last executing test programs:

2m1.836281861s ago: executing program 2 (id=713):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x9)

2m1.710238077s ago: executing program 2 (id=715):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000180)=0x5)

2m1.531073196s ago: executing program 2 (id=718):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0x26e, 0x30314247, 0x3, @discrete={0x0, 0x8298}})

2m1.460831268s ago: executing program 2 (id=720):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x152)

2m1.32012866s ago: executing program 2 (id=721):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90)

2m0.968006362s ago: executing program 2 (id=722):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
landlock_restrict_self(r0, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
landlock_restrict_self(r1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

2m0.8496716s ago: executing program 32 (id=722):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
landlock_restrict_self(r0, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
landlock_restrict_self(r1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

58.486168457s ago: executing program 1 (id=1373):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711092000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)

58.485893546s ago: executing program 1 (id=1374):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2})

58.419300002s ago: executing program 1 (id=1375):
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905", @ANYRES32], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x46402)

56.793060274s ago: executing program 1 (id=1381):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

56.556923333s ago: executing program 1 (id=1382):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="b878", 0x2}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x5, 0x4, 0x8, 0x1, 0x5, 0x3, 0x2, 0x96, 0xff, 0x8, 0x4, 0x1, 0x3}, 0xe)

56.32986764s ago: executing program 1 (id=1385):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6)
fcntl$notify(r0, 0x402, 0x8000001c)
chdir(&(0x7f00000001c0)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86400, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

56.216505939s ago: executing program 33 (id=1385):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6)
fcntl$notify(r0, 0x402, 0x8000001c)
chdir(&(0x7f00000001c0)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86400, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

29.800217131s ago: executing program 4 (id=1651):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

29.638505239s ago: executing program 4 (id=1654):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="d70843d0d3a7d851fad0b53f714b67cbace5aee79f641ae72cab5f6a2e16496deeeffee47b5b0e284efef0fff2ae8848abba01f5f8ab6fa8db3c059cb91ff7cd99d1d925df5fbe5d1ad490e319cc0e10535f0134f3c95c488fe6f60a778dbe81a23b3d1215791c6eb6e3778ee28fe1c7a65994519a168eac54dcf849875eb792708c0c6440ff50b0477f4047f7c6eaa171a4252ece9054006724eaf6db6b59ba3a7f4d743486a5205a2dbbffd79501ea9345c6ca2047840006b9aaeec65c78f57e329c2923a6e0c78819bf55e3a5b6542c70a286ab5a39f481fd61836877338a06d7a071a2f764374537c44d9823", 0xee}, {&(0x7f0000000740)="e16fdb2f41db56208b1bdab9839d8b764d15b9a34928b8358799ea0e330a378ed09fa94fcf366c381e8a474883e9dee976f8dcf68b85d9b463ff0118701821bf49683f3616becebbfb9737f46352fd2680ebbc428ef004cd9bfdbb05e4741a0cd5fc693f2472ae31", 0x68}, {&(0x7f00000007c0)="b5008d9a75143e8db609e26250d4a0d2a5e0cb18e7978806eee6e3d75ba24c995453d7ee398cfad992082e185c965cb517e873d20b696726d33b7e6785c283009939f1e4b38241674f382c1d4684c68a09a833a0597ae4996995", 0x5a}, {&(0x7f0000000180)="25ee0292a0d058acd5fe18495c8f1317c4b4d14d25daa0b78cce05022e957b4a939ed513bc110fa0481d9ce536b255f92b86447e5870081f9394", 0x3a}, {&(0x7f0000000840)="2d739656d65997a1dbb426a3db01627c4988ff8c7db6b28b691059ac13431304c759c5cc503c4d5f6d36451fad3b7f60190f78267f7a76fb57358d1b5e06e8d427ce0f6f17ac1900ceff151c212874faf2c0eade90f052e3c4f0b04dc9421b92a1788450bdd69ff8d24b224fa6d01117766c7ee7ffc8a61ccb397f24fbdef1d1f10e0db03ecee8ef4dba08e57c0362fd0f31d54ba23f48dc9c82a93b81f28401b00a54623316d40fb50da3e58e47859298983b15a69dcda7494443b4b73430ac81bc043c8e3e18c729d5dc978df91286036fd5b2b3d191746877b24026982ed808e3ef100d3b3005b74a2dc4f10e0452dfdc", 0xf2}, {&(0x7f0000000940)="959bfd5e83b4c577ec2c3a371a7ae32162afd812aa876c08c9216e1387a05255adef998c6ff9ed6dfc49e77c4f41a97b44132a80e843f5d637eaf3cb4f72842133e104b499a7e7a55895b9549b0cdaa9e7f2aa865d0c2d8d00fe4c0b6d06d4bcb0cfb4cc36e085f750695051134c06b84a74f06e3a3ec6076c8b444bd7ff1d3bcb09aa2f611cc2f8f59f4783af8a082e484c8ffbb4b07800f26977aaa5710db1573f00100d037025b21a20cbca2c6d8397a29bdac30394f8c48175057da5511d39fa4929c1e29f4ecd6cf740ca5992705b9d5a41be5882416d3d", 0xda}, {&(0x7f0000001500)="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", 0x344}], 0x7}, 0x4000040)

27.786916887s ago: executing program 4 (id=1660):
mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000100)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x40000000001000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff})
setreuid(0xee01, 0xee01)
fallocate(r0, 0x1, 0x9, 0x81)

27.786413538s ago: executing program 4 (id=1661):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@userxattr}], [], 0x2c})

27.678761951s ago: executing program 4 (id=1662):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000001140))

27.460001225s ago: executing program 4 (id=1664):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000704a012704c6f011367acc6ae8fb462852ab71c7c6f55b1b4a47a69445efcc2e32c4d490fec2c09f2a282f690ad436cb19f682e0c5057a8335d1c7b4f56aff9319a78ec3079531468811b33b5d83aa6b2fb3e91d9c8446fa08b4e3b086fb3e4699b52c12cb5346981b1411dbe467f7613e498d4858ad51883225a1fc73ed7219ec2d34c4a94b4b673866ad068b3fce87bd0504e4c6b10c84bc9520eba51484a2e3bc36d461d72"], 0x1, 0x166, &(0x7f0000000240)="$eJzs281KOmEUx/Hf+Pr/2/vbplVQUJucNGhql5ciOpk0lmQbJYgupSvrBhTqBppglKkZgiZDH9LvB2TOEQ7nPItHjwsFYG6tSrJkKSvJ9/2Hyz1LO6aHAjAVvt58APMq/WJ6AgBmDCrpYA9oS3p+va/1R69swv1hUEkFz3NJ/U/1uaT1j1bw3M5E6/OS/iXZX56G9fux/v9/2L8Qqy8krh+e/2A3Wr8gaVHSkqRlSSuj31prkta/6F+P9d9K2B/4DUvFeB55I6WLpucehXk2yEthngvyciw/DvN8kBdrN159UkcAMKbUN/c/Hbv/mdj9B/B3dbq9q6rnubcEBAQEYWD6kwnApNl3rbbd6fYOm61qw22412XnzHFKp6UTxw42fzu6/wOYHR9f+qYnAQAAAAAAAAAAAAAA49qQtGl6CAAAAABTMY2/E5k+IwAAAAAAAAAAAAAAAAAAADAr3gMAAP//s9VQng==")
truncate(&(0x7f0000000040)='./file1\x00', 0x41bfc)

27.354304845s ago: executing program 34 (id=1664):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000704a012704c6f011367acc6ae8fb462852ab71c7c6f55b1b4a47a69445efcc2e32c4d490fec2c09f2a282f690ad436cb19f682e0c5057a8335d1c7b4f56aff9319a78ec3079531468811b33b5d83aa6b2fb3e91d9c8446fa08b4e3b086fb3e4699b52c12cb5346981b1411dbe467f7613e498d4858ad51883225a1fc73ed7219ec2d34c4a94b4b673866ad068b3fce87bd0504e4c6b10c84bc9520eba51484a2e3bc36d461d72"], 0x1, 0x166, &(0x7f0000000240)="$eJzs281KOmEUx/Hf+Pr/2/vbplVQUJucNGhql5ciOpk0lmQbJYgupSvrBhTqBppglKkZgiZDH9LvB2TOEQ7nPItHjwsFYG6tSrJkKSvJ9/2Hyz1LO6aHAjAVvt58APMq/WJ6AgBmDCrpYA9oS3p+va/1R69swv1hUEkFz3NJ/U/1uaT1j1bw3M5E6/OS/iXZX56G9fux/v9/2L8Qqy8krh+e/2A3Wr8gaVHSkqRlSSuj31prkta/6F+P9d9K2B/4DUvFeB55I6WLpucehXk2yEthngvyciw/DvN8kBdrN159UkcAMKbUN/c/Hbv/mdj9B/B3dbq9q6rnubcEBAQEYWD6kwnApNl3rbbd6fYOm61qw22412XnzHFKp6UTxw42fzu6/wOYHR9f+qYnAQAAAAAAAAAAAAAA49qQtGl6CAAAAABTMY2/E5k+IwAAAAAAAAAAAAAAAAAAADAr3gMAAP//s9VQng==")
truncate(&(0x7f0000000040)='./file1\x00', 0x41bfc)

9.790049723s ago: executing program 5 (id=1793):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0)
sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000780)=""/115, 0x73}], 0x1}, 0x2}], 0x1, 0x100, 0x0)

9.6998204s ago: executing program 5 (id=1794):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x0, 0xbf, 0x0, 0x0, 0x2}, {0xfffffffffffffffe, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000, 0xfffffffe}}, 0xe8)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

9.589219318s ago: executing program 5 (id=1795):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x4000)

9.479311806s ago: executing program 5 (id=1796):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x3800813, &(0x7f0000000480)={[{@cruft}, {@map_acorn}, {@unhide}, {@session={'session', 0x3d, 0x31}}, {@nojoliet}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@nocompress}, {@overriderock}, {}, {@block={'block', 0x3d, 0x200}}, {}, {@overriderock}, {@nojoliet}, {@mode={'mode', 0x3d, 0xf}}]}, 0x1, 0xa61, &(0x7f0000001cc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

9.309530795s ago: executing program 5 (id=1797):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200002, 0x7})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345})
r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x0, 0x0, 0x30f}, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0)

9.067898084s ago: executing program 5 (id=1802):
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x1, 0x4}, {0x8bbf, 0x8}}}}, 0x11)
timerfd_create(0x7, 0x0)
poll(0x0, 0x0, 0xfffffffe)

8.919943717s ago: executing program 35 (id=1802):
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x1, 0x4}, {0x8bbf, 0x8}}}}, 0x11)
timerfd_create(0x7, 0x0)
poll(0x0, 0x0, 0xfffffffe)

4.445891579s ago: executing program 0 (id=1820):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1)
write$proc_mixer(r0, &(0x7f0000000100)=ANY=[], 0xb0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0)
dup3(r1, r0, 0x0)

4.2795671s ago: executing program 0 (id=1822):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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")
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20000050)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r1 = fsmount(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c000100"], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchdir(r1)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r6, 0x2007ffb)
sendfile(r6, r6, 0x0, 0x1000000201005)
ftruncate(r6, 0x6)

3.236977168s ago: executing program 0 (id=1825):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x45}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.039816839s ago: executing program 0 (id=1827):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="40d4823deffdbbeb65eeddb31203a829679a7a18f01faefa691c80df4e49f2c92d0c9708f605177b1f5699eeabb703cc126adf2f9c5167d17178b4e0c590345bad5de91ddcffc38f8306894ef738ec7a8c3b32c7b9d0f74abf43c4dee78decff644fd28d7d874518bd960a098875b53d2005aa112a11645be226700055ef1a7211d9d207126a16bb6fba43ce8c5ba645a92df438", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16], 0xec, 0x5ac4, &(0x7f0000008380)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fsetxattr$security_ima(r0, &(0x7f00000002c0), &(0x7f00000041c0)=@v2={0x3, 0x1, 0x7, 0x7f}, 0x9, 0x2)

2.280895871s ago: executing program 0 (id=1834):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd26, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x7, 0x2, 0xfef}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x0)

1.050567093s ago: executing program 6 (id=1846):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)

1.037644097s ago: executing program 6 (id=1848):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

949.010097ms ago: executing program 3 (id=1850):
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

