d6b81984f7eeaafb913ce47a483219b0f7b60a2b1f30eb272e8137a471ec62a32d98bb77dfeb8bb0c56400"/344], 0x6, 0x550f, &(0x7f00000089c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x201861, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

5m32.175462856s ago: executing program 3 (id=69):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x8, @private1, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x7, @remote, 0x3}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001880)='D', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x6, 0x8}, 0x8)

5m30.887186757s ago: executing program 3 (id=79):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000480)="1003", 0x2, 0x4004, &(0x7f00000004c0)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

5m30.2757085s ago: executing program 32 (id=79):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000480)="1003", 0x2, 0x4004, &(0x7f00000004c0)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

4m0.259491063s ago: executing program 2 (id=873):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0})

3m58.109809183s ago: executing program 2 (id=891):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0001}]})
close_range(r0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)

3m57.997173184s ago: executing program 2 (id=892):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x51, "1e7676707d6b50f129a1f8ef0e2402651051b3ec2b7f108175703a07cfd6847cf73e37d36f5a3ed8af522bd88f07ec004d383e8061d117bbba6b9f04dd734f6a467f1fdd55821a9d9fedf2dab6cd9c0884"}}, 0x57)

3m57.220660523s ago: executing program 2 (id=895):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8)

3m57.088061577s ago: executing program 2 (id=897):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080))

3m56.661817401s ago: executing program 2 (id=900):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1c, &(0x7f0000000100)='\x00', 0xb, 0x1, 0x4c4a, 0x6, 0x9, 0x1, 0x3, 'syz0\x00'})

3m56.119151456s ago: executing program 33 (id=900):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1c, &(0x7f0000000100)='\x00', 0xb, 0x1, 0x4c4a, 0x6, 0x9, 0x1, 0x3, 'syz0\x00'})

3m55.430961666s ago: executing program 1 (id=911):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000)
inotify_init1(0x0)

3m54.107332762s ago: executing program 1 (id=919):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2842, 0x0)
read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
splice(r0, 0x0, r1, 0x0, 0x7c1f, 0x8)

3m53.871165015s ago: executing program 1 (id=921):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x44080)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9})

3m53.849118558s ago: executing program 1 (id=922):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x804000, &(0x7f0000000100)=ANY=[], 0x2, 0xc2d, &(0x7f0000000ac0)="$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")
mount(&(0x7f0000001700)=@loop={'/dev/loop', 0x0}, &(0x7f0000001740)='./file1\x00', 0x0, 0x41002, 0x0)
r0 = open(&(0x7f0000001780)='./file1\x00', 0x14f840, 0xa4)
preadv2(r0, &(0x7f00000017c0)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0xe435, 0x0, 0x19)

3m53.270319457s ago: executing program 1 (id=924):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x201401b, &(0x7f00000005c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

3m52.543328951s ago: executing program 1 (id=926):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x2977e644, "f1f813ba800ffb526103eefd9658a5092152da166900a9057729d9374fa8b698"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"})

3m51.950798322s ago: executing program 34 (id=926):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x2977e644, "f1f813ba800ffb526103eefd9658a5092152da166900a9057729d9374fa8b698"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"})

3m4.427798095s ago: executing program 4 (id=1235):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000004e80)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x2400000)
mount$9p_tcp(&(0x7f0000004ec0), &(0x7f0000004f00)='.\x00', &(0x7f0000004f40), 0x8010, &(0x7f0000004f80)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22'])

3m3.312275479s ago: executing program 4 (id=1241):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x4c002, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2282, 0x0)

3m2.979365293s ago: executing program 4 (id=1243):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0xe8a, 0x6, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x10}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041890}, 0x0)

3m2.315342021s ago: executing program 4 (id=1247):
r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000600)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000640)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @c}})
mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xf6)

3m1.409278913s ago: executing program 4 (id=1252):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3m0.601050516s ago: executing program 4 (id=1258):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0)

2m59.837509334s ago: executing program 35 (id=1258):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0)

6.911009794s ago: executing program 7 (id=2609):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0xc, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$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")
r0 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x21)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)

6.607444265s ago: executing program 7 (id=2614):
r0 = socket$tipc(0x1e, 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

6.392610838s ago: executing program 7 (id=2616):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3020000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005000900000040000000030000000800000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
write$UHID_INPUT(r0, &(0x7f0000001140)={0x8, {"c87eec4c9589b86c9d133721d4d5b15219cd525a4c5ec1f012387b049aefcd944f8d6327d86077d1e542486f96032612a415636e941f0bdef01339e4fc8248b8269f2acadb7630a0db0f3baede0b4c1c26b1c033e4000123be62693a0669ca5dbdc58d2ef6222115094e63ff932582166288dbe7c5caa24d0e6db83d00eb4b235a7d83ec917b6f05b42c76e4fcf58a2e378ce6f368884724d56b3808b600379cf3bc78e8905a665c1de27b854971cfaa77ecb01ca1abe38e323d96a146188544971daf0ef8cd6b6ad1d2c20f861abe74db559eee8dd085b162e5e9990930e7e78f1b9473421dd5ea6b75a6199142c5c7bada02b67890c464707e9cb17874e6a275dd60246560da79247161d0b6a2d5ec48e9f03b6796ae6720a617112b89888504f724410b37b11811d3f6aa612bb7d788271bd9d4718308db7b3e5cc148b460e75cf79b42c39f3e9e4edf3858367d51f5575ad255f38580185b4a2e4940e42308f317a0b106dd8a425a0aba11f19e6fd637499b1fee02947f246c581608c8b4ff498b745b699f4fb436d83363b60337d74e66711d757d17cdc88142c271d08e37f2a63b9d4cb84f18c71b266b0408c8b6b6fa06208035cc5dd2a9951b75902cf45b29b53bff4eee9933a92b7b5c718f269e294974f0b5e8ac0f52598a2edb693573c5dfdfd62ddfb4d90c9c3569196ee9c571b12e7414b7d09b4e6f8703cf6de5c2d1776998b2c2316d2e31fb47ee60535ff12f6913fafa5ae4246ae4cc0e5d9d02179759ca56f3cebb73a1e1526321fb6bd9cb57d3abe775cac1663639d9dda2c017a18480758aba0e40a8213b767552f349b2d5d1e5d1b7a2275895520145d0e2a3f05b0d5f2394507c1f03fa93fdf15b4e63ff72f7f0c3bd5ea4aadf85edfd395e21fb96bfe8d6c793035c3c1a6dc963b71f9367489063ee1bd4b6ac6f29d6021942e84d16582608765f4e0f8df740f7258b3c9f6f77b18101228f3662c68e43e4f02942953e1bc0d23dba9d8bf2b5d043ee80dd4c5d5b5171aa17c67fcc0caa8bbac5e3f56a1422f34e4f145d12f61b672d6826fb024aede2c29d6d060c2a61ae020b94d132994c2097e157ae475a95df72234d27e400c80f754a808c857e036eeafcd57dcbcd1df3aa84a341e9b33bf1a467df7bb9d9b7547cd2c939f23d90df1ce82cbd175c1be453a8fb0094b8a4778f3249e5e60957c0b81c08deeb53b217af12b04b0a431973ddfb6a3f492ec01e0a8709757fc9ab62a7a88c7f97f5169c5a9bb08a08c4b967c0d062b60d15191233937e9f9a631424554b109d02c9c1fef9e233a5e6df4226730a33fd648131d46e356dcd2fb47136bfa0323395ea5898d6911929b2d1bc3c13132ea638fdd7de03de2cd615638719e84683528a3b40449e58202d01933485d4601afe571a731ba93042fac2329665b5bf1fa395049d570579217614c965144ec7a535bcc22468ce8241612e0543e13c0c7184a2a2834b1a72723bc117aaf38ad1bb0fb224a74ce2dab1bd2ada1f767dd95f0d765d781bd07b94be3092e6548ae6eb3722b7af420d91fde48eb2ab8b6c567869e5568a1ce028e40c17533788bb000a69324b44e280c20daba5ee678358aa09c8dd4c465877d5ddfd433b3d4d44f90cae7b03cee1f32d479800d3851f9df9aa4058ce2dbb97b4080959a9a4bc4690c286eff51373d4cbc8045c89069bbbc60c79cd4724212f7b9590617f31903aba343024f039bc9749880aec6f3061e7f2981ca3715cf9da9a9e14addcf78a752560f01beef35fd706a0b090efae093b81d044d55933b503f6479b21cba8f5b3c54d17e48c2a2893a4e9982795cb87a4842a6bc3ffa7159210187f7cefd7819bd998643972e572ccf7bed0971288540a5151871c5caf6211c5d01bd24ccd6ec69237720392c5a684f67797091d74a9f1f7ecf7628465b14ea262307edad2436dc404c0c37b35fd402d50c80cdf62acd23c8c90e735b92ede5640d878c2e21207fbebf37b193debc0565096d7fb90b91f0d33feeb0ce2ebca20eb5ef51bb7d9c899f93ef9fd45bdede099ef12b0695cd84e6faed9a20cc3868416d24776fde496260655a78e652fa838f0145a0de2d839c63acc253a8d935747d490cea6d7f03149a8a632bd84908c58393877c1014cd686c263badceced420aab878fd31622136e7f35c5062da1ea71c4764f93016896e6f8e2013c2401b9adce9b6ae4d2de9bd32a62699bdeabf4bee72de30409c0c71e2b229f79b684caec24c063cb975db52550a8a28f78599353c0934e69b2832ee636cc77a0e9ca20a56c8b616e31c371972ca9ba87ed34338f039035c2bb0e4fde48a66247c7506fb36911e0b7d3ed7e8d4c3fb48f819b0990146ab298395feb67096150f4340d6754158029bd501aa00a4556b69a4eef7cc7057910a0a7232f4103df95831926e6d1edb1424a39245de3b8a1f91e848d85932fbcc1aff9558e9feee4a2eee6dd0486363450975a26d24574b5cff41c81c09edfd46354c675eadc89017560781c44956293e21b7e47dd980db258ce50c1b80b0f0811966ed2e820e84d7ce9275c1d7f0226f580233c22ca161cd33bf8bb4a42b7ba0b9a45b9d134f0ced4c594b84592d2940ada8e7ee5280f471092d98e8a6b9cb5af11d4d3de85692502d5447b4fdaeee25ef65f66487bfd1a58a1c97d6e093e94212cf6d6479b02f0a8619c7f444c0f80800c4457e8e742821948ba93472e830024690bdd3fcf15689c64f29361daace7b78007fff222da0cf4159ab904deec1e9e9e6641118d02a8db1c4c9d91def78353e2e314e73301c75acb815a54369af990a5f60b61e973a0d6b24d63e3c56ba87fa3c1015179926afde0d9a633541d0d30e0517a33064460c2b1e0e6a1abfcd5f01a2d8f0ee31a82febb1e66fdde8474444b7857964c46e6556591d646cfdd577e0e7a04f8ef758fdbe119d0950e945c34d7595d035c963c5761ce4f031fd28561e28b770379da228b585521117fcb4a560b266505a88cc924fd801c9836f32c88c534e8425dba2f2b2f772fed14503d75605ef54c405eff567da2822a3ca5a978f30b92a972fd6b8c870c903d2c79f28589cc0b75140ae2fccfcd847f6ceee6cbbcc7c0038f78b7f714bd85e6226dfa50690335e528ee51addedfba5e71694d8dd061d7d83e36bc2fc850802c956f2d460ff133f22fda640f211bf10dbe477bb163937599ad292730584e56f3f8301e41b803ad695adbe35f32ee40fb49d546cb80fbf284795dfafb11a15caea6240c75973e5cd112c2af0618e20438ea8fc7be7d70d63b4eee4005daf21769768c9e06786308a3e7d3187ec2be1d56cb42e5f48efe2ca37712653073e28eeee3f436da285775538c7b508304749ab67313ad66d55203fd125be49774be3827a73e04c2f6971c082aab3619538c95afef3b46be999d80bf625d323a4f39edc4e1f7b044beadddc69940d131203f522310c083cd1408b234845c1b75d65d58f01c229ef8a08fa6466cb47a8d3c900d5fd504ccf0afcf4cb1e34247f3765b4ec49d068a7a83a6a972db2fdf1ecc4895cc3b16f0398a66da1b35b2f3adc9b5632090be6ce5bc41d344ae15c58c22ebb0309fdfe79f48b8f5cf4367cff9faebf21ee86774e431c10d7f8721381647ae333ba62a78ef59ac2590d2d91d7a8773373ad3e41f6db588d1c0aeefc4f3523dd6dcd51e0b42c779b4813651d0f85769f27273d972c546093132e7d8d417105a8339eab8e55107b766596e0f7a0ba16b71783be757f8de2ce95044f9b049294a040805ffbd133dfb900b7eba8618322421a3434c6f1e17f6a0dd569eb493089f3d0d97675993cf35b057a0bccc2a874251d1ee5a168ff3790e5ac14e8018f5f2f68fe349aa642c88d204009be0aa056b7d21b0137a2c4fa51b8c10e299c596f9868a6a477e7d8615501b6f47bb662b5d86c1452e9b790696dcee2618aec37a4e35cf0f778a28ac7d4462bd660dd949a8d2d39e9a3051a37e9e1dbe9515add9b54a648735f44446099a4bb543500167c8dbc9abd37087e08c9f556a37e83e967980f5824e9583012a227ee9d61f1d42a831ce0cf460c44574e30f5d19b003e697653b48baa4f2c0388dab8fe2d3e6b86d092a5df62e7d8f6489781c1e1592eea5a35c0803a6d468b567373e84ff8a3c40b47a94a4053577459f77df963849d6507aede52840fe1c449918efbbcf2875968d2102ce4181ea45893dd2f13fd19f21f9c4e59bc0ebe2f77720b5a6e6f4d72e1a9ecde80ca1fb4990fcaf37b434369a1a6d5cf6d113cad0647eea431ce9ff84be68811a8b3d2b63dce95c4178dca67d809681c9fbaf81b8ca604b418d8421d23e52f1ad702bb752c4b11737f449695608a7d86a8bdf20ef2f816006898b092779e86a12b078ebef7b767b94621c49fc9417df9b0dfaedbaa8d4075de4b1f4f99911b4ee3352c5d46fd094ae624209f3d9d1aef494a87c3a4426762c12aaefd9b64da2bc9fd6b4ceb714ccc8f81b95eca9af54d5e58829b5f45c5239989d0525e0764028705c5d3a751627037851c8121d8a99a0e6cdaf2cc7d5c9af8f8fb2c9c2eec758ee86074e7781f0c4d3e083f9cf77d9e7204939509ff74d4cfde03c119a35ac3c949f18cb48bb1a66ef0f3fdc361f9d8bfb499c8c550fb6364fe758583d5eb9cc14e90a6aadba1c9ed624883c9255cfdaad5a73dcba7da5296b001ef74f6ef09859ef298f138cafcb5a83771862229b9c119db38957c44df8e2f9b5e778b8bb5297da843c7c4063facb1f858fb1e32fe990378d3b0bebbd36fa8d79cfbeda467b141390c9a9ceedb6215e0029c9a8893f17e0cf09372c37a287abeadbc6776bde4537261b5802bc8bdaeb5f393e3e839601e5df4f196d581cc960e370b55482c55dc615c80b5e933a782f16861a63c5d6ab72877fb95eec4621bafaf9e12a7ff9642b42923b24ee79b3762717040ba86c4bafbf95f90763c3aa8c4d8c242d6e0865afadc2c9bb1663dfeb86e06da2385211fd54800386401af02c50f457cbc3a3c1728f3c0334a5ef7f2637d3462387faca312da3829d76ecc74cbb155d9424115c98a0fc1a8c6ee5fb0b2218bb340ab0843be7a0b0c93295c032b191b62f0aa83e0de7448606fc022c1894cf54d5ae8c6661aae9bb668380e3cba443f733feba26bb9a6925682d3613a10bfa653fa4422b96cc5b2af4107a3b42313e7bba56f96ace3394ba4f642cebf102f2839ee2f6be6627569cb9094517e313d922a850330eecd55bc59501bb39135c778894ef90bf4a81bd9d13bc77ec6c28b097cf52f9287046f7504e0c4f892aadd3ca8f1e13a2e16686b9b1500124a250de64a7c74742007d76aac5cf5cde3f78f73b780353908e65a11e1bf5af00e4106657aecaa9af6e37c9962a8ab86bb83e6e7ef16baa70709e5611cde4357f31effac20e7b7581d27fa52472614acc4a468b8d377c445a95e93ff467d96bc5381cbd4d68719e509c062f5ccb2f22a5000ee8b054bb05f2db993c533d3c4ce98571d22e0ea1c37670cb58a4d8055aa56c073699c70eac15999855e7ca92993632985b6956d8fd315426dfe7dac06afdb25b9361175767971d588a5908474625a0d97aab3ff179d143a2a49700b4d4659c72c5bd5192e06a9c27e14683cbfc49b3e31a52ce1004a350142b8c8ac9ddd6ec96f159200e69daf87a7e2388f094fb7306734b356d644bc9fdbf89753d2bed84dc8e1ce83ec82d224f97e303e299bcc2b02d4bbe3e601aa5577000b2566ede17", 0x1000}}, 0x1006)