948.578897ms ago: executing program 6 (id=1851):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f00000006c0)={[{@fat=@sys_immutable}, {@uni_xlate}, {@rodir}, {@fat=@errors_remount}, {@shortname_lower}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fat=@umask={'umask', 0x3d, 0x100000536}}, {@numtail}, {@rodir}, {@uni_xlate}, {@rodir}]}, 0x3, 0x356, &(0x7f0000000200)="$eJzs3U9oI9UfAPBvdrJJu7C/9vCDRUEYvQladise9NSydGExF5Xgn4MY3K5KUxcaDHYPzdaLeBQ86smbBz142LMIinjz4NUVxD940OOCiyPJTJJpk3a7QnYtfj6H8O1732/ee5mhmU6b15dXYqMWcTmNiLm5SlRXzq/EzUosRhJD12JSbUobAHA83Myy+CPLHbGkMuMpAQAzNnj/f/V0qeXtLw/Lz7z7A8CxV/z8P39YztxBHVdmMiUAYMYm7v8/tKe7tvdX/dXSXwUAAMfVsy+8+NRqI+KZNJ2L2Hyn2+w248lx/+rleD3asR5nYyFuReQXCv2HyuDxwsXG2tk0TXvx82I0+xXdZsRmr9vMrxRWk0F9Pc7FQiwW9cXVRpZlyYXPGmvn0oGIuNYbjB+blW7zZJwqxv/+VKzHcqTx/4n6iIuNteW0eILm5rC+F7E7vm/Rn/9SLMS3r8SVaMel6NcOL2saazvn0vR81thT323W5y6NXoUD74AAAAAAAAAAAAAAAAAAAAAAAMA/spSOLI72v8nG+/csLU3pH+yPk9cX+wPt5vsDZfUssuz3tx5tvpvEnv2B9u/P021W48S9XToAAAAAAAAAAAAAAAAAAAD8a3S2a9Fqt9e3OttXN8pBb6uzfSIi+i1vfP3JF/MxmXOboFqMUepKi6arG60sGSZnyZ6cIkj6gw9bPr4+mnE5pz5axdRp1A/uardPP/jjB+OWB5LhM/81zkli+gKTfdMoB5v/y6d0Jy/UKFi+Tc6NLMsOKt95abIqKhHVOz9whwdZP/jqp9fue6xz5vFBy+dZ7uFHFp678f5Hv2602v2RY3AEa1udW9lGq/h6+sl2cJCUzp9K5EGlfCZUDyvfLYL5iP6hbCXf/fb8/e99c7TRs3LLm1Nyknw5n+7vquVBJR+03DU/bayTU07+GQRnPlxpXd/54ZejVpW+SdioAwAAAAAAAAAAAAAAAAAA7orSZ8ULxYd9Tx5W9cTTs58ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANw94///Xwp2J1qOEvzZi8mu+vpWJ6J2r5cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3N8BAAD//zGNaeE=")
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee01)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x148, 0x1}, 0x0, 0x0, 0x1, 0x7, 0xd0e, 0x8, 0x401, 0x3, 0x9})

860.043562ms ago: executing program 3 (id=1852):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$FICLONE(r0, 0x40049409, r0)

859.85803ms ago: executing program 3 (id=1853):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001200), &(0x7f0000000100)=0x4)

788.171022ms ago: executing program 6 (id=1854):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vim2m(0x0, 0x40000000e, 0x2)
writev(r0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
dup3(r2, r1, 0x80000)
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1f2, &(0x7f00000002c0)="$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")

788.033254ms ago: executing program 3 (id=1855):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

787.826843ms ago: executing program 3 (id=1856):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$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")
open(0x0, 0x149040, 0x10)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x8775, 0x6}, {0xa07, 0x401}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

649.805639ms ago: executing program 3 (id=1857):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000240)={0x20, 0x11, 0x1, "fb"}, 0x0, 0x0, 0x0, 0x0})

196.834148ms ago: executing program 0 (id=1858):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@noquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

196.446708ms ago: executing program 6 (id=1859):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x13}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

0s ago: executing program 6 (id=1860):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x41, 0x6, 0xcd, 0x40, 0x6cd, 0x10f, 0xd51b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xb, 0xfd, 0x1, 0x33, 0x77, 0x61, 0x0, [], [{{0x9, 0x5, 0x87, 0x3, 0x8, 0xf, 0xff, 0x7}}]}}]}}]}}, 0x0)

kernel console output (not intermixed with test programs):

ion
[  169.843367][ T9159] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1206: iget: bad i_size value: 38620345925642
[  169.893196][ T9159] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1206: couldn't read orphan inode 15 (err -117)
[  169.930000][ T9159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.570192][ T9168] loop3: detected capacity change from 0 to 32768
[  170.574446][ T9168] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1209 (9168)
[  170.642414][ T9168] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.649371][ T9168] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  170.843995][ T9168] BTRFS info (device loop3): enabling ssd optimizations
[  170.856135][ T9168] BTRFS info (device loop3): turning on async discard
[  170.859044][ T9168] BTRFS info (device loop3): enabling free space tree
[  170.881591][   T33] audit: type=1326 audit(1756335381.802:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9185 comm="syz.1.1210" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe5058ebe9 code=0x0
[  170.963509][ T7886] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.465334][ T9162] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  171.526067][ T9194] loop3: detected capacity change from 0 to 40427
[  171.539338][ T9194] F2FS-fs (loop3): build fault injection rate: 14
[  171.542099][ T9194] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  171.547839][ T9194] F2FS-fs (loop3): invalid crc value
[  171.552691][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  171.563159][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  171.613209][ T9194] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  171.617295][ T9194] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  171.623405][ T9194] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  171.650091][ T9194] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  171.657351][ T9194] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  171.662246][ T9194] F2FS-fs (loop3): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[  171.715312][    C1] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  171.719866][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  171.719885][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.719893][    C1] Call Trace:
[  171.719898][    C1]  <TASK>
[  171.719906][    C1]  dump_stack_lvl+0x189/0x250
[  171.719927][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.719941][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  171.719955][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.719970][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.719991][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  171.720013][    C1]  f2fs_write_end_io+0x886/0xb60
[  171.720037][    C1]  blk_update_request+0x57e/0xe60
[  171.720061][    C1]  blk_mq_end_request+0x3e/0x70
[  171.720075][    C1]  blk_done_softirq+0x10a/0x160
[  171.720090][    C1]  handle_softirqs+0x286/0x870
[  171.720105][    C1]  ? run_ksoftirqd+0x9b/0x100
[  171.720122][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  171.720135][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.720150][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.720160][    C1]  run_ksoftirqd+0x9b/0x100
[  171.720172][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  171.720189][    C1]  smpboot_thread_fn+0x542/0xa60
[  171.720200][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.720217][    C1]  kthread+0x711/0x8a0
[  171.720233][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  171.720244][    C1]  ? __pfx_kthread+0x10/0x10
[  171.720258][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.720272][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.720287][    C1]  ? __pfx_kthread+0x10/0x10
[  171.720301][    C1]  ret_from_fork+0x3fc/0x770
[  171.720316][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  171.720333][    C1]  ? __switch_to_asm+0x39/0x70
[  171.720346][    C1]  ? __switch_to_asm+0x33/0x70
[  171.720359][    C1]  ? __pfx_kthread+0x10/0x10
[  171.720373][    C1]  ret_from_fork_asm+0x1a/0x30
[  171.720397][    C1]  </TASK>
[  171.720402][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  171.802221][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  171.802241][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.802249][    C1] Call Trace:
[  171.802255][    C1]  <TASK>
[  171.802261][    C1]  dump_stack_lvl+0x189/0x250
[  171.802286][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.802300][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  171.802314][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.802331][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.802354][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  171.802377][    C1]  f2fs_write_end_io+0x886/0xb60
[  171.802401][    C1]  blk_update_request+0x57e/0xe60
[  171.802454][    C1]  blk_mq_end_request+0x3e/0x70
[  171.802470][    C1]  blk_done_softirq+0x10a/0x160
[  171.802486][    C1]  handle_softirqs+0x286/0x870
[  171.802509][    C1]  ? run_ksoftirqd+0x9b/0x100
[  171.802527][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  171.802542][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.802557][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.802568][    C1]  run_ksoftirqd+0x9b/0x100
[  171.802581][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  171.802599][    C1]  smpboot_thread_fn+0x542/0xa60
[  171.802613][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.802630][    C1]  kthread+0x711/0x8a0
[  171.802648][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  171.802660][    C1]  ? __pfx_kthread+0x10/0x10
[  171.802675][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.802689][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.802707][    C1]  ? __pfx_kthread+0x10/0x10
[  171.802722][    C1]  ret_from_fork+0x3fc/0x770
[  171.802739][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  171.802753][    C1]  ? __switch_to_asm+0x39/0x70
[  171.802768][    C1]  ? __switch_to_asm+0x33/0x70
[  171.802780][    C1]  ? __pfx_kthread+0x10/0x10
[  171.802793][    C1]  ret_from_fork_asm+0x1a/0x30
[  171.802818][    C1]  </TASK>
[  171.802824][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  171.883574][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  171.883591][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.883597][    C1] Call Trace:
[  171.883603][    C1]  <TASK>
[  171.883609][    C1]  dump_stack_lvl+0x189/0x250
[  171.883629][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.883640][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  171.883651][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.883666][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.883684][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  171.883703][    C1]  f2fs_write_end_io+0x886/0xb60
[  171.883722][    C1]  blk_update_request+0x57e/0xe60
[  171.883742][    C1]  blk_mq_end_request+0x3e/0x70
[  171.883753][    C1]  blk_done_softirq+0x10a/0x160
[  171.883765][    C1]  handle_softirqs+0x286/0x870
[  171.883779][    C1]  ? run_ksoftirqd+0x9b/0x100
[  171.883793][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  171.883805][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.883816][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.883825][    C1]  run_ksoftirqd+0x9b/0x100
[  171.883836][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  171.883850][    C1]  smpboot_thread_fn+0x542/0xa60
[  171.883860][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.883873][    C1]  kthread+0x711/0x8a0
[  171.883888][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  171.883896][    C1]  ? __pfx_kthread+0x10/0x10
[  171.883908][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.883920][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.883934][    C1]  ? __pfx_kthread+0x10/0x10
[  171.883945][    C1]  ret_from_fork+0x3fc/0x770
[  171.883958][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  171.883971][    C1]  ? __switch_to_asm+0x39/0x70
[  171.883983][    C1]  ? __switch_to_asm+0x33/0x70
[  171.883993][    C1]  ? __pfx_kthread+0x10/0x10
[  171.884004][    C1]  ret_from_fork_asm+0x1a/0x30
[  171.884024][    C1]  </TASK>
[  171.884029][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  171.966172][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  171.966192][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.966199][    C1] Call Trace:
[  171.966205][    C1]  <TASK>
[  171.966212][    C1]  dump_stack_lvl+0x189/0x250
[  171.966236][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.966249][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  171.966262][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.966279][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.966301][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  171.966323][    C1]  f2fs_write_end_io+0x886/0xb60
[  171.966345][    C1]  blk_update_request+0x57e/0xe60
[  171.966369][    C1]  blk_mq_end_request+0x3e/0x70
[  171.966383][    C1]  blk_done_softirq+0x10a/0x160
[  171.966398][    C1]  handle_softirqs+0x286/0x870
[  171.966412][    C1]  ? run_ksoftirqd+0x9b/0x100
[  171.966457][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  171.966470][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.966485][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.966505][    C1]  run_ksoftirqd+0x9b/0x100
[  171.966519][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  171.966536][    C1]  smpboot_thread_fn+0x542/0xa60
[  171.966549][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  171.966567][    C1]  kthread+0x711/0x8a0
[  171.966585][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  171.966596][    C1]  ? __pfx_kthread+0x10/0x10
[  171.966610][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.966624][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.966640][    C1]  ? __pfx_kthread+0x10/0x10
[  171.966655][    C1]  ret_from_fork+0x3fc/0x770
[  171.966670][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  171.966685][    C1]  ? __switch_to_asm+0x39/0x70
[  171.966698][    C1]  ? __switch_to_asm+0x33/0x70
[  171.966710][    C1]  ? __pfx_kthread+0x10/0x10
[  171.966723][    C1]  ret_from_fork_asm+0x1a/0x30
[  171.966747][    C1]  </TASK>
[  171.966753][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  171.999240][ T9201] loop1: detected capacity change from 0 to 32768
[  172.000410][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  172.000446][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.000453][    C1] Call Trace:
[  172.000459][    C1]  <TASK>
[  172.000463][    C1]  dump_stack_lvl+0x189/0x250
[  172.000484][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.000507][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  172.000521][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  172.000536][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.000555][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  172.000576][    C1]  f2fs_write_end_io+0x886/0xb60
[  172.000598][    C1]  blk_update_request+0x57e/0xe60
[  172.000621][    C1]  blk_mq_end_request+0x3e/0x70
[  172.000634][    C1]  blk_done_softirq+0x10a/0x160
[  172.000649][    C1]  handle_softirqs+0x286/0x870
[  172.000664][    C1]  ? run_ksoftirqd+0x9b/0x100
[  172.000679][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  172.000692][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  172.000706][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  172.000716][    C1]  run_ksoftirqd+0x9b/0x100
[  172.000728][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  172.000746][    C1]  smpboot_thread_fn+0x542/0xa60
[  172.000759][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  172.000776][    C1]  kthread+0x711/0x8a0
[  172.000794][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  172.000804][    C1]  ? __pfx_kthread+0x10/0x10
[  172.000820][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  172.000833][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.000850][    C1]  ? __pfx_kthread+0x10/0x10
[  172.000865][    C1]  ret_from_fork+0x3fc/0x770
[  172.000881][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  172.000897][    C1]  ? __switch_to_asm+0x39/0x70
[  172.000911][    C1]  ? __switch_to_asm+0x33/0x70
[  172.000924][    C1]  ? __pfx_kthread+0x10/0x10
[  172.000939][    C1]  ret_from_fork_asm+0x1a/0x30
[  172.000964][    C1]  </TASK>
[  172.000970][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  172.052602][ T9201] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.057544][ T7886] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint
[  172.091375][ T9201] XFS (loop1): Ending clean mount
[  172.155656][ T9201] XFS (loop1): Quotacheck needed: Please wait.
[  172.194409][ T9201] XFS (loop1): Quotacheck: Done.
[  172.232592][   T33] audit: type=1800 audit(1756335383.152:35): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1215" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  172.351350][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.617574][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.848023][ T5895] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  172.973413][ T9233] loop3: detected capacity change from 0 to 32768
[  172.997031][ T5895] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  173.000943][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.005261][ T9233] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.017039][ T5895] usb 2-1: config 0 descriptor??
[  173.032993][ T9233] XFS (loop3): Ending clean mount
[  173.034404][ T5895] gspca_main: cpia1-2.14.0 probing 0813:0001
[  173.043226][ T9233] XFS (loop3): Quotacheck needed: Please wait.
[  173.084730][ T9233] XFS (loop3): Quotacheck: Done.
[  173.091746][ T9233] xfs: Unknown parameter '184467440737095516150xffffffffffffffff18446744073709551615V?Cp~'~8pٻ젌|^(coM)'
[  173.099194][   T33] audit: type=1800 audit(1756335384.022:36): pid=9233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1225" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  173.231066][ T5895] gspca_cpia1: usb_control_msg 05, error -71
[  173.233652][ T5895] gspca_cpia1: usb_control_msg 01, error -71
[  173.236838][ T5895] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  173.244279][ T5895] usb 2-1: USB disconnect, device number 14
[  173.319636][ T7886] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.777071][ T9251] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1229'.
[  173.780255][ T9251] netlink: 'syz.1.1229': attribute type 3 has an invalid length.
[  173.879773][ T5706] nci: nci_ntf_packet: unsupported ntf opcode 0xf05
[  174.635385][ T7978] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  174.805139][ T7978] usb 4-1: Using ep0 maxpacket: 8
[  174.811446][ T7978] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  174.816723][ T7978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.819564][ T7978] usb 4-1: Product: syz
[  174.820953][ T7978] usb 4-1: Manufacturer: syz
[  174.822729][ T7978] usb 4-1: SerialNumber: syz
[  174.827526][ T7978] usb 4-1: config 0 descriptor??
[  174.831267][ T7978] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  174.834311][ T7978] usb 4-1: setting power ON
[  174.838048][ T7978] dvb-usb: bulk message failed: -22 (2/0)
[  174.842139][ T7978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  174.846672][ T7978] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  174.850261][ T7978] usb 4-1: media controller created
[  174.870733][ T7978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  174.883516][ T7978] usb 4-1: selecting invalid altsetting 6
[  174.885972][ T7978] usb 4-1: digital interface selection failed (-22)
[  174.888279][ T7978] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  174.891997][ T7978] usb 4-1: setting power OFF
[  174.893855][ T7978] dvb-usb: bulk message failed: -22 (2/0)
[  174.896734][ T7978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  174.900630][ T7978] (NULL device *): no alternate interface
[  174.925565][ T7978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  174.945574][ T5895] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  175.038164][ T5910] usb 4-1: USB disconnect, device number 10
[  175.107058][ T5895] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  175.112064][ T5895] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  175.117292][ T5895] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  175.121971][ T5895] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  175.126164][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.132267][ T9261] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  175.811334][ T9276] overlayfs: failed to decode file handle (len=24, type=251, flags=0, err=-22)
[  176.002405][ T9288] bridge_slave_0: invalid flags given to default FDB implementation
[  176.105869][ T9295] evm: overlay not supported
[  176.295525][ T9305] loop0: detected capacity change from 0 to 32768
[  176.420171][ T9305] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  176.420192][ T9305]   allowing incompatible features above 0.0: (unknown version)
[  176.420199][ T9305]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  176.437340][ T9305] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  176.440645][ T9305] bcachefs (loop0): initializing new filesystem
[  176.449527][ T9305] bcachefs (loop0): going read-write
[  176.457085][ T9305] bcachefs (loop0): marking superblocks
[  176.464022][ T9305] bcachefs (loop0): initializing freespace
[  176.470672][ T9305] bcachefs (loop0): done initializing freespace
[  176.474820][ T9305] bcachefs (loop0): reading snapshots table
[  176.479305][ T9305] bcachefs (loop0): reading snapshots done
[  176.506586][ T5895] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  176.511345][ T5895] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input13
[  176.516913][ T9305] bcachefs (loop0): done starting filesystem
[  176.606112][ T9327] loop3: detected capacity change from 0 to 256
[  176.617259][ T9327] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.621638][ T9327] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  176.644774][ T9327] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  177.283988][ T9345] loop1: detected capacity change from 0 to 1764
[  177.385819][ T5849] bcachefs (loop0): shutting down
[  177.389355][ T5849] bcachefs (loop0): going read-only
[  177.391058][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  177.392124][ T5895] usb 2-1: USB disconnect, device number 15
[  177.393348][    C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  177.411600][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  177.477213][ T9353] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1271'.
[  177.480750][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  177.481206][ T9353] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  177.487567][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 4
[  177.500051][ T5849] bcachefs (loop0): marking filesystem clean
[  177.535648][ T5849] bcachefs (loop0): shutdown complete
[  177.597095][ T9359] loop1: detected capacity change from 0 to 128
[  177.605652][ T9359] EXT4-fs: Ignoring removed nobh option
[  177.614481][ T9359] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  177.622681][ T9359] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  177.668066][ T5841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.685073][ T5910] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  177.838713][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.842642][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.846881][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.851075][ T5910] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.854101][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.859151][ T5910] usb 4-1: config 0 descriptor??