4.927362257s ago: executing program 6 (id=2623):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xf, 0x81, 0xff, 0x408}, {0x1, 0x4e, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0xc}}, 0xe8)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000001280), 0x6)

4.168221295s ago: executing program 7 (id=2629):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

3.985523404s ago: executing program 0 (id=2630):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000180)="d9", 0x1}], 0x1}}], 0x1, 0x41)
shutdown(r0, 0x1)
sendmsg$inet_sctp(r0, &(0x7f0000001280)={0x0, 0x8400, &(0x7f0000000040)=[{&(0x7f0000000140)="9a", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="30000000000000008400000001000000ff4309004100000005000080ffffffff080000001607000002000000", @ANYRES32=0x0, @ANYBLOB=' '], 0x50, 0x4000}, 0x24000090)

3.787397744s ago: executing program 0 (id=2631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000054000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000070006007272000008000800000000000c000700000000452b56d5000800090080"], 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0x8c}}, 0x0)

3.659780147s ago: executing program 0 (id=2632):
setns(0xc9, 0x0)
r0 = socket(0x8, 0x5, 0xb)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x6180, 0x0)
recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x10040, 0x0)

3.454638207s ago: executing program 0 (id=2633):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

3.260296368s ago: executing program 0 (id=2634):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,checkpoint=disable,flush_merge,fault_injection=00000000000000001262,acl,noacl,compress_cache,heap,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c006973636172645f756e6974497365676d656e742c6661756c745f747970653d303030303e3030303030303030303030303030b88a00"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103042, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0})

2.332773912s ago: executing program 6 (id=2637):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x793, 0x81, 0x4, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x20044000)

2.287124077s ago: executing program 7 (id=2638):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e40)={'wpan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}]}, 0x24}}, 0x4004080)

2.215409284s ago: executing program 5 (id=2639):
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sec\x00', 0xff)
mount(0x0, &(0x7f0000000740)='./sec\x00', &(0x7f0000000780)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x2, 0x0)
pread64(r0, &(0x7f0000000240)=""/21, 0x15, 0xea)

2.171789649s ago: executing program 6 (id=2640):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = socket$packet(0x11, 0x2, 0x300)
mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x8c, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

2.101513576s ago: executing program 5 (id=2641):
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000800)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="80", 0x1}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="87176a252ab436b61fa3e716d830a89ad16f1a7e2378ffeb9d1da8ec566f692749377c6c75cbe44e6d995fe57529ccf1faf9169fa7297929e1ccf781e48e7714e5df635725fd5d4dc2c9c45a56893e7a98cf0f078c5ece1745271779ecb71ba23f08d63577671d44ca9846398a559a1fbe", 0x71}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/119, 0x77}], 0x1, &(0x7f0000000b00)=""/175, 0xaf}, 0x40000000)

1.907027116s ago: executing program 6 (id=2642):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
close(0x3)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x6}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x2)

1.815900415s ago: executing program 5 (id=2643):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/trace_marker\x00', 0x2, 0x1aa)
write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './debug', [], 0xa, "93236ec9e9479acdc9b6db0eb5a1be06fdff0272fa3dd4c2dad0e7d2295870764322dd9f5def37ea6ccf1d49a6f9aa51b47658fc79d71c7a1112cd5a997f4c01a96dffa7cfc372e73c2290098b96d9bcc3b9143a09fc"}, 0x61)

1.612318306s ago: executing program 6 (id=2644):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000002500)=""/4096, &(0x7f0000000080)=0x1000)

1.555404701s ago: executing program 5 (id=2645):
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000b40)='./proc\x00', &(0x7f0000000b80)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x1, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000c00)={0x7, 0x1b, 0x2}, 0x7)

1.325961395s ago: executing program 6 (id=2646):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1,0x', 0x4)

1.313220386s ago: executing program 5 (id=2647):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xf7)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/loadavg\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/100, 0x40)

1.101629428s ago: executing program 5 (id=2648):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@test_dummy_encryption}, {@debug}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xe2, 0x47c, &(0x7f0000000cc0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1)
open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000020000000b"], 0x0)

1.100244228s ago: executing program 0 (id=2649):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)

696.728219ms ago: executing program 7 (id=2650):
mkdir(&(0x7f00000004c0)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='dir0\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0)
poll(&(0x7f00000006c0)=[{r0, 0x4004}], 0x1, 0x1)

0s ago: executing program 36 (id=2650):
mkdir(&(0x7f00000004c0)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='dir0\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0)
poll(&(0x7f00000006c0)=[{r0, 0x4004}], 0x1, 0x1)

kernel console output (not intermixed with test programs):