[  178.286255][ T5910] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  178.527005][ T1272] usb 4-1: USB disconnect, device number 11
[  178.731717][ T9371] loop1: detected capacity change from 0 to 2048
[  178.738816][ T9371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.785234][ T9371] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 3200 lbcount: 4096 extent 56+4096
[  178.902130][ T9373] loop0: detected capacity change from 0 to 256
[  178.912920][ T9373] exfat: Deprecated parameter 'namecase'
[  178.921479][ T9373] exfat: Deprecated parameter 'utf8'
[  178.930183][ T9373] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2b52634e, utbl_chksum : 0xe619d30d)
[  179.123163][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'.
[  179.243562][ T9396] IPv6: sit1: Disabled Multicast RS
[  179.247360][ T9396] sit1: entered allmulticast mode
[  179.321109][ T9400] loop3: detected capacity change from 0 to 2048
[  179.334542][ T9400] NILFS (loop3): invalid segment: Checksum error in segment payload
[  179.344234][ T9400] NILFS (loop3): trying rollback from an earlier position
[  179.347558][ T9400] NILFS (loop3): too large filesystem blocksize: 2 ^ 347668480 KiB
[  179.350898][ T9400] NILFS (loop3): error -22 while searching super root
[  179.815038][ T5910] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  179.897308][ T9412] loop1: detected capacity change from 0 to 256
[  179.903199][ T9412] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  179.908785][ T9412] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  179.917968][ T9412] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  179.930335][ T9412] exFAT-fs (loop1): error, broken FAT chain.
[  179.933059][ T9412] exFAT-fs (loop1): Filesystem has been set read-only
[  179.937223][ T9412] exFAT-fs (loop1): error, failed to bmap (inode : ffff88811392b4d8 iblock : 95, err : -5)
[  179.975061][ T5910] usb 4-1: Using ep0 maxpacket: 8
[  179.978764][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.982339][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  179.989087][ T5910] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  179.992105][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.001632][ T5910] usb 4-1: Product: syz
[  180.003316][ T5910] usb 4-1: Manufacturer: syz
[  180.005934][ T5910] usb 4-1: SerialNumber: syz
[  180.019575][ T5910] usb 4-1: config 0 descriptor??
[  180.032100][ T5910] radioshark 4-1:0.0: Invalid radioSHARK device
[  180.034168][ T5910] radioshark 4-1:0.0: probe with driver radioshark failed with error -22
[  180.042501][ T5910] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  180.228529][ T5910] usb 4-1: USB disconnect, device number 12
[  180.286829][   T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  180.436992][   T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  180.440482][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.444693][   T10] usb 2-1: config 0 has no interface number 0
[  180.451342][   T10] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  180.455461][   T10] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3
[  180.458719][   T10] usb 2-1: Product: syz
[  180.460569][   T10] usb 2-1: Manufacturer: syz
[  180.462495][   T10] usb 2-1: SerialNumber: syz
[  180.468318][   T10] usb 2-1: config 0 descriptor??
[  180.477136][   T10] usb 2-1: Found UVC 0.00 device syz (046c:14e8)
[  180.479777][   T10] uvcvideo 2-1:0.105: Entity type for entity Output 1 was not initialized!
[  180.483693][   T10] usb 2-1: Failed to create links for entity 1
[  180.486710][   T10] usb 2-1: Failed to register entities (-22).
[  180.585159][ T5848] Bluetooth: hci2: command 0x0406 tx timeout
[  180.683610][ T5910] usb 2-1: USB disconnect, device number 16
[  181.235448][ T9428] process 'syz.1.1304' launched './file1' with NULL argv: empty string added
[  181.283025][ T9430] geneve2: entered allmulticast mode
[  181.615026][ T5910] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  181.768854][ T5910] usb 2-1: config index 0 descriptor too short (expected 8192, got 36)
[  181.772329][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.777165][ T5910] usb 2-1: config 0 has no interfaces?
[  181.779547][ T5910] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  181.795544][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.801110][ T5910] usb 2-1: config 0 descriptor??
[  181.912525][ T9442] loop3: detected capacity change from 0 to 8
[  181.919210][ T9442] SQUASHFS error: Failed to read block 0x62: -5
[  181.921565][ T9442] squashfs image failed sanity check
[  182.025741][ T9434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.037692][ T9434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.049006][ T5844] Bluetooth: hci0: Malformed LE Event: 0x0d
[  182.057113][ T5910] usb 2-1: string descriptor 0 read error: -71
[  182.068209][ T5910] usb 2-1: USB disconnect, device number 17
[  183.060343][ T9457] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  183.168899][ T9459] loop1: detected capacity change from 0 to 256
[  183.222954][ T9455] loop0: detected capacity change from 0 to 32768
[  183.342460][ T9455] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  183.375479][ T5849] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  183.530206][ T9480] loop3: detected capacity change from 0 to 1024
[  183.552321][ T9480] EXT4-fs (loop3): first meta block group too large: 33024 (group descriptor block count 1)
[  184.080536][ T9488] loop0: detected capacity change from 0 to 256
[  185.118926][ T9504] loop1: detected capacity change from 0 to 1024
[  185.129445][ T9504] EXT4-fs: Ignoring removed i_version option
[  185.156921][ T9504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  185.170231][ T9504] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  185.173852][ T9504] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only
[  185.954188][ T9522] loop3: detected capacity change from 0 to 4096
[  186.095575][ T9518] mpoa:mpoad_close: (<unknown>) going down
[  186.166652][ T9536] loop3: detected capacity change from 0 to 512
[  186.177556][ T9536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  186.342581][ T9536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.365884][ T9536] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.566900][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.636188][ T1272] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  187.220603][ T1272] usb 2-1: config 0 has an invalid interface number: 84 but max is 0
[  187.223502][ T1272] usb 2-1: config 0 has no interface number 0
[  187.232960][ T1272] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  187.239118][ T1272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.241836][ T1272] usb 2-1: Product: syz
[  187.243302][ T1272] usb 2-1: Manufacturer: syz
[  187.254577][ T1272] usb 2-1: SerialNumber: syz
[  187.258741][ T1272] usb 2-1: config 0 descriptor??
[  187.267277][ T1272] ljca 2-1:0.84: bulk endpoints not found
[  187.372461][ T9557] orangefs_devreq_write_iter: failed to copy head.
[  187.424300][ T9560] loop3: detected capacity change from 0 to 1024
[  187.444523][ T9560] hfsplus: request for non-existent node 3 in B*Tree
[  187.448485][ T9560] hfsplus: request for non-existent node 3 in B*Tree
[  187.478898][ T9533] loop1: detected capacity change from 0 to 8
[  187.501500][ T9533] unable to read inode lookup table
[  187.509639][ T1272] usb 2-1: USB disconnect, device number 18
[  187.820227][ T9573] input: syz1 as /devices/virtual/input/input14
[  187.936428][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  188.253170][ T9579] loop1: detected capacity change from 0 to 32768
[  188.267987][ T9579] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.277398][   T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  188.281233][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.289724][   T10] usb 4-1: config 0 descriptor??
[  188.301230][ T9579] XFS (loop1): Metadata corruption detected at __xfs_buf_ioend+0x342/0x6f0, xfs_inode block 0x2280 xfs_inode_buf_verify
[  188.306901][ T9579] XFS (loop1): Unmount and run xfs_repair
[  188.309388][ T9579] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  188.312649][ T9579] 00000000: 49 4e 07 00 00 00 00 00 00 00 00 00 00 00 00 00  IN..............
[  188.316884][ T9579] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  188.320626][ T9579] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  188.324297][ T9579] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  188.328302][ T9579] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  188.331908][ T9579] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  188.335899][ T9579] 00000060: ff ff ff ff 01 81 e9 80 00 00 00 00 00 00 00 00  ................
[  188.339652][ T9579] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  188.343624][ T9579] XFS (loop1): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x2280 len 64 error 117
[  188.348710][ T9579] XFS (loop1): Failed to read root inode 0x1140, error 117
[  188.352270][ T9579] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  188.361446][   T10] cp210x 4-1:0.0: cp210x converter detected
[  188.703807][   T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  188.961350][   T10] usb 4-1: cp210x converter now attached to ttyUSB0
[  189.127649][ T1272] usb 4-1: USB disconnect, device number 13
[  189.134384][ T1272] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  189.146762][ T1272] cp210x 4-1:0.0: device disconnected
[  189.200641][ T9601] loop1: detected capacity change from 0 to 32768
[  189.204242][ T9601] XFS: noikeep mount option is deprecated.
[  189.218645][ T9601] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  189.260002][ T9601] XFS (loop1): Ending clean mount
[  189.267124][ T9601] XFS (loop1): Quotacheck needed: Please wait.
[  189.299805][ T9601] XFS (loop1): Quotacheck: Done.
[  189.322100][   T33] audit: type=1804 audit(1756335913.245:37): pid=9601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1370" name="/newroot/447/file0/bus" dev="loop1" ino=9291 res=1 errno=0
[  189.355319][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.644988][ T9626] loop3: detected capacity change from 0 to 512
[  190.663989][ T9626] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1376: iget: bad i_size value: 38620345925642
[  190.671473][ T9626] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1376: couldn't read orphan inode 15 (err -117)
[  190.677716][ T9626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.715379][ T5880] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  190.742397][ T9629] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1376: bg 0: block 5: invalid block bitmap
[  190.754921][ T9629] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1164 with error 28
[  190.761767][ T9629] EXT4-fs (loop3): This should not happen!! Data will be lost
[  190.761767][ T9629] 
[  190.766275][ T9629] EXT4-fs (loop3): Total free blocks count 0
[  190.768959][ T9629] EXT4-fs (loop3): Free/Dirty block details
[  190.771626][ T9629] EXT4-fs (loop3): free_blocks=0
[  190.773739][ T9629] EXT4-fs (loop3): dirty_blocks=1184
[  190.777528][ T9629] EXT4-fs (loop3): Block reservation details
[  190.779973][ T9629] EXT4-fs (loop3): i_reserved_data_blocks=1184
[  190.844515][   T32] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1164 with max blocks 20 with error 28
[  190.867833][ T5880] usb 2-1: Using ep0 maxpacket: 32
[  190.872794][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  190.883722][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  191.023651][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  191.029228][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  191.039251][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  191.043082][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  191.047160][ T5880] usb 2-1: Product: syz
[  191.048897][ T5880] usb 2-1: Manufacturer: syz
[  191.050813][ T5880] usb 2-1: SerialNumber: syz
[  191.058993][ T9624] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  191.072667][ T5880] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16
[  191.472580][ T5880] usb 2-1: USB disconnect, device number 19
[  191.472645][    C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  191.520721][ T5880] appletouch 2-1:1.0: input: appletouch disconnected
[  191.733212][ T9636] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  192.253556][ T9650] loop1: detected capacity change from 0 to 2048
[  192.282957][ T9650] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.304281][ T9650] overlayfs: upper fs needs to support d_type.
[  192.309558][ T9650] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  192.312196][ T9650] overlayfs: failed to set xattr on upper
[  192.314507][ T9650] overlayfs: ...falling back to redirect_dir=nofollow.
[  192.320343][ T9650] overlayfs: ...falling back to index=off.
[  192.322377][ T9650] overlayfs: ...falling back to uuid=null.
[  192.353999][ T5841] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  192.360050][ T5841] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  192.493874][  T972] syz1: Port: 1 Link DOWN
[  192.501229][ T9653] .: renamed from bond0 (while UP)
[  192.676551][ T9657] "syz.0.1386" (9657) uses obsolete ecb(arc4) skcipher
[  192.742581][ T9666] loop0: detected capacity change from 0 to 1024
[  192.781283][ T9668] loop3: detected capacity change from 0 to 512
[  192.802393][   T68] hfsplus: b-tree write err: -5, ino 4
[  192.810361][ T9668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  192.813607][ T9668] EXT4-fs (loop3): orphan cleanup on readonly fs
[  192.829467][ T9668] EXT4-fs error (device loop3): ext4_quota_enable:7128: inode #15: comm syz.3.1390: iget: bad i_size value: 360287970189639690
[  192.846687][ T9668] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.1390: Bad quota inode: 15, type: 2
[  192.850865][ T9668] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[  192.859573][ T9668] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  192.863247][ T9668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  192.882571][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.932711][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.938928][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.942594][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.043574][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.046617][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.402602][ T9677] loop0: detected capacity change from 0 to 32768
[  193.406830][ T9677] XFS: ikeep mount option is deprecated.
[  193.430271][ T9677] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  193.447367][ T9677] XFS (loop0): Ending clean mount
[  193.451673][ T9677] XFS (loop0): Quotacheck needed: Please wait.
[  193.483989][ T9673] chnl_net:caif_netlink_parms(): no params data found
[  193.490222][ T9677] XFS (loop0): Quotacheck: Done.
[  193.523745][ T5849] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  193.637456][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.643903][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.652183][ T9673] bridge_slave_0: entered allmulticast mode
[  193.661116][ T9673] bridge_slave_0: entered promiscuous mode
[  193.668925][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.676879][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.683445][ T9673] bridge_slave_1: entered allmulticast mode
[  193.692184][ T9673] bridge_slave_1: entered promiscuous mode
[  193.730290][ T9673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.737911][ T9673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.812959][ T9673] team0: Port device team_slave_0 added
[  193.823107][ T9673] team0: Port device team_slave_1 added
[  193.856688][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.859372][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.876055][ T9673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.880211][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.882460][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  193.889824][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.892838][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.902913][ T9673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.958840][ T9673] hsr_slave_0: entered promiscuous mode
[  193.961757][ T9673] hsr_slave_1: entered promiscuous mode
[  193.964225][ T9673] debugfs: 'hsr0' already exists in 'hsr'
[  193.976041][ T9673] Cannot create hsr debugfs directory
[  194.233465][ T9673] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  194.240276][ T9673] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  194.249315][ T9673] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  194.259166][ T9673] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  194.288123][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.291102][ T9673] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.294363][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.297348][ T9673] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.331120][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.339163][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.342045][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.358669][ T9673] 8021q: adding VLAN 0 to HW filter on device team0
[  194.370982][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.374052][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.382931][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.386096][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.617721][ T5848] Bluetooth: hci1: unexpected cc 0x2002 length: 9 > 4
[  194.642331][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.759547][ T9742] loop0: detected capacity change from 0 to 1024
[  194.763173][ T9742] EXT4-fs: Ignoring removed i_version option
[  194.771937][ T9742] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  194.806374][ T9742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.824972][ T9742] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.1409: missing EA_INODE flag
[  194.852522][ T9742] EXT4-fs (loop0): Remounting filesystem read-only
[  194.920233][ T9742] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  194.950047][ T9749] loop3: detected capacity change from 0 to 256
[  195.077676][ T5848] Bluetooth: hci0: command tx timeout
[  195.247562][ T9673] veth0_vlan: entered promiscuous mode
[  195.252942][ T9673] veth1_vlan: entered promiscuous mode
[  195.271781][ T9673] veth0_macvtap: entered promiscuous mode
[  195.274165][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.276781][ T9673] veth1_macvtap: entered promiscuous mode
[  195.295231][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.302924][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.315158][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.319082][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.325051][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.330487][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.379986][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.385524][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.413557][ T9751] loop0: detected capacity change from 0 to 256