g 0xc
[  297.832573][  T175] hid (null): report_id 3323596431 is invalid
[  297.850081][  T175] hid (null): unknown global tag 0xe
[  297.863259][  T175] hid (null): unknown global tag 0xe
[  297.881686][  T175] hid (null): unknown global tag 0xe
[  297.896100][  T175] hid (null): unknown global tag 0x63
[  297.914671][  T175] hid (null): unknown global tag 0xe
[  297.928564][  T175] hid (null): global environment stack underflow
[  297.943944][  T175] hid (null): unknown global tag 0xc
[  297.962413][  T175] hid (null): unknown global tag 0xe4
[  298.025344][  T175] usb 7-1: USB disconnect, device number 7
[  298.075443][T10951] loop7: detected capacity change from 0 to 8192
[  298.092081][T10951] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  298.133745][T10951] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal
[  298.160145][T10951] REISERFS (device loop7): using ordered data mode
[  298.181301][T10951] reiserfs: using flush barriers
[  298.202258][T10951] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  298.247290][T10951] REISERFS (device loop7): checking transaction log (loop7)
[  298.404168][T10951] REISERFS (device loop7): Using tea hash to sort names
[  298.424790][T10951] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  298.863646][T10965] loop7: detected capacity change from 0 to 1024
[  299.008296][T10965] hfsplus: catalog searching failed
[  299.112762][ T3470] hfsplus: b-tree write err: -5, ino 3
[  299.873124][T10991] Failed to get privilege flags for destination (handle=0x2:0x9)
[  299.900962][T10974] loop7: detected capacity change from 0 to 32768
[  299.934522][T10974] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1594 (10974)
[  300.047330][T10974] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  300.115059][T10974] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  300.180184][T10974] BTRFS info (device loop7): turning off barriers
[  300.234161][T10974] BTRFS info (device loop7): setting nodatasum
[  300.280286][T10974] BTRFS info (device loop7): turning on sync discard
[  300.333567][T10974] BTRFS info (device loop7): setting nodatacow, compression disabled
[  300.392079][T10974] BTRFS info (device loop7): turning on flush-on-commit
[  300.441672][T10974] BTRFS info (device loop7): enabling ssd optimizations
[  300.496359][T10974] BTRFS info (device loop7): enabling disk space caching
[  300.537759][T10974] BTRFS info (device loop7): turning off discard
[  300.544144][T10974] BTRFS info (device loop7): force clearing of disk cache
[  300.637075][T11012] zero sized request
[  300.649876][T10974] BTRFS info (device loop7): disk space caching is enabled
[  300.884562][T10974] BTRFS info (device loop7): rebuilding free space tree
[  301.101363][T10974] BTRFS info (device loop7): disabling free space tree
[  301.151228][T10974] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  301.214567][T10974] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  302.770428][ T9870] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  302.801353][T11064] loop0: detected capacity change from 0 to 1024
[  304.211453][T11106] loop7: detected capacity change from 0 to 164
[  304.300401][T11106] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=164
[  304.363801][T11109] loop0: detected capacity change from 0 to 64
[  304.592037][T11112] loop6: detected capacity change from 0 to 2048
[  304.750532][T11112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.877771][T11122] loop7: detected capacity change from 0 to 7
[  304.957695][T11122] Dev loop7: unable to read RDB block 7
[  305.016826][   T12] loop: Write error at byte offset 2, length 3584.
[  305.064126][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  305.073952][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  305.087738][T11122]  loop7: unable to read partition table
[  305.118011][T11122] loop7: partition table beyond EOD, truncated
[  305.153240][T11122] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  305.262270][ T5152] Dev loop7: unable to read RDB block 7
[  305.283228][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.305330][ T5152]  loop7: unable to read partition table
[  305.321896][ T5152] loop7: partition table beyond EOD, truncated
[  305.587979][T11138] loop0: detected capacity change from 0 to 512
[  305.654592][T11138] EXT4-fs (loop0): 1 truncate cleaned up
[  305.700832][T11138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.949547][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.499407][T11161] loop6: detected capacity change from 0 to 4096
[  306.608325][T11170] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.782368][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  306.822996][T11176] loop7: detected capacity change from 0 to 512
[  306.969103][T11176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  307.099866][T11176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.205995][T11176] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  307.448576][T11176] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1653: bg 0: block 217: padding at end of block bitmap is not set
[  307.554882][   T98] block nbd0: Possible stuck request ffff888022d10000: control (read@0,1024B). Runtime 90 seconds
[  307.596087][T11176] EXT4-fs (loop7): Remounting filesystem read-only
[  307.779072][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.070074][   T27] audit: type=1326 audit(1793715187.971:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.7.1662" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7f619fb19 code=0x0
[  308.129176][T11214] loop0: detected capacity change from 0 to 2048
[  308.204821][T11214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.439266][T11225] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.1668'.
[  308.495893][T11225] netlink: zone id is out of range
[  308.521950][T11225] netlink: zone id is out of range
[  308.549144][T11225] netlink: zone id is out of range
[  308.580990][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.593438][T11225] netlink: zone id is out of range
[  308.612423][T11225] netlink: zone id is out of range
[  308.657849][T11225] netlink: zone id is out of range
[  308.681794][T11225] netlink: zone id is out of range
[  308.711023][T11225] netlink: zone id is out of range
[  308.745094][T11225] netlink: zone id is out of range
[  308.771198][T11225] netlink: zone id is out of range
[  309.095466][   T27] audit: type=1326 audit(1793715189.001:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.6.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918039fb19 code=0x7ffc0000
[  309.331091][   T27] audit: type=1326 audit(1793715189.031:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.6.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918039fb19 code=0x7ffc0000
[  309.547923][   T27] audit: type=1326 audit(1793715189.031:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.6.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918039fb19 code=0x7ffc0000
[  309.654369][T11256] loop7: detected capacity change from 0 to 2048
[  309.756984][T11261] loop5: detected capacity change from 0 to 8
[  309.769357][   T27] audit: type=1326 audit(1793715189.061:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.6.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918039fb19 code=0x7ffc0000
[  309.901166][T11261] squashfs image failed sanity check
[  309.930021][T11256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.014085][   T27] audit: type=1326 audit(1793715189.061:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.6.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f918039fb19 code=0x7ffc0000
[  310.222905][   T27] audit: type=1326 audit(1793715189.061:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.6.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918039fb19 code=0x7ffc0000
[  310.395340][   T27] audit: type=1326 audit(1793715189.061:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.6.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918039fb19 code=0x7ffc0000
[  310.460181][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.560660][   T27] audit: type=1326 audit(1793715189.061:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.6.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918039fb19 code=0x7ffc0000
[  310.768549][   T27] audit: type=1326 audit(1793715189.071:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11237 comm="syz.6.1672" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918039fb19 code=0x7ffc0000
[  311.006013][T11291] loop7: detected capacity change from 0 to 1024
[  311.035483][ T5925] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  311.255069][ T5925] usb 6-1: Using ep0 maxpacket: 16
[  311.308533][ T5925] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  311.366904][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.424762][ T5925] usb 6-1: Product: syz
[  311.451186][ T5925] usb 6-1: Manufacturer: syz
[  311.486600][ T5925] usb 6-1: SerialNumber: syz
[  311.731957][ T5925] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  311.847316][ T5925] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  311.906680][ T5925] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  311.962320][ T5925] usb 6-1: media controller created
[  312.083925][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  312.233281][ T5925] zl10353_read_register: readreg error (reg=127, ret==-71)
[  312.384578][ T5925] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  312.443528][ T5925] usb 6-1: USB disconnect, device number 7
[  312.507799][ T5865] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  312.531969][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  312.755189][    T9] usb 7-1: Using ep0 maxpacket: 32
[  312.782174][    T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  312.821552][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.838934][ T5789] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  312.871962][    T9] usb 7-1: Product: syz
[  312.900269][    T9] usb 7-1: Manufacturer: syz
[  312.926999][    T9] usb 7-1: SerialNumber: syz
[  312.964137][    T9] usb 7-1: config 0 descriptor??
[  313.294984][T11322] ceph: No mds server is up or the cluster is laggy
[  313.365913][ T5925] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  313.416045][    T9] airspy 7-1:0.0: Board ID: 00
[  313.472571][    T9] airspy 7-1:0.0: Firmware version: 
[  313.653916][    T9] airspy 7-1:0.0: usb_control_msg() failed -71 request 11
[  313.784199][    T9] airspy 7-1:0.0: Registered as swradio24
[  313.819289][T11357] Context (ID=0x0) not attached to queue pair (handle=0x4e1:0x0)
[  313.849237][    T9] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  313.913552][    T9] usb 7-1: USB disconnect, device number 8
[  314.553899][T11381] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances
[  315.182826][T11396] loop0: detected capacity change from 0 to 1024
[  315.247320][T11396] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  315.337227][T11396] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  315.365992][T11398] loop6: detected capacity change from 0 to 1024
[  315.435463][T11396] EXT4-fs (loop0): invalid journal inode
[  315.441464][T11396] EXT4-fs (loop0): can't get journal size
[  315.537694][T11398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  315.554855][T11396] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12c, mo2=0002]
[  315.563222][T11396] System zones: 0-1, 4-36, 102-102
[  315.649542][T11396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  315.664870][T11398] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.751739][T11397] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm syz.6.1720: lblock 0 mapped to illegal pblock 0 (length 1)
[  315.886672][T11397] EXT4-fs (loop6): Remounting filesystem read-only
[  315.937232][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.072876][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  316.488322][T11419] loop7: detected capacity change from 0 to 64
[  316.751662][T11425] net_ratelimit: 9 callbacks suppressed
[  316.751677][T11425] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  317.078481][T11438] loop0: detected capacity change from 0 to 512
[  317.109553][T11438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.383520][   T27] kauditd_printk_skb: 10 callbacks suppressed
[  317.383530][   T27] audit: type=1326 audit(1793715197.282:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.5.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4119fb19 code=0x7ffc0000
[  317.453241][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.554484][   T27] audit: type=1326 audit(1793715197.322:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.5.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4119fb19 code=0x7ffc0000
[  317.702397][   T27] audit: type=1326 audit(1793715197.332:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.5.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3e4119fb19 code=0x7ffc0000
[  317.782686][T11455] loop7: detected capacity change from 0 to 1024
[  317.809974][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  317.826176][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL
[  317.857579][T11455] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  317.881129][   T27] audit: type=1326 audit(1793715197.332:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.5.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4119fb19 code=0x7ffc0000
[  317.966688][T11455] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 2: comm syz.7.1742: lblock 2 mapped to illegal pblock 2 (length 1)
[  318.018718][   T27] audit: type=1326 audit(1793715197.332:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.5.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4119fb19 code=0x7ffc0000
[  318.065363][T11455] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  318.088999][T11455] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 48: comm syz.7.1742: lblock 0 mapped to illegal pblock 48 (length 1)
[  318.141685][   T27] audit: type=1326 audit(1793715197.332:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.5.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f3e4119fb19 code=0x7ffc0000
[  318.177327][T11455] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  318.213310][T11455] EXT4-fs error (device loop7): ext4_acquire_dquot:6958: comm syz.7.1742: Failed to acquire dquot type 0
[  318.256405][T11455] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5974: Corrupt filesystem
[  318.276400][   T27] audit: type=1326 audit(1793715197.332:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.5.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4119fb19 code=0x7ffc0000
[  318.319750][T11455] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1742: mark_inode_dirty error
[  318.366725][T11455] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  318.389820][   T27] audit: type=1326 audit(1793715197.332:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.5.1737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4119fb19 code=0x7ffc0000
[  318.436658][T11455] EXT4-fs (loop7): 1 orphan inode deleted
[  318.460689][ T3558] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  318.488142][T11455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.550784][ T3558] EXT4-fs error (device loop7): ext4_release_dquot:6994: comm kworker/u4:11: Failed to release dquot type 0
[  318.625775][T11455] EXT4-fs error (device loop7): __ext4_get_inode_loc:4509: comm syz.7.1742: Invalid inode table block 1 in block_group 0
[  318.688594][T11455] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5974: Corrupt filesystem
[  318.719336][T11455] EXT4-fs error (device loop7): ext4_setattr:5548: inode #2: comm syz.7.1742: mark_inode_dirty error
[  318.829738][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.844280][ T3558] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  318.909572][ T3558] EXT4-fs error (device loop7): ext4_release_dquot:6994: comm kworker/u4:11: Failed to release dquot type 0
[  318.940110][ T9870] EXT4-fs error (device loop7): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[  318.983724][ T9870] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5974: Corrupt filesystem
[  319.028934][ T9870] EXT4-fs error (device loop7): ext4_quota_off:7242: inode #3: comm syz-executor: mark_inode_dirty error
[  319.644047][ T5789] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  319.676161][T11487] loop7: detected capacity change from 0 to 32768
[  319.711588][T11487] JBD2: Ignoring recovery information on journal
[  319.770725][T11487] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  319.784071][ T5925] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  319.837683][ T5789] usb 6-1: not running at top speed; connect to a high speed hub
[  319.856950][ T5789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  319.871360][ T5803] Bluetooth: hci1: command 0x0406 tx timeout
[  319.877750][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  319.903420][ T5789] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  319.951907][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.984322][ T5925] usb 7-1: Using ep0 maxpacket: 32
[  319.991468][ T5789] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  320.012453][ T5925] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  320.031609][ T5925] usb 7-1: config 0 has no interface number 0
[  320.052908][ T5789] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  320.076939][ T5925] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.132406][ T5925] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.152549][ T9870] ocfs2: Unmounting device (7,7) on (node local)
[  320.162338][ T5925] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  320.219758][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.280401][ T5925] usb 7-1: config 0 descriptor??
[  320.350951][    T9] usb 6-1: USB disconnect, device number 8
[  320.378158][    T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  320.422774][    T9] cyberjack 6-1:1.0: device disconnected
[  320.838479][T11502] loop7: detected capacity change from 0 to 512
[  320.863600][T11502] EXT4-fs error (device loop7): ext4_orphan_get:1434: comm syz.7.1762: bad orphan inode 13
[  320.907256][T11502] ext4_test_bit(bit=12, block=4) = 1
[  320.926345][ T5925] uclogic 0003:28BD:0094.0011: pen parameters not found
[  320.943350][T11502] is_bad_inode(inode)=0
[  320.969092][T11502] NEXT_ORPHAN(inode)=0
[  320.973278][T11502] max_ino=32
[  320.977412][ T5925] uclogic 0003:28BD:0094.0011: interface is invalid, ignoring
[  321.004912][T11502] i_nlink=1
[  321.031276][ T5925] usb 7-1: USB disconnect, device number 9
[  321.040587][T11502] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.191306][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.207239][T11508] block2mtd: too many arguments
[  321.721956][T11523] CIFS: Attempting to mount //1#7.0.0.1/�7�/�䅯��yshare
[  322.157874][T11517] loop5: detected capacity change from 0 to 32768
[  322.210136][T11517] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1768 (11517)
[  322.322705][T11517] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  322.369415][T11517] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  322.418193][T11517] BTRFS info (device loop5): use no compression
[  322.453016][T11517] BTRFS info (device loop5): force clearing of disk cache
[  322.491840][T11517] BTRFS info (device loop5): enabling disk space caching
[  322.529588][T11517] BTRFS info (device loop5): disk space caching is enabled
[  322.560412][T11523] CIFS: VFS: Error connecting to socket. Aborting operation.
[  322.612869][T11523] CIFS: VFS: cifs_mount failed w/return code = -4
[  322.750598][T11517] BTRFS info (device loop5): enabling ssd optimizations
[  322.803832][T11517] BTRFS info (device loop5): auto enabling async discard
[  322.836216][T11517] BTRFS info (device loop5): rebuilding free space tree
[  322.875035][T11555] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1778'.
[  322.945131][T11517] BTRFS info (device loop5): disabling free space tree
[  322.952765][T11517] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  323.054869][T11517] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  323.115446][T11560] loop7: detected capacity change from 0 to 128
[  323.177545][T11560] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  323.516344][ T8596] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  323.881953][T11578] loop5: detected capacity change from 0 to 1024
[  324.677846][T11603] loop7: detected capacity change from 0 to 512
[  324.778110][T11603] EXT4-fs (loop7): invalid journal inode
[  324.832233][T11606] loop0: detected capacity change from 0 to 8
[  324.840626][T11603] EXT4-fs (loop7): can't get journal size
[  324.925991][T11606] SQUASHFS error: Failed to read block 0x26067d: -5
[  324.933008][T11606] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  324.942996][T11603] EXT4-fs (loop7): 1 truncate cleaned up
[  324.997914][T11603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.070944][T11606] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  325.245250][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.577079][T11632] ima: Unable to open file: / (-22)
[  325.579127][T11630] ima: policy update failed
[  325.634104][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  325.634114][   T27] audit: type=1802 audit(1793715205.543:123): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1806" res=0 errno=0
[  326.188619][T11650] loop9: detected capacity change from 0 to 7
[  326.220868][T11650] Dev loop9: unable to read RDB block 7
[  326.264790][T11650]  loop9: unable to read partition table
[  326.302041][T11650] loop9: partition table beyond EOD, truncated
[  326.325392][T11650] loop_reread_partitions: partition scan of loop9 (��) failed (rc=-5)
[  326.360974][T11626] loop7: detected capacity change from 0 to 32768
[  326.439279][T11626] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1805 (11626)
[  326.510998][T11657] netlink: 'syz.6.1819': attribute type 12 has an invalid length.
[  326.582909][T11626] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  326.602213][T11657] netlink: 'syz.6.1819': attribute type 29 has an invalid length.
[  326.641679][T11657] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1819'.
[  326.653570][T11626] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  326.708446][T11657] netlink: 'syz.6.1819': attribute type 1 has an invalid length.
[  326.717524][T11626] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  326.774716][T11657] netlink: 'syz.6.1819': attribute type 2 has an invalid length.
[  326.787288][T11626] BTRFS info (device loop7): use zstd compression, level 3
[  326.822920][T11626] BTRFS info (device loop7): using free space tree
[  327.047051][T11626] BTRFS info (device loop7): enabling ssd optimizations
[  327.087488][T11626] BTRFS info (device loop7): auto enabling async discard
[  327.635264][ T9870] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  327.802636][T11701] loop0: detected capacity change from 0 to 1024
[  328.069057][   T27] audit: type=1400 audit(1793715207.973:124): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=11703 comm="syz.7.1831" name="unknown" offset=82
[  328.417012][T11714] program syz.5.1837 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  328.474894][ T5925] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  328.718809][ T5925] usb 7-1: unable to get BOS descriptor or descriptor too short
[  328.756737][ T5925] usb 7-1: not running at top speed; connect to a high speed hub
[  328.818907][ T5925] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  328.879195][ T5925] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  328.949544][ T5925] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  329.029054][ T5925] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  329.124819][ T5925] usb 7-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40
[  329.163098][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.200098][ T5925] usb 7-1: Product: syz
[  329.225601][ T5925] usb 7-1: Manufacturer: syz
[  329.230469][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1844'.
[  329.262986][ T5925] usb 7-1: SerialNumber: syz
[  329.434714][T11734] loop5: detected capacity change from 0 to 8
[  329.540773][T11734] SQUASHFS error: Failed to read block 0x26067d: -5
[  329.558450][ T5925] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  329.586733][T11734] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  329.606348][ T5925] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  329.627099][T11734] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  329.700868][ T5925] usb 7-1: USB disconnect, device number 10
[  330.389891][T11752] loop5: detected capacity change from 0 to 128
[  330.441144][T11752] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  330.496902][T11752] hpfs: filesystem error: improperly stopped
[  330.522062][T11754] loop6: detected capacity change from 0 to 512
[  330.539851][T11752] hpfs: You really don't want any checks? You are crazy...
[  330.580154][T11754] EXT4-fs (loop6): orphan cleanup on readonly fs
[  330.589053][T11752] hpfs: hpfs_map_sector(): read error
[  330.615872][T11752] hpfs: code page support is disabled
[  330.629116][T11754] EXT4-fs warning (device loop6): ext4_enable_quotas:7193: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  330.658584][T11752] hpfs: hpfs_map_4sectors(): unaligned read
[  330.687201][T11752] hpfs: hpfs_map_4sectors(): unaligned read
[  330.710951][T11754] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  330.721495][T11752] hpfs: filesystem error: unable to find root dir
[  330.750688][T11754] EXT4-fs error (device loop6): ext4_ext_check_inode:532: inode #13: comm syz.6.1856: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  330.818955][T11754] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1856: couldn't read orphan inode 13 (err -117)
[  330.870010][T11754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  331.032185][T11754] EXT4-fs (loop6): shut down requested (2)
[  331.163736][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.317027][T11769] loop7: detected capacity change from 0 to 128
[  331.909457][T11786] program syz.7.1869 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.029709][T11761] loop0: detected capacity change from 0 to 40427
[  332.074905][T11761] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  332.130854][T11761] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  332.222702][T11761] F2FS-fs (loop0): invalid crc value
[  332.280803][T11795] loop5: detected capacity change from 0 to 512
[  332.292789][T11761] F2FS-fs (loop0): Found nat_bits in checkpoint
[  332.354969][T11795] EXT4-fs (loop5): Test dummy encryption mode enabled
[  332.433090][T11797] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1875'.
[  332.466001][T11795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.554466][T11761] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  332.561574][T11761] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  332.758833][ T8596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.976640][T11810] loop6: detected capacity change from 0 to 7
[  333.039041][T11810] Dev loop6: unable to read RDB block 7
[  333.136500][T11810]  loop6: unable to read partition table
[  333.183817][T11810] loop6: partition table beyond EOD, truncated
[  333.223780][T11810] loop_reread_partitions: partition scan of loop6 (�|:��G53���D����xx=��eh�#�]ǛY��,��>����qE%|����) failed (rc=-5)
[  333.525639][T11821] loop7: detected capacity change from 0 to 128
[  333.569082][T11821] EXT4-fs (loop7): Test dummy encryption mode enabled
[  333.651826][T11821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  333.703279][T11821] System zones: 1-3, 19-19, 35-36
[  333.740789][T11821] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  333.755667][ T5789] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  333.805149][T11821] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.930950][T11821] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  333.976677][ T5789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.011129][ T5789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.054966][T11821] EXT4-fs (loop7): Online defrag not supported for encrypted files
[  334.099421][ T5789] usb 6-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  334.135005][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  334.195933][ T5789] usb 6-1: Product: syz
[  334.234475][ T5789] usb 6-1: Manufacturer: syz
[  334.272964][ T5789] navman 6-1:1.0: navman converter detected
[  334.318631][ T9870] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  334.336321][ T5789] usb 6-1: navman converter now attached to ttyUSB0
[  334.638459][T11819] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90
[  334.720770][ T5793] usb 6-1: USB disconnect, device number 9
[  334.771859][ T5793] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  334.827985][ T5793] navman 6-1:1.0: device disconnected
[  335.845648][T11877] loop5: detected capacity change from 0 to 256
[  336.068640][T11855] loop0: detected capacity change from 0 to 32768
[  336.164233][T11855] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  336.298479][T11855] JBD2: Ignoring recovery information on journal
[  336.476872][T11855] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  336.863936][T11900] phram: not enough arguments
[  337.093135][T11906] loop7: detected capacity change from 0 to 512
[  337.166901][T11906] EXT4-fs (loop7): orphan cleanup on readonly fs
[  337.202506][T11906] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.1912: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  337.314582][T11904] loop5: detected capacity change from 0 to 8192
[  337.362022][T11906] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.1912: ea_inode dec ref err=-117
[  337.381402][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  337.407718][T11904] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  337.475278][T11906] EXT4-fs (loop7): 1 orphan inode deleted
[  337.495144][T11904] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  337.526555][T11906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  337.592880][T11904] REISERFS (device loop5): using ordered data mode
[  337.635141][   T98] block nbd0: Possible stuck request ffff888022d10000: control (read@0,1024B). Runtime 120 seconds
[  337.652123][T11904] reiserfs: using flush barriers
[  337.682933][T11914] 8021q: adding VLAN 0 to HW filter on device bond1
[  337.721990][T11904] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  337.759610][T11914] bond0: (slave bond1): Enslaving as an active interface with an up link
[  337.823261][T11904] REISERFS (device loop5): checking transaction log (loop5)
[  337.903890][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.925344][ T3470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  338.147598][T11904] REISERFS (device loop5): Using tea hash to sort names
[  338.198924][T11904] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  338.284271][T11904] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  339.153033][T11928] loop7: detected capacity change from 0 to 32768
[  339.212012][T11928] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 scanned by syz.7.1918 (11928)
[  339.320680][T11928] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  339.387233][T11928] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  339.442216][T11928] BTRFS info (device loop7): enabling ssd optimizations
[  339.491731][T11928] BTRFS info (device loop7): not using ssd optimizations
[  339.531781][T11928] BTRFS info (device loop7): turning off barriers
[  339.538276][T11928] BTRFS info (device loop7): use no compression
[  339.622253][T11928] BTRFS info (device loop7): using free space tree
[  339.737575][T11962] loop0: detected capacity change from 0 to 2048
[  339.824291][T11976] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  339.913580][T11980] loop5: detected capacity change from 0 to 64
[  340.023990][T11980] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  340.228874][ T9870] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  340.391267][T11985] loop6: detected capacity change from 0 to 512
[  340.461247][T11985] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  340.532610][T11987] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input34
[  340.586188][T11985] EXT4-fs (loop6): 1 truncate cleaned up
[  340.645338][T11985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.003445][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.094818][T12036] loop7: detected capacity change from 0 to 256
[  342.116481][T12036] exfat: Deprecated parameter 'utf8'
[  342.144627][T12036] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb9557297, utbl_chksum : 0xe619d30d)
[  342.448156][T12044] tap0: tun_chr_ioctl cmd 1074025673
[  342.598480][T12046] loop7: detected capacity change from 0 to 8
[  342.695735][T12046] SQUASHFS error: Failed to read block 0x2d7: -5
[  342.733143][T12046] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  342.868041][T12042] loop5: detected capacity change from 0 to 32768
[  342.918379][T12042] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 scanned by syz.5.1963 (12042)
[  343.038120][T12042] BTRFS info (device loop5): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  343.094294][T12042] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  343.138061][T12042] BTRFS info (device loop5): using free space tree
[  343.273586][T12042] BTRFS info (device loop5): enabling ssd optimizations
[  343.311339][T12042] BTRFS info (device loop5): auto enabling async discard
[  343.564604][T12078] input: syz0 as /devices/virtual/input/input35
[  343.698802][ T8596] BTRFS info (device loop5): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  344.384171][T12074] loop7: detected capacity change from 0 to 40427
[  344.432880][T12074] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  344.458979][T12074] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  344.506106][T12074] F2FS-fs (loop7): invalid crc value
[  344.909495][T12074] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  344.969748][T12074] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  345.087965][T12100] loop6: detected capacity change from 0 to 1024
[  345.165522][T12100] EXT4-fs: Ignoring removed orlov option
[  345.279815][T12100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.347086][ T9870] syz-executor: attempt to access beyond end of device
[  345.347086][ T9870] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  345.386128][T12106] loop5: detected capacity change from 0 to 512
[  345.460762][T12106] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  345.492945][ T9870] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  345.575572][T12106] EXT4-fs (loop5): 1 truncate cleaned up
[  345.623140][T12106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.761820][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.016227][T12097] loop0: detected capacity change from 0 to 32768
[  346.165925][ T8596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.228142][T12112] jffs2: notice: (12112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  346.588700][T12119] page:ffffea0005200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x148000
[  346.634049][T12119] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  346.668171][T12119] page_type: 0xffffffff()
[  346.687081][T12119] raw: 057ff00000000000 0000000000000000 dead000000000122 0000000000000000
[  346.730531][T12119] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  346.780939][T12119] page dumped because: unmovable page
[  346.804998][T12119] page_owner tracks the page as allocated
[  346.828171][T12119] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 2195425019, free_ts 0
[  346.849738][T12119]  register_early_stack+0x99/0xf0
[  346.860732][T12119]  init_page_owner+0x33/0x5c0