[  195.424174][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.434557][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.447694][ T9751] FAT-fs (loop0): Directory bread(block 64) failed
[  195.453459][ T9751] FAT-fs (loop0): Directory bread(block 65) failed
[  195.461915][ T9751] FAT-fs (loop0): Directory bread(block 66) failed
[  195.464674][ T9751] FAT-fs (loop0): Directory bread(block 67) failed
[  195.475677][ T9751] FAT-fs (loop0): Directory bread(block 68) failed
[  195.484152][ T9751] FAT-fs (loop0): Directory bread(block 69) failed
[  195.493838][ T9751] FAT-fs (loop0): Directory bread(block 70) failed
[  195.497566][ T9751] FAT-fs (loop0): Directory bread(block 71) failed
[  195.500450][ T9751] FAT-fs (loop0): Directory bread(block 72) failed
[  195.503244][ T9751] FAT-fs (loop0): Directory bread(block 73) failed
[  195.599307][ T9757] program syz.0.1413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  195.711974][ T9762] loop4: detected capacity change from 0 to 512
[  195.725630][ T9762] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4627: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  195.730939][ T9762] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  195.976237][ T7978] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  196.126138][ T7978] usb 4-1: Using ep0 maxpacket: 16
[  196.130523][ T7978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  196.135043][ T7978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  196.140257][ T7978] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  196.143369][ T7978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.147828][ T7978] usb 4-1: config 0 descriptor??
[  196.562007][ T7978] zydacron 0003:13EC:0006.0011: item fetching failed at offset 2/5
[  196.566782][ T7978] zydacron 0003:13EC:0006.0011: parse failed
[  196.569367][ T7978] zydacron 0003:13EC:0006.0011: probe with driver zydacron failed with error -22
[  196.766859][ T1272] usb 4-1: USB disconnect, device number 14
[  196.843640][ T9773] loop4: detected capacity change from 0 to 128
[  196.849612][ T9773] FAT-fs (loop4): bogus number of reserved sectors
[  196.852273][ T9773] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  196.857702][ T9773] FAT-fs (loop4): Can't find a valid FAT filesystem
[  197.146923][ T7978] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  197.156179][ T5848] Bluetooth: hci0: command tx timeout
[  197.300420][ T7978] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  197.303908][ T7978] usb 5-1: config 0 has no interface number 0
[  197.307211][ T7978] usb 5-1: config 0 interface 255 has no altsetting 0
[  197.309999][ T7978] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  197.313657][ T7978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.326265][ T7978] usb 5-1: config 0 descriptor??
[  197.341126][ T7978] cp210x 5-1:0.255: cp210x converter detected
[  197.743614][ T7978] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -32
[  197.861932][ T9793] loop3: detected capacity change from 0 to 32768
[  197.867198][ T9793] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1430 (9793)
[  197.887230][ T9793] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  197.892824][ T9793] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  197.921494][ T9793] BTRFS info (device loop3): allowing degraded mounts
[  197.924338][ T9793] BTRFS info (device loop3): enabling ssd optimizations
[  197.928426][ T9793] BTRFS info (device loop3): enabling free space tree
[  197.954432][ T7978] cp210x 5-1:0.255: GPIO initialisation failed: -19
[  197.961276][ T7978] usb 5-1: cp210x converter now attached to ttyUSB0
[  198.033275][ T7886] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  198.164655][ T7978] usb 5-1: USB disconnect, device number 2
[  198.173305][ T7978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  198.187483][ T7978] cp210x 5-1:0.255: device disconnected
[  199.226089][ T5848] Bluetooth: hci0: command tx timeout
[  199.778709][ T9835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.790146][ T9835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.827321][ T9837] loop4: detected capacity change from 0 to 4096
[  199.843218][ T9838] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.899077][ T9830] loop0: detected capacity change from 0 to 40427
[  199.902248][ T9830] F2FS-fs (loop0): build fault injection rate: 771
[  199.916615][ T9830] F2FS-fs (loop0): invalid crc value
[  199.961125][ T9830] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  199.969337][ T9830] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  199.990986][ T9844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.014674][ T5849] syz-executor: attempt to access beyond end of device
[  200.014674][ T5849] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  200.023472][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  200.023492][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.023500][ T5849] Call Trace:
[  200.023505][ T5849]  <TASK>
[  200.023510][ T5849]  dump_stack_lvl+0x189/0x250
[  200.023542][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.023556][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  200.023569][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  200.023586][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  200.023610][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  200.023633][ T5849]  f2fs_write_end_io+0x886/0xb60
[  200.023658][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  200.023680][ T5849]  __submit_merged_write_cond+0x255/0x530
[  200.023701][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  200.023743][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  200.023792][ T5849]  ? __mod_zone_page_state+0xd7/0x140
[  200.023816][ T5849]  ? folios_put_refs+0x560/0x640
[  200.023839][ T5849]  ? __lock_acquire+0xab9/0xd20
[  200.023862][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  200.023884][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  200.023898][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  200.023916][ T5849]  do_writepages+0x32e/0x550
[  200.023940][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  200.023957][ T5849]  filemap_fdatawrite+0x199/0x240
[  200.023972][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  200.024021][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  200.024039][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  200.024063][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  200.024092][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  200.024135][ T5849]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  200.024147][ T5849]  ? kfree+0x18e/0x440
[  200.024162][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  200.024178][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  200.024195][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  200.024206][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  200.024227][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  200.024242][ T5849]  deactivate_locked_super+0xbc/0x130
[  200.024259][ T5849]  cleanup_mnt+0x425/0x4c0
[  200.024271][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.024290][ T5849]  task_work_run+0x1d4/0x260
[  200.024308][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  200.024322][ T5849]  ? __x64_sys_umount+0x122/0x160
[  200.024341][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[  200.024361][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  200.024377][ T5849]  do_syscall_64+0x2bd/0x3b0
[  200.024423][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.024439][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.024451][ T5849]  ? exc_page_fault+0x9f/0xf0
[  200.024489][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.024500][ T5849] RIP: 0033:0x7f2b1598ff17
[  200.024512][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  200.024527][ T5849] RSP: 002b:00007ffc5be829d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  200.024541][ T5849] RAX: 0000000000000000 RBX: 00007f2b15a11c05 RCX: 00007f2b1598ff17
[  200.024549][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5be82a90
[  200.024556][ T5849] RBP: 00007ffc5be82a90 R08: 0000000000000000 R09: 0000000000000000
[  200.024563][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5be83b20
[  200.024571][ T5849] R13: 00007f2b15a11c05 R14: 0000000000030cbc R15: 00007ffc5be83b60
[  200.024592][ T5849]  </TASK>
[  200.024645][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  200.159060][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  200.159075][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.159083][ T5849] Call Trace:
[  200.159087][ T5849]  <TASK>
[  200.159091][ T5849]  dump_stack_lvl+0x189/0x250
[  200.159112][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.159126][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  200.159136][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  200.159183][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  200.159228][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  200.159249][ T5849]  f2fs_write_end_io+0x886/0xb60
[  200.159273][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  200.159291][ T5849]  __submit_merged_write_cond+0x255/0x530
[  200.159311][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  200.159350][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  200.159420][ T5849]  ? __mod_zone_page_state+0xd7/0x140
[  200.159444][ T5849]  ? folios_put_refs+0x560/0x640
[  200.159465][ T5849]  ? __lock_acquire+0xab9/0xd20
[  200.159486][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  200.159506][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  200.159520][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  200.159542][ T5849]  do_writepages+0x32e/0x550
[  200.159565][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  200.159581][ T5849]  filemap_fdatawrite+0x199/0x240
[  200.159595][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  200.159642][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  200.159658][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  200.159680][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  200.159707][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  200.159747][ T5849]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  200.159757][ T5849]  ? kfree+0x18e/0x440
[  200.159771][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  200.159786][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  200.159801][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  200.159810][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  200.159831][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  200.159845][ T5849]  deactivate_locked_super+0xbc/0x130
[  200.159860][ T5849]  cleanup_mnt+0x425/0x4c0
[  200.159872][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.159889][ T5849]  task_work_run+0x1d4/0x260
[  200.159905][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  200.159917][ T5849]  ? __x64_sys_umount+0x122/0x160
[  200.159935][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[  200.159953][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  200.159968][ T5849]  do_syscall_64+0x2bd/0x3b0
[  200.159983][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.159997][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.160008][ T5849]  ? exc_page_fault+0x9f/0xf0
[  200.160023][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.160034][ T5849] RIP: 0033:0x7f2b1598ff17
[  200.160044][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  200.160054][ T5849] RSP: 002b:00007ffc5be829d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  200.160067][ T5849] RAX: 0000000000000000 RBX: 00007f2b15a11c05 RCX: 00007f2b1598ff17
[  200.160074][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5be82a90
[  200.160081][ T5849] RBP: 00007ffc5be82a90 R08: 0000000000000000 R09: 0000000000000000
[  200.160087][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5be83b20
[  200.160094][ T5849] R13: 00007f2b15a11c05 R14: 0000000000030cbc R15: 00007ffc5be83b60
[  200.160113][ T5849]  </TASK>
[  200.160118][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  200.428106][ T9849] sp0: Synchronizing with TNC
[  200.438122][ T9851] loop3: detected capacity change from 0 to 64
[  200.452418][ T9851] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  200.811279][ T9871] loop0: detected capacity change from 0 to 64
[  201.167873][ T9881] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  201.171958][ T9881] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  201.316514][ T5848] Bluetooth: hci0: command tx timeout
[  201.481135][ T9885] loop4: detected capacity change from 0 to 2048
[  201.517050][ T9885] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.563826][ T9889] loop3: detected capacity change from 0 to 512
[  201.596890][ T9889] EXT4-fs: Ignoring removed mblk_io_submit option
[  201.611864][ T9889] EXT4-fs: inline encryption not supported
[  201.620703][ T9889] EXT4-fs: Ignoring removed mblk_io_submit option
[  201.650002][ T9889] EXT4-fs (loop3): Test dummy encryption mode enabled
[  201.663536][ T9889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  201.711631][ T9889] EXT4-fs (loop3): 1 truncate cleaned up
[  201.740161][ T9889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.268689][ T9889] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  202.378431][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.945889][ T5880] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  203.096036][ T5880] usb 4-1: Using ep0 maxpacket: 32
[  203.099187][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.102741][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  203.106647][ T5880] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  203.113702][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.117362][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.120801][ T5880] usb 4-1: Product: syz
[  203.122648][ T5880] usb 4-1: Manufacturer: syz
[  203.124724][ T5880] usb 4-1: SerialNumber: syz
[  203.132673][ T5880] cdc_ncm 4-1:1.0: skipping garbage
[  203.134689][ T5880] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  203.137980][ T5880] cdc_ncm 4-1:1.0: bind() failure
[  203.342590][ T5880] usb 4-1: USB disconnect, device number 15
[  203.486053][ T7978] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  203.638001][ T7978] usb 5-1: config 2 has an invalid interface number: 169 but max is 0
[  203.641177][ T7978] usb 5-1: config 2 has no interface number 0
[  203.643811][ T7978] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92
[  203.647598][ T7978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.657197][ T7978] cypress_m8 5-1:2.169: DeLorme Earthmate USB converter detected
[  203.665208][ T7978] earthmate ttyUSB0: required endpoint is missing
[  203.860491][ T7978] usb 5-1: USB disconnect, device number 3
[  203.878221][ T7978] cypress_m8 5-1:2.169: device disconnected
[  204.461154][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.571534][ T9942] loop4: detected capacity change from 0 to 4096
[  205.176435][ T9959] loop3: detected capacity change from 0 to 128
[  205.274068][ T9963] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1495'.
[  205.330491][ T9965] loop3: detected capacity change from 0 to 64
[  205.343318][ T9965] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  205.481986][ T9971] netlink: 'syz.3.1499': attribute type 2 has an invalid length.
[  207.360992][ T9996] loop3: detected capacity change from 0 to 32768
[  207.374797][ T9996] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  207.380536][ T9996] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.412207][ T9996] XFS (loop3): Ending clean mount
[  207.424838][ T9996] XFS (loop3): Quotacheck needed: Please wait.
[  207.459150][ T9996] XFS (loop3): Quotacheck: Done.
[  207.496774][ T7886] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.712587][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'.
[  208.721120][T10035] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  209.037155][T10039] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  209.379813][T10044] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1528'.
[  209.389663][T10043] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1528'.
[  210.034815][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'.
[  210.414200][T10069] loop4: detected capacity change from 0 to 32768
[  210.422551][T10069] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  210.502803][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'.
[  210.688416][T10082] loop0: detected capacity change from 0 to 4096
[  210.710559][T10082] EXT4-fs (loop0): Test dummy encryption mode enabled
[  210.732112][T10082] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  210.755917][T10082] System zones: 0-5
[  210.779776][T10082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.060552][T10093] loop3: detected capacity change from 0 to 8
[  211.134881][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.155552][T10093] SQUASHFS error: Failed to read block 0x2fc: -5
[  211.174706][T10093] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  211.181544][T10093] SQUASHFS error: Unable to read directory block [247:26]
[  211.194284][T10088] loop4: detected capacity change from 0 to 32768
[  211.206248][T10088] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.291710][T10088] XFS (loop4): Ending clean mount
[  211.349996][T10088] XFS (loop4): Quotacheck needed: Please wait.
[  211.380571][T10108] cgroup: Unknown subsys name 'uid>00000000000000000000'
[  211.401106][T10088] XFS (loop4): Quotacheck: Done.
[  211.490014][ T9673] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.546459][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  211.746230][ T1272] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  211.828206][T10127] loop4: detected capacity change from 0 to 512
[  211.872025][T10127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.877752][T10127] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  211.916637][ T1272] usb 4-1: Using ep0 maxpacket: 32
[  211.932656][ T1272] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  211.935298][ T1272] usb 4-1: config 0 has no interface number 0
[  211.943707][ T1272] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  211.955893][ T1272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.965229][ T1272] usb 4-1: Product: syz
[  211.971514][ T1272] usb 4-1: Manufacturer: syz
[  211.973510][ T1272] usb 4-1: SerialNumber: syz
[  211.984409][ T1272] usb 4-1: config 0 descriptor??
[  211.991566][ T1272] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  212.195079][ T5848] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260
[  212.197616][ T1272] usb 4-1: qt2_attach - failed to power on unit: -71
[  212.203884][ T1272] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71
[  212.210036][ T1272] usb 4-1: USB disconnect, device number 16
[  212.652280][T10127] orangefs_mount: mount request failed with -4
[  212.698677][ T9673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.784495][T10142] usb usb8: usbfs: process 10142 (syz.3.1568) did not claim interface 0 before use
[  212.851307][T10146] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1570'.
[  212.855664][T10146] tipc: Started in network mode
[  212.868449][T10146] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[  212.882496][T10146] tipc: Enabled bearer <udp:syz0>, priority 10
[  213.127577][T10159] ALSA: mixer_oss: invalid OSS volume 'DIGITA'