[  346.879760][T12119]  page_ext_init+0x730/0x790
[  346.890634][T12119]  mm_core_init+0x51/0x60
[  346.904936][T12119] page_owner free stack trace missing
[  347.070011][T12133] loop6: detected capacity change from 0 to 2048
[  347.097391][T12133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.167523][T12133] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #12: block 2: comm syz.6.1992: lblock 0 mapped to illegal pblock 2 (length 1)
[  347.205450][T12133] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #12: block 2: comm syz.6.1992: lblock 0 mapped to illegal pblock 2 (length 1)
[  347.253660][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.161187][ T5789] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  348.354441][ T5789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  348.366467][ T5789] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  348.388810][ T5789] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  348.418125][ T5789] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  348.437724][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.460280][ T5789] usb 6-1: Product: syz
[  348.470076][ T5789] usb 6-1: Manufacturer: syz
[  348.480829][ T5789] usb 6-1: SerialNumber: syz
[  348.498696][T12156] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  348.533974][ T5789] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  348.562727][ T5789] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  348.594593][ T5789] usbserial_generic 6-1:1.0: generic converter detected
[  348.615785][ T5789] usb 6-1: generic converter now attached to ttyUSB0
[  348.812391][ T5789] usb 6-1: USB disconnect, device number 10
[  348.839256][ T5789] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  348.869667][ T5789] usbserial_generic 6-1:1.0: device disconnected
[  349.024720][T12183] loop6: detected capacity change from 0 to 128
[  349.217190][T12187] loop6: detected capacity change from 0 to 512
[  349.246115][T12187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.315328][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.476449][T12191] tap0: tun_chr_ioctl cmd 1074025677
[  349.510567][T12191] tap0: linktype set to 805
[  349.803286][T12199] loop7: detected capacity change from 0 to 4096
[  349.890550][T12207] loop6: detected capacity change from 0 to 256
[  349.906883][T12206] syz.5.2026: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  349.989364][T12207] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  350.020987][T12206] CPU: 0 PID: 12206 Comm: syz.5.2026 Not tainted syzkaller #0
[  350.028559][T12206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  350.038728][T12206] Call Trace:
[  350.042116][T12206]  <TASK>
[  350.045177][T12206]  dump_stack_lvl+0x18c/0x250
[  350.050061][T12206]  ? show_regs_print_info+0x20/0x20
[  350.055505][T12206]  ? load_image+0x420/0x420
[  350.060245][T12206]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  350.067386][T12206]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  350.074047][T12206]  warn_alloc+0x246/0x340
[  350.078425][T12206]  ? zone_watermark_ok_safe+0x230/0x230
[  350.084184][T12206]  ? verify_lock_unused+0x140/0x140
[  350.089622][T12206]  __vmalloc_node_range+0x129/0x1320
[  350.094949][T12206]  ? rcu_is_watching+0x15/0xb0
[  350.099733][T12206]  ? read_lock_is_recursive+0x20/0x20
[  350.105261][T12206]  ? free_vm_area+0x50/0x50
[  350.109911][T12206]  ? down_write+0x16e/0x200
[  350.114605][T12206]  ? down_read_killable+0x340/0x340
[  350.119823][T12206]  ? disksize_store+0xfe/0x3f0
[  350.124636][T12206]  vzalloc+0x79/0x90
[  350.128586][T12206]  ? disksize_store+0xfe/0x3f0
[  350.133371][T12206]  disksize_store+0xfe/0x3f0
[  350.137997][T12206]  ? sysfs_kf_write+0x187/0x2a0
[  350.142896][T12206]  ? sysfs_kf_read+0x360/0x360
[  350.147672][T12206]  kernfs_fop_write_iter+0x3a4/0x520
[  350.152969][T12206]  vfs_write+0x474/0x9a0
[  350.157234][T12206]  ? file_end_write+0x250/0x250
[  350.162095][T12206]  ? __fget_files+0x3fc/0x460
[  350.166885][T12206]  ? __fdget_pos+0x2a3/0x330
[  350.171581][T12206]  ? ksys_write+0x74/0x260
[  350.176002][T12206]  ksys_write+0x151/0x260
[  350.180696][T12206]  ? __ia32_sys_read+0x90/0x90
[  350.185512][T12206]  ? lockdep_hardirqs_on+0x98/0x150
[  350.190792][T12206]  do_syscall_64+0x55/0xb0
[  350.195376][T12206]  ? clear_bhb_loop+0x40/0x90
[  350.200174][T12206]  ? clear_bhb_loop+0x40/0x90
[  350.204895][T12206]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  350.211083][T12206] RIP: 0033:0x7f3e4119fb19
[  350.215561][T12206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.235364][T12206] RSP: 002b:00007f3e41ffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  350.243961][T12206] RAX: ffffffffffffffda RBX: 00007f3e41425fa0 RCX: 00007f3e4119fb19
[  350.251982][T12206] RDX: 0000000000000002 RSI: 0000200000000680 RDI: 0000000000000003
[  350.260044][T12206] RBP: 00007f3e41237b70 R08: 0000000000000000 R09: 0000000000000000
[  350.268165][T12206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.276612][T12206] R13: 00007f3e41426038 R14: 00007f3e41425fa0 R15: 00007ffc2fb5c078
[  350.284718][T12206]  </TASK>
[  351.018673][T12206] Mem-Info:
[  351.026486][T12206] active_anon:9115 inactive_anon:0 isolated_anon:0
[  351.026486][T12206]  active_file:13728 inactive_file:40185 isolated_file:0
[  351.026486][T12206]  unevictable:768 dirty:369 writeback:0
[  351.026486][T12206]  slab_reclaimable:11518 slab_unreclaimable:99963
[  351.026486][T12206]  mapped:26475 shmem:2751 pagetables:1042
[  351.026486][T12206]  sec_pagetables:0 bounce:0
[  351.026486][T12206]  kernel_misc_reclaimable:0
[  351.026486][T12206]  free:1337903 free_pcp:2820 free_cma:0
[  351.194653][T12206] Node 0 active_anon:31052kB inactive_anon:0kB active_file:54860kB inactive_file:160536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100580kB dirty:1472kB writeback:0kB shmem:4112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12336kB pagetables:4168kB sec_pagetables:0kB all_unreclaimable? no
[  351.287435][T12206] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  351.366786][T12206] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  351.465897][T12206] lowmem_reserve[]: 0 2503 2504 2504 2504
[  351.488578][T12206] Node 0 DMA32 free:1411540kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:30960kB inactive_anon:0kB active_file:62296kB inactive_file:159716kB unevictable:1536kB writepending:1472kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:17496kB local_pcp:17496kB free_cma:0kB
[  351.605582][T12206] lowmem_reserve[]: 0 0 0 0 0
[  351.624291][T12206] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  351.736377][T12206] lowmem_reserve[]: 0 0 0 0 0
[  351.755357][T12206] Node 1 Normal free:3917152kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  351.889138][T12206] lowmem_reserve[]: 0 0 0 0 0
[  351.919443][T12206] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  351.985486][T12206] Node 0 DMA32: 2*4kB (UM) 798*8kB (ME) 538*16kB (UME) 304*32kB (UME) 326*64kB (UME) 124*128kB (UM) 43*256kB (UM) 21*512kB (UM) 7*1024kB (M) 7*2048kB (UME) 318*4096kB (UM) = 1407256kB
[  352.073347][T12206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  352.100393][T12236] loop0: detected capacity change from 0 to 256
[  352.162904][T12206] Node 1 Normal: 186*4kB (UE) 45*8kB (UME) 39*16kB (UE) 223*32kB (UE) 109*64kB (UE) 25*128kB (UME) 11*256kB (UE) 6*512kB (UM) 1*1024kB (E) 4*2048kB (UE) 948*4096kB (M) = 3917152kB
[  352.220954][T12236] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  352.298572][T12206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  352.334780][T12206] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB
[  352.355317][T12240] loop7: detected capacity change from 0 to 512
[  352.409804][T12206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  352.422768][T12240] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  352.494938][T12206] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  352.543626][T12240] EXT4-fs (loop7): 1 truncate cleaned up
[  352.578351][T12240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.591040][T12206] 55356 total pagecache pages
[  352.596052][T12206] 1 pages in swap cache
[  352.600215][T12206] Free swap  = 124828kB
[  352.644762][T12206] Total swap = 124996kB
[  352.661640][T12206] 2097051 pages RAM
[  352.666865][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2044'.
[  352.688147][T12206] 0 pages HighMem/MovableOnly
[  352.701088][T12206] 421729 pages reserved
[  352.705397][T12206] 0 pages cma reserved
[  353.025988][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.564147][T12272] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.628466][T12276] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  353.860073][T12285] loop6: detected capacity change from 0 to 512
[  353.898523][T12285] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  353.966123][T12285] EXT4-fs (loop6): 1 truncate cleaned up
[  353.994464][T12285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.043495][T12286] loop7: detected capacity change from 0 to 8192
[  354.063316][T12289] loop0: detected capacity change from 0 to 512
[  354.080794][ T5789] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  354.133100][T12289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  354.200512][T12289] System zones: 1-12
[  354.233582][T12289] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.2062: missing EA_INODE flag
[  354.323073][T12289] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2062: error while reading EA inode 12 err=-117
[  354.339517][ T5789] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  354.375913][ T5789] usb 6-1: config 0 has no interface number 0
[  354.412653][ T5789] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  354.426073][T12289] EXT4-fs (loop0): 1 orphan inode deleted
[  354.453708][T12289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.486363][ T5789] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  354.543497][ T5789] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  354.565910][T12289] fscrypt (loop0, inode 15): Reserved bits set in encryption policy
[  354.588191][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.656844][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.667341][ T5789] usb 6-1: config 0 descriptor??
[  354.698811][T12280] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  354.719633][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.740633][ T5789] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  354.764224][T12294] usbip-vudc usbip-vudc.0: gadget not bound
[  354.983225][T12298] loop0: detected capacity change from 0 to 64
[  355.155139][    T9] usb 6-1: USB disconnect, device number 11
[  355.486767][T12308] loop7: detected capacity change from 0 to 2048
[  355.569933][T12308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.786980][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.809234][T12315] loop0: detected capacity change from 0 to 256
[  355.849503][T12315] exfat: Deprecated parameter 'namecase'
[  355.868871][T12296] loop6: detected capacity change from 0 to 32768
[  355.915352][T12315] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  355.973673][T12296] JBD2: Ignoring recovery information on journal
[  356.107918][T12296] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  356.304415][T12323] loop0: detected capacity change from 0 to 512
[  356.371231][T12323] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  356.470486][T12323] EXT4-fs (loop0): 1 truncate cleaned up
[  356.514095][T12323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.565061][T12329] page:ffffea0005200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x148000
[  356.611044][T12329] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  356.666533][T12329] page_type: 0xffffffff()
[  356.685005][T12329] raw: 057ff00000000000 0000000000000000 dead000000000122 0000000000000000
[  356.717277][T12329] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  356.731024][ T8658] ocfs2: Unmounting device (7,6) on (node local)
[  356.766500][T12329] page dumped because: unmovable page
[  356.803500][T12329] page_owner tracks the page as allocated
[  356.849475][T12329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 2195425019, free_ts 0
[  356.916716][T12334] loop5: detected capacity change from 0 to 512
[  356.927520][T12329]  register_early_stack+0x99/0xf0
[  356.947560][T12329]  init_page_owner+0x33/0x5c0
[  356.977707][T12329]  page_ext_init+0x730/0x790
[  357.009413][T12334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.041251][T12329]  mm_core_init+0x51/0x60
[  357.056750][T12329] page_owner free stack trace missing
[  357.164892][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.271399][T12334] EXT4-fs error (device loop5): ext4_validate_block_bitmap:421: comm syz.5.2080: bg 0: bad block bitmap checksum
[  357.390902][T12339] input: syz0 as /devices/virtual/input/input36
[  357.413030][T12342] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  357.479509][ T8596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.852089][T12354] loop6: detected capacity change from 0 to 512
[  357.896556][T12354] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  357.963071][T12354] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.2086: bad orphan inode 131083
[  358.013650][T12354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.209935][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.330446][T12362] loop5: detected capacity change from 0 to 512
[  358.366868][T12362] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  358.473785][T12362] EXT4-fs (loop5): 1 truncate cleaned up
[  358.532933][T12362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.856381][T12374] loop7: detected capacity change from 0 to 512
[  358.977070][T12374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.055758][T12374] ext4 filesystem being mounted at /156/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  359.121310][ T8596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.269097][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.479669][T12386] loop7: detected capacity change from 0 to 512
[  359.527141][T12386] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  359.599562][T12386] EXT4-fs error (device loop7): ext4_orphan_get:1434: comm syz.7.2098: bad orphan inode 131083
[  359.667818][T12386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.770054][T12367] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  359.974201][T12367] XFS (loop0): Ending clean mount
[  360.095132][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.378546][ T5787] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  360.395989][T12404] set_capacity_and_notify: 2 callbacks suppressed
[  360.396020][T12404] loop7: detected capacity change from 0 to 2048
[  360.446127][T12406] loop6: detected capacity change from 0 to 1024
[  360.495706][T12404] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  360.510605][T12408] db_root: cannot open:  �
[  360.592123][T12404] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  360.696779][T12404] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[  360.834694][T12404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  361.254110][T12419] loop7: detected capacity change from 0 to 512
[  361.366247][T12419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.386772][T12422] loop5: detected capacity change from 0 to 512
[  361.412594][T12422] EXT4-fs: Ignoring removed orlov option
[  361.476962][T12422] EXT4-fs: Ignoring removed mblk_io_submit option
[  361.515094][T12419] EXT4-fs error (device loop7): ext4_validate_block_bitmap:421: comm syz.7.2109: bg 0: bad block bitmap checksum
[  361.540474][T12422] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.2111: corrupted in-inode xattr: e_value size too large
[  361.627498][T12422] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2111: couldn't read orphan inode 15 (err -117)
[  361.677171][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.699522][T12422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.850115][T12422] EXT4-fs (loop5): shut down requested (1)
[  361.875334][T12429] loop6: detected capacity change from 0 to 1024
[  361.926365][T12429] EXT4-fs: Ignoring removed nomblk_io_submit option
[  361.999661][T12429] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  362.011626][ T8596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.124220][T12429] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.2113: lblock 2 mapped to illegal pblock 2 (length 1)
[  362.379757][T12429] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  362.408542][T12429] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.2113: lblock 0 mapped to illegal pblock 48 (length 1)
[  362.467115][T12415] loop0: detected capacity change from 0 to 40427
[  362.486541][T12429] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  362.514288][T12415] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  362.546767][T12429] EXT4-fs error (device loop6): ext4_acquire_dquot:6958: comm syz.6.2113: Failed to acquire dquot type 0
[  362.573755][T12415] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  362.617736][T12415] F2FS-fs (loop0): build fault injection attr: rate: 2, type: 0x7ffff
[  362.630838][T12429] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5974: Corrupt filesystem
[  362.663443][T12415] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8
[  362.682954][T12429] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2113: mark_inode_dirty error
[  362.716198][T12415] F2FS-fs (loop0): invalid crc value
[  362.734855][T12415] F2FS-fs (loop0): Found nat_bits in checkpoint
[  362.754092][T12429] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  362.803045][T12429] EXT4-fs (loop6): 1 orphan inode deleted