[  213.205454][T10163] input: syz1 as /devices/virtual/input/input17
[  213.854310][T10161] loop3: detected capacity change from 0 to 32768
[  213.935067][T10161] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  213.986484][    T9] tipc: Node number set to 4269801514
[  214.016173][T10161] XFS (loop3): Ending clean mount
[  214.029610][T10161] XFS (loop3): Quotacheck needed: Please wait.
[  214.107709][T10161] XFS (loop3): Quotacheck: Done.
[  214.163770][ T7886] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  214.656502][T10181] cgroup: fork rejected by pids controller in /syz0
[  214.903063][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'.
[  215.496929][T11475] loop0: detected capacity change from 0 to 2048
[  215.520764][T11475] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  215.531141][T11475] UDF-fs: Scanning with blocksize 512 failed
[  215.558631][T11475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.933495][T11479] loop3: detected capacity change from 0 to 4096
[  216.047411][T11483] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  216.619985][T11494] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1598'.
[  216.671396][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1599'.
[  216.755010][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'.
[  217.011583][T11510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  217.041196][T11514] tipc: Started in network mode
[  217.043390][T11514] tipc: Node identity 2684bd6e06ad, cluster identity 4711
[  217.049084][T11514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.062028][T11510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  217.070195][T11514] syzkaller0: entered promiscuous mode
[  217.072480][T11514] syzkaller0: entered allmulticast mode
[  217.080004][T11514] tipc: Resetting bearer <eth:syzkaller0>
[  217.088682][T11513] tipc: Resetting bearer <eth:syzkaller0>
[  217.096861][ T7978] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  217.116237][T11513] tipc: Disabling bearer <eth:syzkaller0>
[  217.250297][ T7978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.254857][ T7978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  217.261765][ T7978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  217.273226][ T7978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[  217.292620][ T7978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  217.298461][ T7978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 213, setting to 64
[  217.302926][ T7978] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  217.312004][ T7978] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  217.316478][ T7978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.319139][ T7978] usb 5-1: Product: syz
[  217.320510][ T7978] usb 5-1: Manufacturer: syz
[  217.322433][ T7978] usb 5-1: SerialNumber: syz
[  217.342805][ T7978] usb 5-1: config 0 descriptor??
[  217.346421][T11506] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  217.359196][T11506] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  217.535365][T11534] openvswitch: netlink: ct_state flags 0000ffff unsupported
[  217.754307][T11546] loop0: detected capacity change from 0 to 512
[  217.790227][T11546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  217.793932][T11546] System zones: 1-12
[  217.825969][T11546] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1624: corrupted in-inode xattr: e_value size too large
[  217.831891][T11546] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1624: couldn't read orphan inode 15 (err -117)
[  217.837394][T11546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.846626][T11549] loop3: detected capacity change from 0 to 2048
[  217.901897][T11549] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  217.906864][T11551] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1624: corrupted in-inode xattr: e_value size too large
[  217.912868][T11549] UDF-fs: Scanning with blocksize 512 failed
[  217.926800][T11549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.965424][   T33] audit: type=1800 audit(1756335942.879:38): pid=11549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1625" name="file2" dev="loop3" ino=819 res=0 errno=0
[  218.083232][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.159282][T11555] loop0: detected capacity change from 0 to 1024
[  218.188220][T11555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.202360][T11555] EXT4-fs (loop0): shut down requested (0)
[  218.274457][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.415869][ T5880] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  218.496933][ T7978] rc_core: IR keymap rc-snapstream-firefly not found
[  218.499213][ T7978] Registered IR keymap rc-empty
[  218.504251][ T7978] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  218.509953][ T7978] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18
[  218.525108][ T7978] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19
[  218.552078][ T7978] usb 5-1: USB disconnect, device number 4
[  218.554682][    C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  218.570287][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  218.573322][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  218.602239][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  218.607686][T11582] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1639'.
[  218.614706][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  218.624853][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  218.660333][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  218.669433][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  218.697109][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  218.708126][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  218.712855][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  218.718762][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  218.727338][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  218.739872][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  218.767574][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  218.772124][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  218.791309][ T5880] usb 4-1: string descriptor 0 read error: -22
[  218.791455][T11588] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1642'.
[  218.793836][ T5880] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  218.800976][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.816287][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'.
[  218.817922][ T5880] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  218.820403][T11588] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1642'.
[  218.844874][T11588] netlink: 'syz.0.1642': attribute type 3 has an invalid length.
[  218.848615][T11588] netlink: 'syz.0.1642': attribute type 2 has an invalid length.
[  218.851561][T11588] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1642'.
[  219.103189][T11606] loop4: detected capacity change from 0 to 128
[  219.125066][T11606] FAT-fs (loop4): Directory bread(block 32) failed
[  219.127677][T11606] FAT-fs (loop4): Directory bread(block 33) failed
[  219.130114][T11606] FAT-fs (loop4): Directory bread(block 34) failed
[  219.132341][T11606] FAT-fs (loop4): Directory bread(block 35) failed
[  219.134690][T11606] FAT-fs (loop4): Directory bread(block 36) failed
[  219.137918][T11606] FAT-fs (loop4): Directory bread(block 37) failed
[  219.140207][T11606] FAT-fs (loop4): Directory bread(block 38) failed
[  219.142449][T11606] FAT-fs (loop4): Directory bread(block 39) failed
[  219.149653][T11606] FAT-fs (loop4): Directory bread(block 40) failed
[  219.154264][T11606] FAT-fs (loop4): Directory bread(block 41) failed
[  219.340241][T11610] loop0: detected capacity change from 0 to 32768
[  219.343884][T11610] bcachefs: bch2_fs_parse_param() Error parsing option direct_io: option_value
[  220.547671][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803b35fc00: rx timeout, send abort
[  221.052608][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803b35fc00: abort rx timeout. Force session deactivation
[  221.124392][T11627] loop4: detected capacity change from 0 to 1024
[  221.144111][T11627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.208201][ T9673] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  221.213497][ T9673] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  221.384576][ T9673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.420575][ T5887] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.503711][ T5887] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.576089][ T5887] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.772877][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.781623][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.785425][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.792838][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.797288][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.801706][ T5887] bridge_slave_1: left allmulticast mode
[  221.804101][ T5887] bridge_slave_1: left promiscuous mode
[  221.814523][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.825229][ T5887] bridge_slave_0: left allmulticast mode
[  221.828085][ T5887] bridge_slave_0: left promiscuous mode
[  221.830658][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.151312][ T5887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.157155][ T5887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.162984][ T5887] bond0 (unregistering): Released all slaves
[  222.252867][ T5887] tipc: Disabling bearer <udp:syz0>
[  222.269031][ T5887] tipc: Left network mode
[  222.443973][T11633] chnl_net:caif_netlink_parms(): no params data found
[  222.508922][ T5887] hsr_slave_0: left promiscuous mode
[  222.511225][ T5887] hsr_slave_1: left promiscuous mode
[  222.513896][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.518205][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.521223][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.523707][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.536684][ T5887] veth1_macvtap: left promiscuous mode
[  222.538864][ T5887] veth0_macvtap: left promiscuous mode
[  222.541238][ T5887] veth1_vlan: left promiscuous mode
[  222.543342][ T5887] veth0_vlan: left promiscuous mode
[  223.031393][ T5887] team0 (unregistering): Port device team_slave_1 removed
[  223.074005][ T5887] team0 (unregistering): Port device team_slave_0 removed
[  223.238150][ T7978] usb 4-1: USB disconnect, device number 17
[  223.434767][T11658] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  223.713473][T11633] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.716938][T11633] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.721037][T11633] bridge_slave_0: entered allmulticast mode
[  223.725246][T11633] bridge_slave_0: entered promiscuous mode
[  223.738825][T11633] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.742870][T11633] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.759287][T11633] bridge_slave_1: entered allmulticast mode
[  223.763074][T11633] bridge_slave_1: entered promiscuous mode
[  223.810160][T11633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.818991][T11633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.873817][T11633] team0: Port device team_slave_0 added
[  223.876330][ T5848] Bluetooth: hci0: command tx timeout
[  223.884173][T11633] team0: Port device team_slave_1 added
[  223.939642][T11666] loop3: detected capacity change from 0 to 32768
[  223.967744][T11633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.970855][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.982329][T11633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.991498][T11633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.994391][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.006194][T11633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.021068][T11666] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.091227][T11666] XFS (loop3): Ending clean mount
[  224.095606][T11666] XFS (loop3): Quotacheck needed: Please wait.
[  224.132595][T11633] hsr_slave_0: entered promiscuous mode
[  224.148713][T11633] hsr_slave_1: entered promiscuous mode
[  224.150672][T11666] XFS (loop3): Quotacheck: Done.
[  224.151699][T11633] debugfs: 'hsr0' already exists in 'hsr'
[  224.155612][T11633] Cannot create hsr debugfs directory
[  224.239570][ T7886] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.667709][T11696] ip6tnl0: Caught tx_queue_len zero misconfig
[  224.714830][T11633] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  224.728466][T11633] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  224.747850][T11633] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  224.797615][T11633] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  225.201668][T11633] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.260713][T11633] 8021q: adding VLAN 0 to HW filter on device team0
[  225.278059][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.280834][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.301405][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.303957][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.863390][T11633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.956589][ T5848] Bluetooth: hci0: command tx timeout
[  226.121883][T11633] veth0_vlan: entered promiscuous mode
[  226.130826][T11633] veth1_vlan: entered promiscuous mode
[  226.153021][T11633] veth0_macvtap: entered promiscuous mode
[  226.160114][T11633] veth1_macvtap: entered promiscuous mode
[  226.173989][T11633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.185182][T11633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.195158][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.198583][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.202300][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.212324][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.236060][ T5895] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  226.296810][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.300126][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.324896][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.328295][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.388274][ T5895] usb 4-1: Using ep0 maxpacket: 32
[  226.392726][ T5895] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  226.396459][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.402148][ T5895] usb 4-1: config 0 descriptor??
[  226.610342][ T5895] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  226.616657][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  226.622598][ T5895] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  226.625607][ T5895] usb 4-1: media controller created
[  226.648889][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  227.606215][ T5895] az6027: usb out operation failed. (-71)
[  227.608579][ T5895] stb0899_attach: Driver disabled by Kconfig
[  227.611262][ T5895] az6027: no front-end attached
[  227.611262][ T5895] 
[  227.614055][ T5895] az6027: usb out operation failed. (-71)
[  227.618045][ T5895] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  227.622224][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20
[  227.631661][ T5895] dvb-usb: schedule remote query interval to 400 msecs.
[  227.638306][ T5895] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  227.650396][ T5895] usb 4-1: USB disconnect, device number 18
[  227.696663][ T5895] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  228.036125][ T5848] Bluetooth: hci0: command tx timeout
[  228.552589][T11748] loop0: detected capacity change from 0 to 32768
[  228.578674][T11748] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  228.617882][T11748] XFS (loop0): Starting recovery (logdev: internal)
[  228.635073][T11748] XFS (loop0): Ending recovery (logdev: internal)
[  228.673319][ T5849] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  228.828072][ T5895] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  228.927286][T11774] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  228.976061][ T5895] usb 4-1: Using ep0 maxpacket: 16
[  228.979335][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.995899][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.999800][ T5895] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  228.999821][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.006875][ T5895] usb 4-1: config 0 descriptor??
[  229.427490][ T5895] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  229.689551][ T1272] usb 4-1: USB disconnect, device number 19
[  230.106548][ T5848] Bluetooth: hci0: command tx timeout
[  230.473454][T11816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  230.476532][T11816] IPv6: NLM_F_CREATE should be set when creating new route
[  230.481031][T11816] lo: entered allmulticast mode
[  230.485626][T11816] tunl0: entered allmulticast mode
[  230.494584][T11816] gre0: entered allmulticast mode
[  230.520580][T11816] gretap0: entered allmulticast mode
[  230.551120][T11816] erspan0: entered allmulticast mode
[  230.569868][T11816] ip_vti0: entered allmulticast mode
[  230.582921][T11816] ip6_vti0: entered allmulticast mode
[  230.593830][T11816] sit0: entered allmulticast mode
[  230.619801][T11816] ip6tnl0: entered allmulticast mode
[  230.629155][T11816] ip6gre0: entered allmulticast mode
[  230.650465][T11816] syz_tun: entered allmulticast mode
[  230.665044][T11822] loop0: detected capacity change from 0 to 1024
[  230.673838][T11816] ip6gretap0: entered allmulticast mode
[  230.681658][T11816] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.696390][T11816] bridge0: entered allmulticast mode
[  230.704296][T11816] vcan0: entered allmulticast mode
[  230.733144][T11816] bond0: entered allmulticast mode
[  230.744098][T11816] bond_slave_0: entered allmulticast mode
[  230.759240][T11816] bond_slave_1: entered allmulticast mode
[  230.764443][T11816] team0: entered allmulticast mode
[  230.769157][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1713'.
[  230.775826][T11816] team_slave_0: entered allmulticast mode
[  230.777830][T11816] team_slave_1: entered allmulticast mode
[  230.783445][T11816] dummy0: entered allmulticast mode
[  230.808830][T11816] nlmon0: entered allmulticast mode
[  230.817145][T11816] caif0: entered allmulticast mode
[  230.822397][T11816] tipc: Resetting bearer <eth:batadv0>
[  230.824666][T11816] batadv0: entered allmulticast mode
[  230.834779][T11816] vxcan0: entered allmulticast mode
[  230.839933][T11816] vxcan1: entered allmulticast mode
[  230.843161][T11816] veth0: entered allmulticast mode
[  230.852246][T11816] veth1: entered allmulticast mode
[  230.866581][T11816] wg0: entered allmulticast mode
[  230.871759][T11816] wg1: entered allmulticast mode
[  230.877480][T11816] wg2: entered allmulticast mode
[  230.885186][T11816] veth0_to_bridge: entered allmulticast mode
[  230.894708][T11816] veth1_to_bridge: entered allmulticast mode
[  230.909008][T11816] veth0_to_bond: entered allmulticast mode
[  230.925288][T11816] veth1_to_bond: entered allmulticast mode
[  230.947439][T11816] veth0_to_team: entered allmulticast mode
[  230.960587][T11816] veth1_to_team: entered allmulticast mode
[  230.971493][T11816] veth0_to_batadv: entered allmulticast mode
[  230.982081][T11816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.986893][T11816] batadv_slave_0: entered allmulticast mode
[  230.995072][T11816] veth1_to_batadv: entered allmulticast mode
[  231.009439][T11816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.014279][T11816] batadv_slave_1: entered allmulticast mode
[  231.023489][T11816] xfrm0: entered allmulticast mode
[  231.031147][T11816] veth0_to_hsr: entered allmulticast mode
[  231.040169][T11816] hsr_slave_0: entered allmulticast mode
[  231.046205][T11816] veth1_to_hsr: entered allmulticast mode
[  231.054776][T11816] hsr_slave_1: entered allmulticast mode
[  231.062662][T11816] hsr0: entered allmulticast mode
[  231.071309][T11816] veth1_virt_wifi: entered allmulticast mode
[  231.079433][T11816] veth0_virt_wifi: entered allmulticast mode
[  231.088763][T11816] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  231.093571][T11816] veth1_vlan: entered allmulticast mode
[  231.099350][T11816] veth0_vlan: entered allmulticast mode
[  231.113224][T11816] vlan0: entered allmulticast mode
[  231.115330][T11816] vlan1: entered allmulticast mode
[  231.118742][T11816] macvlan0: entered allmulticast mode
[  231.125646][T11816] macvlan1: entered allmulticast mode
[  231.129785][T11816] ipvlan0: entered allmulticast mode
[  231.131544][T11816] ipvlan1: entered allmulticast mode
[  231.133831][T11816] veth1_macvtap: entered allmulticast mode
[  231.140806][T11816] veth0_macvtap: entered allmulticast mode
[  231.145702][T11816] macvtap0: entered allmulticast mode
[  231.151691][T11816] macsec0: entered allmulticast mode
[  231.160554][T11816] geneve0: entered allmulticast mode
[  231.177488][T11816] geneve1: entered allmulticast mode
[  231.191045][T11816] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  231.202922][T11816] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  231.220676][T11816] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  231.230415][T11816] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  231.251107][T11816] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  231.263282][T11816] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  231.269633][T11816] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode
[  231.272664][T11816] gre1: entered allmulticast mode
[  231.275679][T11816] bridge1: entered allmulticast mode
[  231.284982][ T5887] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.294999][ T5887] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.307208][ T5887] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.326572][ T5887] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.480149][T11845] Bluetooth: MGMT ver 1.23
[  231.746127][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  232.734907][T11882] netlink: 'syz.3.1738': attribute type 9 has an invalid length.
[  232.734938][T11882] netlink: 200108 bytes leftover after parsing attributes in process `syz.3.1738'.
[  232.734991][T11882] openvswitch: netlink: Message has 5 unknown bytes.
[  233.016171][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  233.166091][   T10] usb 4-1: Using ep0 maxpacket: 32
[  233.177393][   T10] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  233.180383][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.183624][   T10] usb 4-1: Product: syz
[  233.185382][   T10] usb 4-1: Manufacturer: syz
[  233.187398][   T10] usb 4-1: SerialNumber: syz
[  233.191662][   T10] usb 4-1: config 0 descriptor??
[  233.410325][   T10] mdc800 4-1:0.0: probe fails -> wrong Number of Configuration
[  233.421969][   T10] usb 4-1: USB disconnect, device number 20
[  233.438329][T11900] binder: 11899:11900 ioctl c018620c 200000000000 returned -22
[  233.546436][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout
[  233.549052][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  233.690153][T11908] loop5: detected capacity change from 0 to 1024
[  233.712618][T11908] hfsplus: failed to load root directory
[  233.812618][T11914] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1751'.
[  233.980466][T11920] bond1: entered allmulticast mode
[  234.063339][   T10] hid_parser_main: 7 callbacks suppressed
[  234.063381][   T10] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0
[  234.069781][   T10] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0
[  234.072912][   T10] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0
[  234.120588][   T10] hid-generic 0003:0004:0000.0013: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  234.156504][T11930] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1757'.
[  234.234536][T11930] netlink: 'syz.5.1757': attribute type 10 has an invalid length.
[  234.238902][T11934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1759'.
[  234.253852][T11930] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  234.348473][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1761'.
[  234.477593][T11949] sp0: Synchronizing with TNC
[  234.535176][T11952] sp0: Synchronizing with TNC
[  234.709974][T11959] trusted_key: syz.3.1771 sent an empty control message without MSG_MORE.
[  234.712039][T11958] gtp0: entered promiscuous mode
[  234.753500][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1770'.
[  235.037059][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  235.107102][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  235.195424][T11965] loop0: detected capacity change from 0 to 256
[  235.199299][    T9] usb 4-1: Using ep0 maxpacket: 8
[  235.214628][    T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  235.243019][    T9] usb 4-1: config 0 has no interface number 0
[  235.277999][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  235.282477][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.289927][    T9] usb 4-1: Product: syz
[  235.293876][    T9] usb 4-1: Manufacturer: syz
[  235.297373][   T10] usb 6-1: config 0 has an invalid interface number: 113 but max is 0
[  235.300933][   T10] usb 6-1: config 0 has no interface number 0
[  235.311649][    T9] usb 4-1: SerialNumber: syz
[  235.317024][    T9] usb 4-1: config 0 descriptor??
[  235.340267][   T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a
[  235.344289][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.369119][   T10] usb 6-1: Product: syz
[  235.384535][   T10] usb 6-1: Manufacturer: syz
[  235.389121][   T10] usb 6-1: SerialNumber: syz
[  235.429229][   T10] usb 6-1: config 0 descriptor??
[  235.601599][    T9] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  235.613474][    T9] usb 4-1: No valid video chain found.
[  235.644704][    T9] usb 4-1: USB disconnect, device number 21
[  236.785091][   T10] snd_usb_variax 6-1:0.113: Line 6 Variax Workbench found
[  236.805670][   T10] usb 6-1: selecting invalid altsetting 1
[  236.813511][   T10] snd_usb_variax 6-1:0.113: set_interface failed
[  236.823124][   T10] snd_usb_variax 6-1:0.113: Line 6 Variax Workbench now disconnected
[  236.835251][   T10] snd_usb_variax 6-1:0.113: probe with driver snd_usb_variax failed with error -22
[  236.851718][T11987] ptrace attach of "/syz-executor exec"[5849] was attempted by ""[11987]
[  236.852724][   T10] usb 6-1: USB disconnect, device number 3
[  236.946573][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'.
[  236.950434][T11992] netlink: 'syz.0.1778': attribute type 30 has an invalid length.
[  236.995440][ T5887] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  236.999819][ T5887] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  237.003505][ T5887] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  237.020412][ T5887] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  237.082479][T11979] loop3: detected capacity change from 0 to 32768
[  237.089012][T11979] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1775 (11979)
[  237.125003][T11979] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  237.131319][T11979] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  237.209384][T12007] loop0: detected capacity change from 0 to 2048
[  237.214987][T11979] BTRFS info (device loop3): turning on sync discard
[  237.228434][T11979] BTRFS info (device loop3): enabling free space tree
[  237.235381][T12007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.245978][T11979] BTRFS info (device loop3): doing ref verification
[  237.252041][T11979] BTRFS info (device loop3): use zlib compression, level 3
[  237.272628][   T33] audit: type=1800 audit(1756335962.189:39): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1775" name="file1" dev="loop3" ino=260 res=0 errno=0
[  237.400928][T12023] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1782'.
[  237.437040][ T7886] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  237.713735][T12026] loop5: detected capacity change from 0 to 4096
[  237.723949][T12026] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  237.771635][T12026] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  237.777121][T12026] ntfs3(loop5): ino=1a, mi_enum_attr
[  237.779816][T12026] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  237.841092][   T33] audit: type=1326 audit(1756335962.759:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779bf8ebe9 code=0x7ffc0000
[  237.856644][   T33] audit: type=1326 audit(1756335962.759:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779bf8ebe9 code=0x7ffc0000
[  237.889708][   T33] audit: type=1326 audit(1756335962.759:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f779bf8ebe9 code=0x7ffc0000
[  237.928682][   T33] audit: type=1326 audit(1756335962.759:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779bf8ebe9 code=0x7ffc0000
[  237.970495][   T33] audit: type=1326 audit(1756335962.759:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779bf8ebe9 code=0x7ffc0000
[  237.982222][   T33] audit: type=1326 audit(1756335962.759:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f779bf8ebe9 code=0x7ffc0000
[  237.996586][   T33] audit: type=1326 audit(1756335962.759:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1785" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779bf8ebe9 code=0x7ffc0000
[  239.444309][T12060] loop5: detected capacity change from 0 to 1764
[  239.684530][ T1088] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  239.706068][ T1088] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 430 with error 28
[  239.711193][ T1088] EXT4-fs (loop0): This should not happen!! Data will be lost
[  239.711193][ T1088] 
[  239.721516][ T1088] EXT4-fs (loop0): Total free blocks count 0
[  239.723746][ T1088] EXT4-fs (loop0): Free/Dirty block details
[  239.727552][ T1088] EXT4-fs (loop0): free_blocks=2415919504
[  239.729916][ T1088] EXT4-fs (loop0): dirty_blocks=432
[  239.731813][ T1088] EXT4-fs (loop0): Block reservation details
[  239.734016][ T1088] EXT4-fs (loop0): i_reserved_data_blocks=27
[  239.759186][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.937536][ T5706] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.023728][ T5706] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.052038][ T1272] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  240.126983][ T5706] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.216116][ T5706] bond0: (slave netdevsim0): Releasing backup interface
[  240.221711][ T1272] usb 4-1: unable to get BOS descriptor or descriptor too short
[  240.232506][ T1272] usb 4-1: config 7 has an invalid interface number: 252 but max is 0
[  240.238425][ T5706] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.242438][ T1272] usb 4-1: config 7 has no interface number 0
[  240.244875][ T1272] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[  240.264939][ T1272] usb 4-1: config 7 interface 252 has no altsetting 0
[  240.269145][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  240.271543][ T1272] usb 4-1: string descriptor 0 read error: -22
[  240.273992][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  240.274401][ T1272] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  240.277716][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  240.284677][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  240.284868][ T1272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.287483][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  240.299882][ T1272] idmouse 4-1:7.252: Unable to find bulk-in endpoint.
[  240.310057][T12075] loop0: detected capacity change from 0 to 32768
[  240.331581][T12075] (syz.0.1806,12075,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  240.348027][T12075] (syz.0.1806,12075,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  240.380591][T12075] JBD2: Ignoring recovery information on journal
[  240.409108][T12075] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  240.523481][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  240.525582][ T5880] usb 4-1: USB disconnect, device number 22
[  240.542635][ T5706] bridge_slave_1: left allmulticast mode
[  240.544979][ T5706] bridge_slave_1: left promiscuous mode
[  240.564772][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.589634][ T5706] bridge_slave_0: left allmulticast mode
[  240.592042][ T5706] bridge_slave_0: left promiscuous mode
[  240.597918][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.010531][ T5706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.016544][ T5706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.021312][ T5706] bond0 (unregistering): Released all slaves
[  241.036085][T12082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1807'.
[  241.050875][T12082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1807'.
[  241.264911][T12090] openvswitch: netlink: Flow key attr not present in new flow.
[  241.708867][T12076] chnl_net:caif_netlink_parms(): no params data found
[  242.089127][ T5706] hsr_slave_0: left promiscuous mode
[  242.109673][ T5706] hsr_slave_1: left promiscuous mode
[  242.120060][ T5706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.128676][ T5706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.143283][ T5706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.155245][ T5706] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.233185][ T5706] veth1_macvtap: left promiscuous mode
[  242.238938][ T5706] veth0_macvtap: left promiscuous mode
[  242.241711][ T5706] veth1_vlan: left promiscuous mode
[  242.247989][ T5706] veth0_vlan: left promiscuous mode
[  242.346277][ T5844] Bluetooth: hci0: command tx timeout
[  243.092336][T12120] loop0: detected capacity change from 0 to 128
[  243.114996][T12120] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  243.130763][T12120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.193823][ T5706] team0 (unregistering): Port device team_slave_1 removed
[  243.262136][ T5706] team0 (unregistering): Port device team_slave_0 removed
[  243.540884][T12124] loop0: detected capacity change from 0 to 40427
[  243.552686][T12124] F2FS-fs (loop0): build fault injection rate: 14
[  243.555304][T12124] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  243.566654][T12124] F2FS-fs (loop0): invalid crc value
[  243.573181][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  243.580435][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  243.616420][T12124] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  243.619608][T12124] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  243.635537][T12124] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  243.672467][    C0] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  243.676893][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  243.676914][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.676922][    C0] Call Trace:
[  243.676927][    C0]  <TASK>
[  243.676934][    C0]  dump_stack_lvl+0x189/0x250
[  243.676956][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.676970][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  243.676983][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  243.676999][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  243.677020][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  243.677041][    C0]  f2fs_write_end_io+0x886/0xb60
[  243.677062][    C0]  blk_update_request+0x57e/0xe60
[  243.677085][    C0]  blk_mq_end_request+0x3e/0x70
[  243.677098][    C0]  blk_done_softirq+0x10a/0x160
[  243.677113][    C0]  handle_softirqs+0x286/0x870
[  243.677126][    C0]  ? run_ksoftirqd+0x9b/0x100
[  243.677143][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  243.677155][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.677170][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.677178][    C0]  run_ksoftirqd+0x9b/0x100
[  243.677191][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  243.677207][    C0]  smpboot_thread_fn+0x542/0xa60
[  243.677218][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.677235][    C0]  kthread+0x711/0x8a0
[  243.677251][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  243.677262][    C0]  ? __pfx_kthread+0x10/0x10
[  243.677276][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  243.677288][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.677304][    C0]  ? __pfx_kthread+0x10/0x10
[  243.677317][    C0]  ret_from_fork+0x3fc/0x770
[  243.677331][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  243.677369][    C0]  ? __switch_to_asm+0x39/0x70
[  243.677390][    C0]  ? __switch_to_asm+0x33/0x70
[  243.677402][    C0]  ? __pfx_kthread+0x10/0x10
[  243.677413][    C0]  ret_from_fork_asm+0x1a/0x30
[  243.677433][    C0]  </TASK>
[  243.677438][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  243.759612][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  243.759631][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.759640][    C0] Call Trace:
[  243.759648][    C0]  <TASK>
[  243.759654][    C0]  dump_stack_lvl+0x189/0x250
[  243.759676][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.759690][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  243.759701][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  243.759716][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  243.759737][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  243.759758][    C0]  f2fs_write_end_io+0x886/0xb60
[  243.759781][    C0]  blk_update_request+0x57e/0xe60
[  243.759805][    C0]  blk_mq_end_request+0x3e/0x70
[  243.759819][    C0]  blk_done_softirq+0x10a/0x160
[  243.759835][    C0]  handle_softirqs+0x286/0x870
[  243.759851][    C0]  ? run_ksoftirqd+0x9b/0x100
[  243.759867][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  243.759881][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.759896][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.759906][    C0]  run_ksoftirqd+0x9b/0x100
[  243.759918][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  243.759935][    C0]  smpboot_thread_fn+0x542/0xa60
[  243.759947][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.759963][    C0]  kthread+0x711/0x8a0
[  243.759980][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  243.759991][    C0]  ? __pfx_kthread+0x10/0x10
[  243.760006][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  243.760020][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.760037][    C0]  ? __pfx_kthread+0x10/0x10
[  243.760051][    C0]  ret_from_fork+0x3fc/0x770
[  243.760066][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  243.760082][    C0]  ? __switch_to_asm+0x39/0x70
[  243.760096][    C0]  ? __switch_to_asm+0x33/0x70
[  243.760107][    C0]  ? __pfx_kthread+0x10/0x10
[  243.760120][    C0]  ret_from_fork_asm+0x1a/0x30
[  243.760144][    C0]  </TASK>
[  243.760149][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  243.838050][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  243.838068][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.838076][    C0] Call Trace:
[  243.838083][    C0]  <TASK>