[  362.829510][   T12] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  362.849418][T12429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.904735][   T12] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  362.915220][T12415] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  362.939105][T12415] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  362.949391][   T12] EXT4-fs error (device loop6): ext4_release_dquot:6994: comm kworker/u4:1: Failed to release dquot type 0
[  362.995064][T12429] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.2113: Invalid inode table block 1 in block_group 0
[  363.019357][T12415] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  363.027324][T12429] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5974: Corrupt filesystem
[  363.107295][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.121301][ T3558] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  363.153228][ T3558] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  363.176655][ T3558] EXT4-fs error (device loop6): ext4_release_dquot:6994: comm kworker/u4:11: Failed to release dquot type 0
[  363.234621][ T8658] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[  363.264301][ T8658] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5974: Corrupt filesystem
[  363.289239][ T8658] EXT4-fs error (device loop6): ext4_quota_off:7242: inode #3: comm syz-executor: mark_inode_dirty error
[  363.620078][T12458] loop6: detected capacity change from 0 to 512
[  363.636286][T12460] loop0: detected capacity change from 0 to 1024
[  363.777286][T12458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.956711][T12458] EXT4-fs error (device loop6): ext4_validate_block_bitmap:421: comm syz.6.2121: bg 0: bad block bitmap checksum
[  364.019081][T12465] loop7: detected capacity change from 0 to 4096
[  364.112660][T12465] ntfs3: loop7: Failed to load $Extend (-22).
[  364.156401][T12465] ntfs3: loop7: Failed to initialize $Extend.
[  364.174843][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.866419][T12469] loop5: detected capacity change from 0 to 32768
[  364.925379][T12469] JBD2: Ignoring recovery information on journal
[  365.005570][T12469] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  365.251979][T12476] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  365.405862][ T8596] ocfs2: Unmounting device (7,5) on (node local)
[  365.479559][T12476] XFS (loop0): Ending clean mount
[  365.551821][T12476] XFS (loop0): Quotacheck needed: Please wait.
[  365.652492][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  365.688200][T12476] XFS (loop0): Quotacheck: Done.
[  365.879132][    T9] usb 7-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  365.898309][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.940543][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  365.954711][    T9] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  365.990375][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  366.039634][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.071141][T12500] set_capacity_and_notify: 1 callbacks suppressed
[  366.071153][T12500] loop7: detected capacity change from 0 to 128
[  366.116913][    T9] usb 7-1: config 0 descriptor??
[  366.148902][    T9] usb 7-1: Found UVC 9.00 device <unnamed> (046d:0825)
[  366.222625][T12500] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  366.269893][T12500] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  366.399446][ T9870] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  366.518230][T12504] loop0: detected capacity change from 0 to 128
[  366.594046][T12504] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  366.627279][T12506] loop7: detected capacity change from 0 to 1024
[  366.638466][T12504] hpfs: filesystem error: improperly stopped
[  366.663781][T12504] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  366.718423][T12504] hpfs: You really don't want any checks? You are crazy...
[  366.774006][    T9] uvcvideo 7-1:0.1: Failed to set UVC probe control : -71 (exp. 48).
[  366.798798][T12504] hpfs: hpfs_map_sector(): read error
[  366.818321][    T9] uvcvideo 7-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48).
[  366.839293][T12504] hpfs: code page support is disabled
[  366.867881][T12504] hpfs: hpfs_map_4sectors(): unaligned read
[  366.885019][    T9] uvcvideo 7-1:0.1: Failed to initialize the device (-71).
[  366.907744][T12504] hpfs: hpfs_map_4sectors(): unaligned read
[  366.955801][T12504] hpfs: filesystem error: unable to find root dir
[  366.963952][T12508] serio: Serial port ptm0
[  366.971171][    T9] usb 7-1: USB disconnect, device number 11
[  367.033295][T12504] hpfs: hpfs_map_4sectors(): unaligned read
[  367.073327][T12504] hpfs: hpfs_map_sector(): read error
[  367.705393][T12436] block nbd0: Possible stuck request ffff888022d10000: control (read@0,1024B). Runtime 150 seconds
[  368.043232][T12549] jffs2: notice: (12549) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  368.929213][T12558] loop7: detected capacity change from 0 to 32768
[  368.943036][ T3558] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  369.300980][ T5794] Bluetooth: hci3: command 0x0406 tx timeout
[  369.383246][T12572] loop5: detected capacity change from 0 to 32768
[  369.425349][T12572] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  369.563423][T12572] XFS (loop5): Ending clean mount
[  369.625135][T12589] loop6: detected capacity change from 0 to 7
[  369.675219][T12589] Dev loop6: unable to read RDB block 7
[  369.727088][T12589]  loop6: unable to read partition table
[  369.744194][T12589] loop6: partition table beyond EOD, truncated
[  369.803447][T12589] loop_reread_partitions: partition scan of loop6 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  369.868046][ T8596] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  370.122401][T12592] loop7: detected capacity change from 0 to 4096
[  370.190116][T12592] ntfs3: loop7: Failed to load $Extend (-22).
[  370.216050][T12592] ntfs3: loop7: Failed to initialize $Extend.
[  370.428661][ T3502] ntfs3: loop7: ino=5, mi_enum_attr
[  370.517665][T12588] loop6: detected capacity change from 0 to 32768
[  370.595680][T12588] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.2172 (12588)
[  370.704689][T12588] BTRFS info (device loop6): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  370.772901][T12588] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  370.827787][T12588] BTRFS info (device loop6): enabling ssd optimizations
[  370.868373][T12588] BTRFS info (device loop6): not using ssd optimizations
[  370.922398][T12588] BTRFS info (device loop6): turning off barriers
[  370.957982][T12588] BTRFS info (device loop6): use no compression
[  371.001232][T12588] BTRFS info (device loop6): using free space tree
[  371.504122][T12634] loop0: detected capacity change from 0 to 256
[  371.579914][T12634] exFAT-fs (loop0): error, no upcase table entry. Please run fsck
[  371.643297][T12634] exFAT-fs (loop0): Filesystem has been set read-only
[  371.706211][ T8658] BTRFS info (device loop6): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  371.890827][ T5925] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  371.979468][T12639] 9p: Unknown access argument 18446744073709551615: -34
[  372.101353][ T5925] usb 6-1: Using ep0 maxpacket: 16
[  372.149508][ T5925] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.199665][ T5925] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.264110][ T5925] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  372.336755][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0
[  372.367111][ T5925] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  372.433172][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.481963][ T5925] usb 6-1: config 0 descriptor??
[  372.614018][T12635] loop7: detected capacity change from 0 to 32768
[  372.726739][T12649] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2186'.
[  372.749263][T12651] loop6: detected capacity change from 0 to 1024
[  372.782107][T12635] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  372.959367][T12635] XFS (loop7): Ending clean mount
[  372.967114][ T5925] hid (null): report_id 256 is invalid
[  373.006229][ T5925] hid (null): unknown global tag 0xe
[  373.068048][ T5925] hid (null): report_id 4067673409 is invalid
[  373.149429][ T5925] hid (null): global environment stack overflow
[  373.264957][ T5925] usb 6-1: USB disconnect, device number 12
[  373.359791][ T9870] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  373.605253][T12667] netlink: 'syz.0.2191': attribute type 5 has an invalid length.
[  374.311575][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2201'.
[  374.365703][T12689] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2201'.
[  375.390858][ T5789] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  375.581176][ T5789] usb 6-1: Using ep0 maxpacket: 8
[  375.596740][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.608788][T12732] loop6: detected capacity change from 0 to 128
[  375.621368][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.679801][ T5789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  375.735788][ T5789] usb 6-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[  375.774760][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.810125][ T5789] usb 6-1: config 0 descriptor??
[  376.035772][T12740] loop6: detected capacity change from 0 to 512
[  376.049134][T12740] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  376.094909][T12740] EXT4-fs (loop6): 1 truncate cleaned up
[  376.139822][T12740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.250375][ T5789] input: HID 04d9:a070 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04D9:A070.0013/input/input37
[  376.284367][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.313497][ T5789] holtek_mouse 0003:04D9:A070.0013: input,hidraw0: USB HID v0.00 Joystick [HID 04d9:a070] on usb-dummy_hcd.5-1/input0
[  376.446812][ T5793] usb 6-1: USB disconnect, device number 13
[  376.514505][T12747] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  376.547916][T12745] fido_id[12745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  376.639182][T12749] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2227'.
[  376.994808][T12757] loop5: detected capacity change from 0 to 128
[  377.408032][T12772] loop5: detected capacity change from 0 to 64
[  377.423444][   T27] audit: type=1400 audit(1793715514.325:125): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=12770 comm="syz.6.2235" name="/" offset=59
[  377.948736][T12790] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2244'.
[  377.959352][ T5925] IPVS: starting estimator thread 0...
[  378.061595][T12791] IPVS: using max 32 ests per chain, 76800 per kthread
[  378.093206][T12797] loop6: detected capacity change from 0 to 256
[  378.148718][T12797] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  378.216378][T12799] rnbd_client L127: Can't parse path ip:127.0.: -22
[  378.437237][T12805] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.529276][T12808] netlink: 'syz.7.2252': attribute type 12 has an invalid length.
[  378.559776][T12808] netlink: 'syz.7.2252': attribute type 29 has an invalid length.
[  378.586350][T12808] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2252'.
[  378.636674][T12810] bond1: Removing last ns target with arp_interval on
[  378.879834][T12819] loop5: detected capacity change from 0 to 64
[  379.228606][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  379.238202][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL
[  379.492291][T12815] loop7: detected capacity change from 0 to 32768
[  379.558010][T12815] JBD2: Ignoring recovery information on journal
[  379.692550][T12815] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  379.775690][T12835] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  379.800211][ T5807] udevd[5807]: symlink '../../loop7' '/dev/disk/by-diskseq/680.tmp-b7:7' failed: Read-only file system
[  379.886190][ T5807] udevd[5807]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  379.929767][T12815] (syz.7.2255,12815,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  380.215002][ T9870] ocfs2: Unmounting device (7,7) on (node local)
[  380.238150][ T5807] udevd[5807]: symlink '../../loop7' '/dev/disk/by-diskseq/680.tmp-b7:7' failed: Read-only file system
[  380.255421][T12825] loop5: detected capacity change from 0 to 32768
[  380.335772][T12825] 
[  380.335772][T12825]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  380.335772][T12825] 
[  380.357305][ T5807] udevd[5807]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  380.593932][ T5788] udevd[5788]: symlink '../../loop5' '/dev/disk/by-diskseq/681.tmp-b7:5' failed: Read-only file system
[  380.640356][   T12] ERROR: (device loop5): diWrite: ixpxd invalid
[  380.640356][   T12] 
[  380.679727][ T5788] udevd[5788]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system
[  380.727664][   T12] ERROR: (device loop5): txCommit: 
[  380.727664][   T12] 
[  380.736573][T12848] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2270'.
[  380.781542][   T12] jfs_write_inode: jfs_commit_inode failed!
[  380.802445][T12850] loop6: detected capacity change from 0 to 512
[  380.835626][ T8596] 
[  380.835626][ T8596]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  380.835626][ T8596] 
[  380.872128][T12850] EXT4-fs: Ignoring removed nobh option
[  380.913316][ T8596] 
[  380.913316][ T8596]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  380.913316][ T8596] 
[  380.935004][ T5800] udevd[5800]: symlink '../../loop6' '/dev/disk/by-diskseq/683.tmp-b7:6' failed: Read-only file system
[  380.990108][ T5807] udevd[5807]: symlink '../../loop7' '/dev/disk/by-diskseq/680.tmp-b7:7' failed: Read-only file system
[  381.058064][ T5800] udevd[5800]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  381.073169][T12850] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2271: invalid indirect mapped block 256 (level 2)
[  381.103121][ T5788] udevd[5788]: symlink '../../loop5' '/dev/disk/by-diskseq/681.tmp-b7:5' failed: Read-only file system
[  381.194415][T12850] EXT4-fs (loop6): 2 truncates cleaned up
[  381.251391][T12850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.474458][   T27] audit: type=1326 audit(1793715518.365:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12863 comm="syz.0.2276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070e99fb19 code=0x7ffc0000
[  381.606424][T12849] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.2271: bg 0: block 5: invalid block bitmap
[  381.653877][   T27] audit: type=1326 audit(1793715518.365:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12863 comm="syz.0.2276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070e99fb19 code=0x7ffc0000
[  381.739256][T12864] loop5: detected capacity change from 0 to 8192
[  381.780428][T12849] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[  381.813936][T12864] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  381.842658][   T27] audit: type=1326 audit(1793715518.365:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12863 comm="syz.0.2276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070e99fb19 code=0x7ffc0000
[  381.867270][    C0] vkms_vblank_simulate: vblank timer overrun
[  381.878421][T12871] loop7: detected capacity change from 0 to 512
[  381.908602][T12849] EXT4-fs (loop6): This should not happen!! Data will be lost
[  381.908602][T12849] 
[  381.937555][T12871] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  382.007281][T12849] EXT4-fs (loop6): Total free blocks count 0
[  382.047285][T12871] EXT4-fs (loop7): 1 truncate cleaned up
[  382.053220][T12849] EXT4-fs (loop6): Free/Dirty block details
[  382.059142][T12849] EXT4-fs (loop6): free_blocks=0
[  382.102798][T12871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.127052][   T27] audit: type=1326 audit(1793715518.365:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12863 comm="syz.0.2276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070e99fb19 code=0x7ffc0000
[  382.151691][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.171699][T12849] EXT4-fs (loop6): dirty_blocks=33
[  382.177184][T12849] EXT4-fs (loop6): Block reservation details
[  382.260118][T12849] EXT4-fs (loop6): i_reserved_data_blocks=33
[  382.317383][   T27] audit: type=1326 audit(1793715518.365:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12863 comm="syz.0.2276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070e99fb19 code=0x7ffc0000
[  382.400169][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.459734][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.513074][   T27] audit: type=1326 audit(1793715518.405:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12863 comm="syz.0.2276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f070e99fb19 code=0x7ffc0000
[  382.537447][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.692504][T12882] kAFS: bad VL server IP address
[  382.736337][   T27] audit: type=1326 audit(1793715518.405:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12863 comm="syz.0.2276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070e99fb19 code=0x7ffc0000
[  382.884175][   T27] audit: type=1326 audit(1793715518.405:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12863 comm="syz.0.2276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f070e99fb19 code=0x7ffc0000
[  383.026692][   T27] audit: type=1326 audit(1793715518.405:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12863 comm="syz.0.2276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f070e99fb19 code=0x7ffc0000
[  383.051060][    C0] vkms_vblank_simulate: vblank timer overrun
[  383.120863][T12893] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2288'.
[  383.198210][T12897] loop7: detected capacity change from 0 to 1024
[  383.255820][T12897] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  383.314436][T12899] kAFS: Invalid Command on /proc/fs/afs/cells file
[  383.359540][T12897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.544727][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.743357][T12910] loop7: detected capacity change from 0 to 256
[  383.751778][T12908] loop6: detected capacity change from 0 to 256
[  383.802267][T12908] exfat: Deprecated parameter 'utf8'
[  383.831715][T12910] exfat: Deprecated parameter 'namecase'
[  383.837507][T12910] exfat: Deprecated parameter 'utf8'
[  383.855262][T12889] loop5: detected capacity change from 0 to 32768
[  383.882810][T12908] exfat: Deprecated parameter 'namecase'
[  383.888646][T12908] exfat: Deprecated parameter 'namecase'
[  383.949598][T12910] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  383.971564][T12908] exfat: Deprecated parameter 'utf8'
[  384.063693][T12908] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  384.436106][T12902] loop0: detected capacity change from 0 to 32768
[  384.510345][T12902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2293 (12902)
[  384.644140][T12902] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  384.708519][T12902] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  384.784059][T12902] BTRFS warning (device loop0): excessive commit interval 3581
[  384.806783][ T5788] udevd[5788]: symlink '../../loop5' '/dev/disk/by-diskseq/694.tmp-b7:5' failed: Read-only file system
[  384.839414][T12902] BTRFS info (device loop0): force zlib compression, level 3
[  384.864316][ T5807] udevd[5807]: symlink '../../loop0' '/dev/disk/by-diskseq/698.tmp-b7:0' failed: Read-only file system
[  384.895974][T12902] BTRFS info (device loop0): metadata ratio 107050
[  384.915004][T12922] loop5: detected capacity change from 0 to 1024
[  384.925358][ T5788] udevd[5788]: symlink '../../loop5' '/dev/disk/by-diskseq/694.tmp-b7:5' failed: Read-only file system
[  384.945828][T12902] BTRFS info (device loop0): turning on flush-on-commit
[  384.955486][ T5807] udevd[5807]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system
[  384.976349][T12922] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  384.999131][T12902] BTRFS info (device loop0): max_inline at 0
[  385.040813][T12902] BTRFS info (device loop0): using free space tree
[  385.068505][ T5788] udevd[5788]: symlink '../../loop5' '/dev/disk/by-diskseq/699.tmp-b7:5' failed: Read-only file system
[  385.118294][T12922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.161409][ T5788] udevd[5788]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  385.231020][T12902] BTRFS info (device loop0): enabling ssd optimizations
[  385.243744][T12940] sctp: [Deprecated]: syz.7.2303 (pid 12940) Use of struct sctp_assoc_value in delayed_ack socket option.
[  385.243744][T12940] Use struct sctp_sack_info instead
[  385.450430][ T8596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.592272][ T5788] udevd[5788]: symlink '../../loop5' '/dev/disk/by-diskseq/699.tmp-b7:5' failed: Read-only file system
[  385.615117][T12947] loop7: detected capacity change from 0 to 512
[  385.695449][T12947] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  385.709444][ T5788] udevd[5788]: symlink '../../loop5' '/dev/disk/by-diskseq/699.tmp-b7:5' failed: Read-only file system
[  385.754668][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  385.779726][T12951] ip_tables: iptables: counters copy to user failed while replacing table
[  385.807582][ T5800] udevd[5800]: symlink '../../loop7' '/dev/disk/by-diskseq/701.tmp-b7:7' failed: Read-only file system
[  385.829644][T12947] EXT4-fs (loop7): 1 truncate cleaned up
[  385.865171][T12953] C: renamed from lo (while UP)
[  385.878351][T12947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.896527][ T5800] udevd[5800]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  385.954629][T12953] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  386.197131][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.464929][T12963] loop7: detected capacity change from 0 to 512
[  386.533488][T12963] EXT4-fs: Ignoring removed nobh option
[  386.639871][T12963] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2310: invalid indirect mapped block 256 (level 2)
[  386.776032][T12963] EXT4-fs (loop7): 2 truncates cleaned up
[  386.813978][T12963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.125577][T12962] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm syz.7.2310: bg 0: block 5: invalid block bitmap
[  387.222535][T12962] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[  387.327002][T12962] EXT4-fs (loop7): This should not happen!! Data will be lost
[  387.327002][T12962] 
[  387.387648][T12962] EXT4-fs (loop7): Total free blocks count 0
[  387.430961][T12962] EXT4-fs (loop7): Free/Dirty block details
[  387.468046][T12962] EXT4-fs (loop7): free_blocks=0
[  387.489878][T12962] EXT4-fs (loop7): dirty_blocks=33
[  387.528361][T12962] EXT4-fs (loop7): Block reservation details
[  387.560122][T12974] loop6: detected capacity change from 0 to 4096
[  387.577021][T12962] EXT4-fs (loop7): i_reserved_data_blocks=33
[  387.617399][T12959] loop0: detected capacity change from 0 to 40427
[  387.694362][T12974] ntfs3: loop6: Failed to load $Extend (-22).
[  387.701214][T12959] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  387.740507][T12974] ntfs3: loop6: Failed to initialize $Extend.
[  387.762021][ T9870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.778060][T12959] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  387.824757][T12959] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  387.905009][T12959] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  387.984338][T12959] F2FS-fs (loop0): Image doesn't support compression
[  388.034592][T12959] F2FS-fs (loop0): invalid crc value
[  388.108609][T12968] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  388.118316][T12959] F2FS-fs (loop0): Found nat_bits in checkpoint
[  388.165694][T12968] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  388.228449][T12968] F2FS-fs (loop5): invalid crc value
[  388.258652][ T3558] ntfs3: loop6: ino=5, mi_enum_attr
[  388.385005][T12959] F2FS-fs (loop0): Start checkpoint disabled!
[  388.508500][T12959] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  388.537006][T12959] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  388.567717][T12968] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  388.604514][T12968] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  388.726924][T12959] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e0/0x390
[  388.938788][ T8596] syz-executor: attempt to access beyond end of device
[  388.938788][ T8596] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  389.049862][ T8596] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  389.148916][ T3502] kworker/u4:10: attempt to access beyond end of device
[  389.148916][ T3502] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  389.229099][ T3502] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  389.294039][ T3502] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  390.669162][T13035] set_capacity_and_notify: 1 callbacks suppressed
[  390.669175][T13035] loop0: detected capacity change from 0 to 1024
[  390.717504][T13035] EXT4-fs: inline encryption not supported
[  390.746717][T13009] loop6: detected capacity change from 0 to 40427
[  390.782114][T13035] EXT4-fs (loop0): invalid inodes per group: 204800
[  390.782114][T13035] 
[  390.806162][T13009] F2FS-fs (loop6): invalid crc value
[  390.847751][T13009] F2FS-fs (loop6): Found nat_bits in checkpoint
[  390.900987][ T5807] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  391.088166][   T27] audit: type=1326 audit(1793715527.985:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  391.143078][T13009] F2FS-fs (loop6): Start checkpoint disabled!
[  391.283789][   T27] audit: type=1326 audit(1793715528.025:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  391.395753][T13009] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  391.433225][   T27] audit: type=1326 audit(1793715528.025:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  391.585461][   T27] audit: type=1326 audit(1793715528.035:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  391.634374][T13044] loop0: detected capacity change from 0 to 8192
[  391.683734][T13044] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  391.756488][   T27] audit: type=1326 audit(1793715528.035:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  391.786207][T13044] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  391.819320][   T12] kworker/u4:1: attempt to access beyond end of device
[  391.819320][   T12] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  391.840919][T13044] REISERFS (device loop0): using ordered data mode
[  391.867840][T13044] reiserfs: using flush barriers
[  391.883993][   T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  391.906322][   T27] audit: type=1326 audit(1793715528.035:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  391.934830][T13044] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  391.962982][   T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  392.031257][T13044] REISERFS (device loop0): checking transaction log (loop0)
[  392.071028][   T27] audit: type=1326 audit(1793715528.035:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  392.221200][   T27] audit: type=1326 audit(1793715528.035:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  392.289018][T13044] REISERFS (device loop0): Using tea hash to sort names
[  392.298797][T13044] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  392.325879][   T27] audit: type=1326 audit(1793715528.035:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  392.462755][   T27] audit: type=1326 audit(1793715528.045:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe7f619fb19 code=0x7ffc0000
[  392.920100][T13058] loop5: detected capacity change from 0 to 32768
[  393.572588][T13078] tipc: Can't bind to reserved service type 1
[  393.777824][T13083] loop5: detected capacity change from 0 to 4096
[  393.842108][T13083] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  393.906658][T13083] NILFS (loop5): mounting unchecked fs
[  393.954321][ T5807] udevd[5807]: incorrect nilfs2 checksum on /dev/loop5
[  393.981304][T13083] NILFS (loop5): recovery complete
[  394.007461][T13086] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  394.408017][T13090] loop6: detected capacity change from 0 to 2048
[  394.509810][T13090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  394.795025][ T5794] Bluetooth: hci1: unexpected event for opcode 0x0c38
[  394.864432][T13098] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  395.073555][T13102] loop7: detected capacity change from 0 to 256
[  395.149902][T13102] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  395.332222][T13102] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff)
[  395.400790][T13102] exFAT-fs (loop7): Filesystem has been set read-only
[  395.687773][T13115] loop5: detected capacity change from 0 to 512
[  395.796213][T13115] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  395.900865][T13115] EXT4-fs (loop5): 1 truncate cleaned up
[  395.907871][T13115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.095512][T13115] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5994: inode #12: comm syz.5.2371: bad extra_isize 62 (inode size 256)
[  396.119210][T13125] program syz.6.2376 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  396.175497][T13115] EXT4-fs (loop5): Remounting filesystem read-only
[  396.330267][ T8596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.434194][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  396.434208][   T27] audit: type=1400 audit(1793715533.335:154): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=13136 comm="syz.0.2382" name="foo" offset=35
[  396.940910][T13157] loop0: detected capacity change from 0 to 512
[  396.970850][T13157] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  397.035562][T13157] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.2389: inode has both inline data and extents flags
[  397.112793][T13157] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2389: couldn't read orphan inode 15 (err -117)
[  397.165651][T13157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.305393][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.456783][T13146] loop6: detected capacity change from 0 to 32768
[  397.580198][T13146] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  397.681777][T13146] XFS (loop6): Ending clean mount
[  397.783401][T12436] block nbd0: Possible stuck request ffff888022d10000: control (read@0,1024B). Runtime 180 seconds
[  397.840128][T13160] loop5: detected capacity change from 0 to 32768
[  397.898419][T13160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2390 (13160)
[  397.936588][ T8658] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  397.989046][T13160] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  398.024043][T13160] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  398.050830][T13160] BTRFS info (device loop5): setting nodatasum
[  398.064164][T13160] BTRFS info (device loop5): force zlib compression, level 3
[  398.085032][T13160] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  398.107960][T13160] BTRFS info (device loop5): use lzo compression, level 0
[  398.126810][T13160] BTRFS info (device loop5): turning on flush-on-commit
[  398.139577][T13160] BTRFS info (device loop5): enabling auto defrag
[  398.159929][T13160] BTRFS info (device loop5): max_inline at 4096
[  398.180365][T13160] BTRFS info (device loop5): using free space tree
[  398.233149][T13160] BTRFS info (device loop5): enabling ssd optimizations
[  398.390968][ T8596] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  398.487884][ T5807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (5807)
[  398.882704][T13200] loop0: detected capacity change from 0 to 256
[  399.689230][T13217] loop6: detected capacity change from 0 to 1024
[  400.064318][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  400.213900][T13227] netlink: 436 bytes leftover after parsing attributes in process `syz.7.2410'.
[  400.414285][T13236] loop7: detected capacity change from 0 to 128
[  400.592206][ T5794] Bluetooth: hci1: unexpected event for opcode 0x1004
[  400.616829][T13240] Bluetooth: MGMT ver 1.22
[  400.647299][ T9870] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  400.674374][ T9870] FAT-fs (loop7): Filesystem has been set read-only
[  400.913558][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'.
[  400.979994][T13256] loop7: detected capacity change from 0 to 7
[  401.005543][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.014875][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.027897][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.037230][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.049558][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.058799][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.073443][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.082869][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.095087][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.104531][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.115157][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.124394][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.134598][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.143827][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.162559][T13256] ldm_validate_partition_table(): Disk read failed.
[  401.170067][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.179290][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.198277][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.207501][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.223578][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.232951][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  401.243722][T13256] Dev loop7: unable to read RDB block 0
[  401.271106][T13256]  loop7: unable to read partition table
[  401.294902][T13256] loop7: partition table beyond EOD, truncated
[  401.322705][T13256] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր��c��֐�ȵ4FLQk݊) failed (rc=-5)
[  401.387055][ T5152] ldm_validate_partition_table(): Disk read failed.
[  401.414916][ T5152] Dev loop7: unable to read RDB block 0
[  401.427624][ T5152]  loop7: unable to read partition table
[  401.447690][ T5152] loop7: partition table beyond EOD, truncated
[  401.533935][T13266] loop5: detected capacity change from 0 to 256
[  401.643811][T13266] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  401.696030][   T27] audit: type=1400 audit(1793715538.595:155): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=13268 comm="syz.0.2429" name="unknown" offset=28
[  401.815914][T13266] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff)
[  401.867271][T13273] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  401.878763][T13266] exFAT-fs (loop5): Filesystem has been set read-only
[  402.365081][T13292] loop7: detected capacity change from 0 to 1024
[  402.521085][T13292] hfsplus: keylen 65060 too large
[  402.548107][T13292] hfsplus: xattr searching failed
[  402.576287][T13295] hfsplus: keylen 65060 too large
[  402.606526][T13295] hfsplus: xattr searching failed
[  402.701396][T13294] loop6: detected capacity change from 0 to 8192
[  402.746069][T13294] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  402.829393][T13294] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  402.894320][T13294] REISERFS (device loop6): using ordered data mode
[  402.933012][T13294] reiserfs: using flush barriers
[  402.987050][T13294] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  403.055182][T13294] REISERFS (device loop6): checking transaction log (loop6)
[  403.189726][T13294] REISERFS (device loop6): Using tea hash to sort names
[  403.207355][T13294] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  403.963674][T13305] loop0: detected capacity change from 0 to 32768
[  404.033633][T13305] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  404.135592][T13305] XFS (loop0): Ending clean mount
[  404.203771][T13305] XFS (loop0): User initiated shutdown received.