[  243.838090][    C0]  dump_stack_lvl+0x189/0x250
[  243.838113][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.838127][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  243.838140][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  243.838157][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  243.838178][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  243.838201][    C0]  f2fs_write_end_io+0x886/0xb60
[  243.838224][    C0]  blk_update_request+0x57e/0xe60
[  243.838248][    C0]  blk_mq_end_request+0x3e/0x70
[  243.838263][    C0]  blk_done_softirq+0x10a/0x160
[  243.838277][    C0]  handle_softirqs+0x286/0x870
[  243.838292][    C0]  ? run_ksoftirqd+0x9b/0x100
[  243.838309][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  243.838322][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.838333][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.838371][    C0]  run_ksoftirqd+0x9b/0x100
[  243.838383][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  243.838398][    C0]  smpboot_thread_fn+0x542/0xa60
[  243.838411][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.838428][    C0]  kthread+0x711/0x8a0
[  243.838446][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  243.838457][    C0]  ? __pfx_kthread+0x10/0x10
[  243.838472][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  243.838487][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.838502][    C0]  ? __pfx_kthread+0x10/0x10
[  243.838516][    C0]  ret_from_fork+0x3fc/0x770
[  243.838531][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  243.838547][    C0]  ? __switch_to_asm+0x39/0x70
[  243.838560][    C0]  ? __switch_to_asm+0x33/0x70
[  243.838572][    C0]  ? __pfx_kthread+0x10/0x10
[  243.838587][    C0]  ret_from_fork_asm+0x1a/0x30
[  243.838610][    C0]  </TASK>
[  243.838616][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  243.909602][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  243.909613][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.909619][    C0] Call Trace:
[  243.909624][    C0]  <TASK>
[  243.909628][    C0]  dump_stack_lvl+0x189/0x250
[  243.909642][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.909650][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  243.909658][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  243.909668][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  243.909679][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  243.909693][    C0]  f2fs_write_end_io+0x886/0xb60
[  243.909705][    C0]  blk_update_request+0x57e/0xe60
[  243.909718][    C0]  blk_mq_end_request+0x3e/0x70
[  243.909726][    C0]  blk_done_softirq+0x10a/0x160
[  243.909736][    C0]  handle_softirqs+0x286/0x870
[  243.909744][    C0]  ? run_ksoftirqd+0x9b/0x100
[  243.909753][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  243.909760][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.909768][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.909773][    C0]  run_ksoftirqd+0x9b/0x100
[  243.909781][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  243.909790][    C0]  smpboot_thread_fn+0x542/0xa60
[  243.909797][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.909805][    C0]  kthread+0x711/0x8a0
[  243.909815][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  243.909821][    C0]  ? __pfx_kthread+0x10/0x10
[  243.909829][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  243.909836][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.909846][    C0]  ? __pfx_kthread+0x10/0x10
[  243.909853][    C0]  ret_from_fork+0x3fc/0x770
[  243.909862][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  243.909870][    C0]  ? __switch_to_asm+0x39/0x70
[  243.909877][    C0]  ? __switch_to_asm+0x33/0x70
[  243.909884][    C0]  ? __pfx_kthread+0x10/0x10
[  243.909892][    C0]  ret_from_fork_asm+0x1a/0x30
[  243.909905][    C0]  </TASK>
[  243.909908][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  243.985520][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  243.985539][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  243.985548][    C0] Call Trace:
[  243.985556][    C0]  <TASK>
[  243.985563][    C0]  dump_stack_lvl+0x189/0x250
[  243.985586][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.985601][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  243.985615][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  243.985632][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  243.985654][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  243.985676][    C0]  f2fs_write_end_io+0x886/0xb60
[  243.985700][    C0]  blk_update_request+0x57e/0xe60
[  243.985743][    C0]  blk_mq_end_request+0x3e/0x70
[  243.985759][    C0]  blk_done_softirq+0x10a/0x160
[  243.985775][    C0]  handle_softirqs+0x286/0x870
[  243.985791][    C0]  ? run_ksoftirqd+0x9b/0x100
[  243.985807][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  243.985821][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.985835][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.985845][    C0]  run_ksoftirqd+0x9b/0x100
[  243.985857][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  243.985873][    C0]  smpboot_thread_fn+0x542/0xa60
[  243.985885][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  243.985901][    C0]  kthread+0x711/0x8a0
[  243.985918][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  243.985929][    C0]  ? __pfx_kthread+0x10/0x10
[  243.985943][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  243.985957][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.985973][    C0]  ? __pfx_kthread+0x10/0x10
[  243.985987][    C0]  ret_from_fork+0x3fc/0x770
[  243.986003][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  243.986019][    C0]  ? __switch_to_asm+0x39/0x70
[  243.986032][    C0]  ? __switch_to_asm+0x33/0x70
[  243.986045][    C0]  ? __pfx_kthread+0x10/0x10
[  243.986059][    C0]  ret_from_fork_asm+0x1a/0x30
[  243.986084][    C0]  </TASK>
[  244.062935][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  244.066028][ T5849] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint
[  244.364799][T12076] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.368569][T12076] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.371741][T12076] bridge_slave_0: entered allmulticast mode
[  244.375601][T12076] bridge_slave_0: entered promiscuous mode
[  244.380838][T12076] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.383882][T12076] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.387809][T12076] bridge_slave_1: entered allmulticast mode
[  244.391645][T12076] bridge_slave_1: entered promiscuous mode
[  244.444460][ T5844] Bluetooth: hci0: command tx timeout
[  244.454245][T12076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.477032][T12076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.524616][T12138] ALSA: mixer_oss: invalid OSS volume ''
[  244.531615][T12138] ALSA: mixer_oss: invalid OSS volume 'RECLEV'
[  244.564613][T12076] team0: Port device team_slave_0 added
[  244.590393][T12076] team0: Port device team_slave_1 added
[  244.651906][T12143] loop0: detected capacity change from 0 to 512
[  244.660012][T12143] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  244.676956][T12143] EXT4-fs (loop0): orphan cleanup on readonly fs
[  244.679900][T12143] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.1822: Block bitmap for bg 0 marked uninitialized
[  244.692429][T12076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.697905][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.709055][T12143] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  244.713394][T12143] EXT4-fs (loop0): 1 orphan inode deleted
[  244.722374][T12076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.727957][T12143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  244.741514][T12076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.749097][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.762081][T12076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.820170][T12076] hsr_slave_0: entered promiscuous mode
[  244.823504][T12076] hsr_slave_1: entered promiscuous mode
[  244.826909][T12076] debugfs: 'hsr0' already exists in 'hsr'
[  244.829456][T12076] Cannot create hsr debugfs directory
[  244.919290][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'.
[  245.621025][T12076] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  245.682942][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.702108][T12076] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  245.732656][T12076] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  245.759906][T12076] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  245.891840][T12174] loop3: detected capacity change from 0 to 512
[  245.903272][T12174] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  245.939384][T12174] EXT4-fs (loop3): 1 truncate cleaned up
[  245.951993][T12174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.994029][T12174] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.1828: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  246.020255][T12076] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.036744][T12174] EXT4-fs (loop3): Remounting filesystem read-only
[  246.074109][T12076] 8021q: adding VLAN 0 to HW filter on device team0
[  246.096571][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.099534][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.103752][T12173] loop0: detected capacity change from 0 to 32768
[  246.115147][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.120531][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.123508][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.321569][T12173] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  246.321592][T12173]   allowing incompatible features above 0.0: (unknown version)
[  246.321600][T12173]   features: 
[  246.340387][T12173] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  246.343798][T12173] bcachefs (loop0): initializing new filesystem
[  246.361157][T12173] bcachefs (loop0): going read-write
[  246.380093][T12173] bcachefs (loop0): marking superblocks
[  246.382329][T12076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.411730][T12173] bcachefs (loop0): initializing freespace
[  246.423747][T12173] bcachefs (loop0): done initializing freespace
[  246.433210][T12173] bcachefs (loop0): reading snapshots table
[  246.443935][T12173] bcachefs (loop0): reading snapshots done
[  246.479478][T12173] bcachefs (loop0): done starting filesystem
[  246.506210][ T5844] Bluetooth: hci0: command tx timeout
[  246.612441][T12173] syz.0.1827 (12173) used greatest stack depth: 15768 bytes left
[  246.623517][ T5849] bcachefs (loop0): shutting down
[  246.629218][ T5849] bcachefs (loop0): going read-only
[  246.631014][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  246.691085][T12076] veth0_vlan: entered promiscuous mode
[  246.698964][T12076] veth1_vlan: entered promiscuous mode
[  246.734867][T12076] veth0_macvtap: entered promiscuous mode
[  246.751667][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  246.761012][T12076] veth1_macvtap: entered promiscuous mode
[  246.785519][T12076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.795197][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  246.797025][T12076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.801852][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 4
[  246.844077][ T5849] bcachefs (loop0): marking filesystem clean
[  246.903585][ T5868] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.935106][ T5706] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.994716][ T5868] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.043681][ T5706] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.144529][ T5849] bcachefs (loop0): shutdown complete
[  247.195895][ T7476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.199687][ T7476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.214277][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.219063][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.529080][   T33] audit: type=1804 audit(1756335972.449:47): pid=12226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1837" name="/newroot/2/file0" dev="tmpfs" ino=29 res=1 errno=0
[  247.753921][T12243] loop3: detected capacity change from 0 to 1024
[  247.757317][T12243] EXT4-fs: Ignoring removed orlov option
[  247.760071][T12243] EXT4-fs (loop3): Test dummy encryption mode enabled
[  247.773721][T12243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.820737][   T10] IPVS: starting estimator thread 0...
[  247.834317][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.907316][T12247] IPVS: using max 49 ests per chain, 117600 per kthread
[  247.980692][T12257] loop6: detected capacity change from 0 to 256
[  247.989433][T12257] vfat: Bad value for 'umask'
[  248.053989][T12262] sctp: [Deprecated]: syz.3.1853 (pid 12262) Use of int in max_burst socket option.
[  248.053989][T12262] Use struct sctp_assoc_value instead
[  248.140104][T12268] loop3: detected capacity change from 0 to 512
[  248.142714][T12268] EXT4-fs: Ignoring removed i_version option
[  248.159013][T12268] EXT4-fs (loop3): 1 truncate cleaned up
[  248.162121][T12268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.211634][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.495997][ T5880] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  248.525669][T12270] loop6: detected capacity change from 0 to 8
[  248.588532][ T5844] Bluetooth: hci0: command tx timeout
[  248.638092][T12276] netlink: 'syz.0.1834': attribute type 2 has an invalid length.
[  248.666168][ T5880] usb 4-1: Using ep0 maxpacket: 8
[  248.670213][ T5880] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  248.674057][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.694883][ T5880] usb 4-1: config 0 descriptor??
[  248.928549][ T5880] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  249.024962][T12278] loop0: detected capacity change from 0 to 32768
[  249.051419][T12278] read_mapping_page failed!
[  249.053561][T12278] ERROR: (device loop0): txCommit: 
[  249.053561][T12278] 
[  249.085075][  T116] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  249.089492][  T116] ------------[ cut here ]------------
[  249.091942][  T116] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  249.094395][  T116] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  249.097125][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  249.101822][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.106102][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  249.108253][  T116] Code: e5 fd 90 0f 0b e8 b1 21 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba a3 03 00 00 48 c7 c1 20 28 c4 8b e8 a2 15 e5 fd 90 <0f> 0b e8 8a 21 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba
[  249.116367][  T116] RSP: 0018:ffffc90001c4fbc8 EFLAGS: 00010246
[  249.118980][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 4c7e3da258442b00
[  249.122308][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  249.125712][  T116] RBP: ffffc90001fc31b8 R08: ffffc90001c4f8e7 R09: 1ffff92000389f1c
[  249.129017][  T116] R10: dffffc0000000000 R11: fffff52000389f1d R12: dffffc0000000000
[  249.132397][  T116] R13: 1ffff1102177ed6a R14: ffff88810bbf6b50 R15: 0000000000000000
[  249.135842][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  249.139637][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  249.142288][  T116] CR2: 00007f4cda856511 CR3: 0000000023b2e000 CR4: 00000000000006f0
[  249.145550][  T116] Call Trace:
[  249.146317][ T7978] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  249.146994][  T116]  <TASK>
[  249.151308][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.153587][  T116]  jfs_lazycommit+0x584/0xa90
[  249.155581][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  249.157807][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  249.160231][  T116]  ? __kthread_parkme+0x7b/0x200
[  249.162266][  T116]  ? __kthread_parkme+0x1a1/0x200
[  249.164393][  T116]  kthread+0x711/0x8a0
[  249.166114][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  249.168368][  T116]  ? __pfx_kthread+0x10/0x10
[  249.170258][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.172475][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.174639][  T116]  ? __pfx_kthread+0x10/0x10
[  249.176512][  T116]  ret_from_fork+0x3fc/0x770
[  249.178398][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  249.180497][  T116]  ? __switch_to_asm+0x39/0x70
[  249.182515][  T116]  ? __switch_to_asm+0x33/0x70
[  249.184522][  T116]  ? __pfx_kthread+0x10/0x10
[  249.186443][  T116]  ret_from_fork_asm+0x1a/0x30
[  249.188449][  T116]  </TASK>
[  249.189780][  T116] Modules linked in:
[  249.192247][  T116] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  249.206639][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  249.208910][  T116] Code: e5 fd 90 0f 0b e8 b1 21 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba a3 03 00 00 48 c7 c1 20 28 c4 8b e8 a2 15 e5 fd 90 <0f> 0b e8 8a 21 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba
[  249.226388][  T116] RSP: 0018:ffffc90001c4fbc8 EFLAGS: 00010246
[  249.229111][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 4c7e3da258442b00
[  249.232661][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  249.236915][  T116] RBP: ffffc90001fc31b8 R08: ffffc90001c4f8e7 R09: 1ffff92000389f1c
[  249.240295][  T116] R10: dffffc0000000000 R11: fffff52000389f1d R12: dffffc0000000000
[  249.243713][  T116] R13: 1ffff1102177ed6a R14: ffff88810bbf6b50 R15: 0000000000000000
[  249.256821][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  249.264987][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  249.275920][  T116] CR2: 00007f4cdd6e7d60 CR3: 000000010a9ea000 CR4: 00000000000006f0
[  249.279280][  T116] Kernel panic - not syncing: Fatal exception
[  249.282582][  T116] Kernel Offset: disabled
[  249.284389][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:53:24  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8dbdfd10 RBX=0000000000000000 RCX=fc7e41955bee0f00 RDX=ffff888021948440
RSI=ffffffff8be33660 RDI=ffffffff8be33620 RBP=ffffc90007547af8 RSP=ffffc90007547a00
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff8201b9d0
R12=dffffc0000000000 R13=1ffff92000ea8f48 R14=ffffffff8dbdfd10 R15=ffff888021948420
RIP=ffffffff81905bff RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f23420cac80 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558de065c8 CR3=00000001063a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff0000ff0000ff00 XMM01=2525252525252525 2525252525252525
XMM02=ffffffffffff0000 ffffffff00000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 ff0000000000ff00 XMM05=612d306466342d62 3065352d33613964
XMM06=306235346632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=00ffff00ffffffff ffffffffffffffff XMM09=6500003300000000 303a37622f623333
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90001c4f2d0
R8 =ffff8881071c0237 R9 =1ffff11020e38046 R10=dffffc0000000000 R11=ffffffff854f3ac0
R12=dffffc0000000000 R13=ffffffff99afa8db R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f3b3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4cda856511 CR3=0000000023b2e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=ff000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000031 0000000000000036
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffff00 XMM09=2e6364755f796d6d 75642f6364752f36
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