[  404.267936][T13305] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  404.351030][T13305] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  404.416970][T13322] netlink: 'syz.5.2447': attribute type 1 has an invalid length.
[  404.465629][T13322] netlink: 'syz.5.2447': attribute type 2 has an invalid length.
[  404.488514][ T5787] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  404.890609][T13330] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2451'.
[  404.923424][T13330] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2451'.
[  405.189574][T13340] syz.5.2455[13340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  405.189817][T13340] syz.5.2455[13340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  405.847349][T13363] loop6: detected capacity change from 0 to 16
[  405.939747][T13363] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  406.401485][T13372] loop5: detected capacity change from 0 to 64
[  406.420104][T13374] netlink: 'syz.6.2470': attribute type 5 has an invalid length.
[  406.519805][T13354] loop0: detected capacity change from 0 to 32768
[  406.542685][ T8596] hfs: node 4:3 still has 1 user(s)!
[  406.623790][T13354] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  406.726970][T13354] XFS (loop0): Ending clean mount
[  407.074809][ T5787] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  407.757154][T13398] loop5: detected capacity change from 0 to 8192
[  407.809932][T13398] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  407.871274][T13398] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  407.923259][T13398] REISERFS (device loop5): using ordered data mode
[  407.929982][T13398] reiserfs: using flush barriers
[  407.990170][T13398] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  408.079376][T13398] REISERFS (device loop5): checking transaction log (loop5)
[  408.095264][T13408] loop6: detected capacity change from 0 to 256
[  408.218727][T13408] FAT-fs (loop6): Directory bread(block 64) failed
[  408.274000][T13408] FAT-fs (loop6): Directory bread(block 65) failed
[  408.319696][T13408] FAT-fs (loop6): Directory bread(block 66) failed
[  408.357920][T13398] REISERFS (device loop5): Using tea hash to sort names
[  408.371427][T13408] FAT-fs (loop6): Directory bread(block 67) failed
[  408.389399][T13398] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  408.401048][T13408] FAT-fs (loop6): Directory bread(block 68) failed
[  408.407736][T13408] FAT-fs (loop6): Directory bread(block 69) failed
[  408.447063][T13408] FAT-fs (loop6): Directory bread(block 70) failed
[  408.484471][T13408] FAT-fs (loop6): Directory bread(block 71) failed
[  408.511129][T13408] FAT-fs (loop6): Directory bread(block 72) failed
[  408.517818][T13408] FAT-fs (loop6): Directory bread(block 73) failed
[  408.675209][T13415] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  408.967994][T13421] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  409.048217][T13421] can0: slcan on ttyS3.
[  409.241386][T13421] can0 (unregistered): slcan off ttyS3.
[  409.636252][T13447] loop7: detected capacity change from 0 to 512
[  409.689632][T13447] EXT4-fs: Invalid want_extra_isize 206
[  410.482423][T13474] loop6: detected capacity change from 0 to 2048
[  410.627326][T13479] loop0: detected capacity change from 0 to 1024
[  410.659569][T13474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.747287][T13474] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  410.843630][T13479] hfsplus: keylen 65060 too large
[  410.848921][T13479] hfsplus: xattr searching failed
[  410.930372][T13484] hfsplus: keylen 65060 too large
[  410.962977][T13484] hfsplus: xattr searching failed
[  410.992082][ T8658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.175046][ T5789] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  411.195435][T13461] loop7: detected capacity change from 0 to 32768
[  411.280150][T13461] JBD2: Ignoring recovery information on journal
[  411.407995][ T5789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  411.453593][T13461] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  411.466251][ T5789] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  411.572639][ T5789] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[  411.643858][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.816825][ T9870] ocfs2: Unmounting device (7,7) on (node local)
[  411.991098][ T5789] rtsx_usb: probe of 6-1:1.0 failed with error -22
[  412.052356][ T5789] usb 6-1: USB disconnect, device number 14
[  412.339218][T13515] kAFS: bad VL server IP address
[  412.646682][T13527] nbd: socks must be embedded in a SOCK_ITEM attr
[  413.379332][T13547] loop5: detected capacity change from 0 to 164
[  413.500067][T13547] rock: directory entry would overflow storage
[  413.532523][T13547] rock: sig=0x4d4e, size=5, remaining=4
[  413.538665][T13547] isofs: isofs_export_get_parent(): child directory not normalized!
[  413.622455][T13554] isofs: isofs_export_get_parent(): child directory not normalized!
[  413.755095][T13556] loop0: detected capacity change from 0 to 512
[  413.806834][T13556] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  413.869301][T13556] EXT4-fs (loop0): 1 truncate cleaned up
[  413.904047][T13556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.138281][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.436153][ T5793] asus 0005:0B05:8502.0014: No inputs registered, leaving
[  414.457264][ T5793] asus 0005:0B05:8502.0014: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz1
[  414.530993][ T5789] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  414.663696][T13564] loop5: detected capacity change from 0 to 40427
[  414.677919][T13564] F2FS-fs (loop5): invalid crc value
[  414.689374][T13564] F2FS-fs (loop5): Found nat_bits in checkpoint
[  414.740984][ T5789] usb 7-1: Using ep0 maxpacket: 32
[  414.760537][ T5789] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  414.791947][ T5789] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  414.825764][T13564] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  414.835724][ T5789] usb 7-1: config 0 interface 0 has no altsetting 0
[  414.847348][ T5789] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  414.867240][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.888505][ T5789] usb 7-1: Product: syz
[  414.898599][ T5789] usb 7-1: Manufacturer: syz
[  414.914133][ T8596] syz-executor: attempt to access beyond end of device
[  414.914133][ T8596] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  414.930512][ T5789] usb 7-1: SerialNumber: syz
[  414.939743][ T5789] usb 7-1: config 0 descriptor??
[  414.958180][ T8596] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  415.302669][T13577] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2544'.
[  415.360273][ T5789] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  415.766497][ T5789] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  415.781940][ T5789] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  415.796827][ T5789] gs_usb: probe of 7-1:0.0 failed with error -71
[  415.813990][ T5789] usb 7-1: USB disconnect, device number 12
[  416.149832][T13589] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2549'.
[  416.580085][T13601] binder: 13600:13601 ioctl c018620c 200000000000 returned -22
[  416.660977][ T5865] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  416.855264][ T5865] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  416.865513][ T5865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.879610][ T5865] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.896187][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0
[  416.904486][ T5865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.916388][ T5865] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.927951][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0
[  416.938693][ T5865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.948279][ T5865] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.964314][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0
[  416.972768][ T5865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  416.987034][ T5865] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  416.998677][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0
[  417.011478][ T5865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  417.023766][ T5865] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  417.035673][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0
[  417.046381][ T5865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  417.055855][ T5865] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  417.072546][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0
[  417.080497][ T5865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  417.095197][ T5865] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  417.107598][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0
[  417.119536][ T5865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  417.129653][ T5865] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  417.145460][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0
[  417.155678][ T5865] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  417.169045][ T5865] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  417.179622][ T5865] usb 7-1: Product: syz
[  417.187799][ T5865] usb 7-1: Manufacturer: syz
[  417.192886][ T5865] usb 7-1: SerialNumber: syz
[  417.206852][ T5865] usb 7-1: config 0 descriptor??
[  417.234095][ T5865] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  417.694021][ T5865] usb 7-1: USB disconnect, device number 13
[  417.725076][ T5865] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  418.511170][ T5789] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  418.718286][ T5789] usb 6-1: config 0 has no interfaces?
[  418.739087][ T5789] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  418.787910][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.831471][ T5789] usb 6-1: config 0 descriptor??
[  419.083669][ T5925] usb 6-1: USB disconnect, device number 15
[  419.162763][T13665] loop6: detected capacity change from 0 to 64
[  419.599083][T13655] loop7: detected capacity change from 0 to 32768
[  419.716972][T13655] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  419.771491][T13682] nbd: socks must be embedded in a SOCK_ITEM attr
[  419.867906][T13655] XFS (loop7): Ending clean mount
[  420.050860][T13655] XFS (loop7): User initiated shutdown received.
[  420.087463][T13655] XFS (loop7): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  420.126651][T13692] netlink: 'syz.5.2594': attribute type 11 has an invalid length.
[  420.183751][T13692] netlink: 'syz.5.2594': attribute type 8 has an invalid length.
[  420.210867][T13655] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  420.244110][T13692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2594'.
[  420.331354][ T9870] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  421.402063][T13725] loop0: detected capacity change from 0 to 128
[  421.431686][T13727] loop7: detected capacity change from 0 to 16
[  421.471550][T13725] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  421.507319][T13727] erofs: (device loop7): mounted with root inode @ nid 36.
[  421.554230][T13725] ext4 filesystem being mounted at /668/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  421.726003][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  421.968520][ T5865] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0015/input/input39
[  422.097353][ T5865] hid-generic 0005:0009:0040.0015: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 
[  422.192928][T13752] udevd[13752]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory
[  422.923383][T13754] loop6: detected capacity change from 0 to 131072
[  422.974847][T13754] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (512, 24)
[  422.982818][T13754] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  422.991178][T13754] F2FS-fs (loop6): Test dummy encryption mode enabled
[  423.000152][T13754] F2FS-fs (loop6): invalid crc value
[  423.048370][T13754] F2FS-fs (loop6): Found nat_bits in checkpoint
[  423.080922][T13754] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  423.126467][T13754] F2FS-fs (loop6): Start checkpoint disabled!
[  423.152019][T13754] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  423.159127][T13754] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  423.287653][T13761] loop0: detected capacity change from 0 to 512
[  423.547261][   T12] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  423.706389][T13766] loop0: detected capacity change from 0 to 256
[  423.789083][T13766] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  425.096549][T13770] syz.5.2628 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  425.165854][T13774] loop7: detected capacity change from 0 to 40427
[  425.223052][T13774] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  425.265131][T13774] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  425.351432][T13774] F2FS-fs (loop7): invalid crc value
[  425.493853][T13792] loop5: detected capacity change from 0 to 128
[  425.543624][T13792] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  425.647090][T13792] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  425.695785][T13774] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  425.730208][T13774] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  425.952453][ T9870] syz-executor: attempt to access beyond end of device
[  425.952453][ T9870] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  426.017683][ T9870] syz-executor: attempt to access beyond end of device
[  426.017683][ T9870] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  426.165703][ T9870] syz-executor: attempt to access beyond end of device
[  426.165703][ T9870] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  426.194750][T13787] loop0: detected capacity change from 0 to 40427
[  426.274955][T13787] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  426.284532][ T9870] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  426.321428][T13787] F2FS-fs (loop0): Image doesn't support compression
[  426.328436][T13787] F2FS-fs (loop0): heap/no_heap options were deprecated
[  426.428182][T13787] F2FS-fs (loop0): invalid crc value
[  426.487935][T13787] F2FS-fs (loop0): Found nat_bits in checkpoint
[  426.704198][T13787] F2FS-fs (loop0): Start checkpoint disabled!
[  426.833615][T13814] Invalid input. Must be >= 4608
[  426.872900][T13787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  427.233467][ T3470] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.269330][T13822] loop5: detected capacity change from 0 to 512
[  427.340793][T13822] EXT4-fs (loop5): Test dummy encryption mode enabled
[  427.414269][T13822] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002]
[  427.440297][ T3502] kworker/u4:10: attempt to access beyond end of device
[  427.440297][ T3502] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  427.476596][T13822] System zones: 1-12
[  427.515437][T13822] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.561001][ T3502] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  427.568293][ T3502] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  427.671082][ T3470] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.692562][T13822] EXT4-fs error (device loop5): ext4_add_entry:2488: inode #2: comm syz.5.2648: Directory hole found for htree leaf block 0
[  427.767393][T13822] EXT4-fs (loop5): Remounting filesystem read-only
[  427.907860][ T3470] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.932939][T12436] block nbd0: Possible stuck request ffff888022d10000: control (read@0,1024B). Runtime 210 seconds
[  428.078974][ T8596] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  428.225455][ T3470] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
[  430.836814][ T3470] hsr_slave_0: left promiscuous mode
[  430.853953][ T3470] hsr_slave_1: left promiscuous mode
[  430.860089][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.868131][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.882559][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.892801][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.900475][ T3470] bridge_slave_1: left allmulticast mode
[  430.907711][ T3470] bridge_slave_1: left promiscuous mode
[  430.915650][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.925476][ T3470] bridge_slave_0: left allmulticast mode
[  430.935713][ T3470] bridge_slave_0: left promiscuous mode
[  430.944092][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.989840][ T3470] veth1_macvtap: left promiscuous mode
[  431.004174][ T3470] veth0_macvtap: left promiscuous mode
[  431.014739][ T3470] veth1_vlan: left promiscuous mode
[  431.019993][ T3470] veth0_vlan: left promiscuous mode
[  431.212750][ T3502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  432.073391][ T3470] team0 (unregistering): Port device team_slave_1 removed
[  432.166590][ T3470] team0 (unregistering): Port device team_slave_0 removed
[  432.257753][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  432.359985][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  432.994420][ T3470] bond0 (unregistering): Released all slaves
[  433.337538][ T3470] IPVS: stop unused estimator thread 0...
[  433.450514][ T3470] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.530360][ T3470] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.594885][ T3470] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.665645][ T3470] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.856468][ T3470] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.966872][ T3470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.037615][ T3470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.117928][ T3470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.194851][ T3470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0