last executing test programs:

50.621333428s ago: executing program 1 (id=202):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

49.945860081s ago: executing program 1 (id=207):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1}, &(0x7f0000000100)=0x8)

49.812198741s ago: executing program 1 (id=208):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9})

49.694201901s ago: executing program 1 (id=210):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x2004, 0x4}, 0x20)

49.594390179s ago: executing program 1 (id=211):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = open(&(0x7f0000000000)='.\x00', 0x80, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)

48.709340319s ago: executing program 1 (id=214):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES64=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
unshare(0x78000100)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
close(r6)
syz_genetlink_get_family_id$devlink(0x0, r1)
sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x40800)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
capset(0x0, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000040)={0x6, 0x6, 0x9, 0x7fffffff, 0xba, 0x9, 0x7, 0x7}, &(0x7f0000000100)={0x3, 0xfffffffffffffffa, 0xfffffffffffff000, 0x63, 0x14, 0x9, 0x10000, 0x4}, &(0x7f0000000180), 0x0)

33.673484774s ago: executing program 32 (id=214):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES64=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
unshare(0x78000100)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
close(r6)
syz_genetlink_get_family_id$devlink(0x0, r1)
sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x40800)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
capset(0x0, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000040)={0x6, 0x6, 0x9, 0x7fffffff, 0xba, 0x9, 0x7, 0x7}, &(0x7f0000000100)={0x3, 0xfffffffffffffffa, 0xfffffffffffff000, 0x63, 0x14, 0x9, 0x10000, 0x4}, &(0x7f0000000180), 0x0)

3.519959701s ago: executing program 3 (id=638):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

2.797829646s ago: executing program 2 (id=644):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x4002, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x7, 0x80000000004, 0x3ffffffffffd, 0x6, 0x200, 0xfffffffd, 0x1, 0x6000, 0x4000000, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0])

2.797439049s ago: executing program 2 (id=645):
capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040))
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

2.670864487s ago: executing program 2 (id=646):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0)
shmget(0x2, 0xc00000, 0x360, &(0x7f0000400000/0xc00000)=nil)
ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f00001859c0)={0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$pppoe(0x18, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0)
r6 = socket(0x6, 0x6, 0x9)
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)

1.728599717s ago: executing program 2 (id=649):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace(0x10, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)

1.536770316s ago: executing program 3 (id=650):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x20108c0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=0x0], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

789.082646ms ago: executing program 2 (id=652):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x3502, 0xa}, [@offload={0xc, 0x1c, {0x0, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0)

669.683379ms ago: executing program 3 (id=654):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_open_dev$loop(0x0, 0x7b, 0x42042)
preadv2(r1, &(0x7f00000019c0)=[{&(0x7f0000000640)=""/149, 0x95}], 0x1, 0xaad, 0x9, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0xc8)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x3}, 0x1c)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600c, 0x1)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10)
r5 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xd, 0x1, 0x8})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

575.196794ms ago: executing program 2 (id=655):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x2084811, 0x0, 0xf9, 0x0, &(0x7f0000000240))
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffa)
sendfile(r0, r0, 0x0, 0x800000009)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000480)='./file1\x00', 0x124681a, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRES16], 0xb, 0x0, &(0x7f00000000c0))

428.853906ms ago: executing program 0 (id=657):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socket$nl_route(0x10, 0x3, 0x0)

402.190013ms ago: executing program 3 (id=658):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)

340.223924ms ago: executing program 0 (id=659):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2a32}, 0x18)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30)

282.827015ms ago: executing program 0 (id=660):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'tunl0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}})

282.495641ms ago: executing program 3 (id=661):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d)

179.028487ms ago: executing program 3 (id=662):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_pwait2(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})

178.758125ms ago: executing program 0 (id=663):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000)

78.517059ms ago: executing program 0 (id=664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x10}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)

0s ago: executing program 0 (id=665):
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000400)='./bus\x00', 0xa10888, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x20400, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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")

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37361' (ED25519) to the list of known hosts.
syzkaller login: [   63.664812][ T5773] cgroup: Unknown subsys name 'net'
[   63.797413][ T5773] cgroup: Unknown subsys name 'cpuset'
[   63.803534][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.571381][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.450758][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.452807][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   76.606018][ T5910] chnl_net:caif_netlink_parms(): no params data found
[   76.758393][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.760684][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.763015][ T5910] bridge_slave_0: entered allmulticast mode
[   76.765760][ T5910] bridge_slave_0: entered promiscuous mode
[   76.771383][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.773677][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.776970][ T5910] bridge_slave_1: entered allmulticast mode
[   76.782099][ T5910] bridge_slave_1: entered promiscuous mode
[   76.803365][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.808293][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.826820][ T5910] team0: Port device team_slave_0 added
[   76.830300][ T5910] team0: Port device team_slave_1 added
[   76.849187][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.851372][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.860116][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.864832][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.866976][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.875281][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.902194][ T5910] hsr_slave_0: entered promiscuous mode
[   76.904555][ T5910] hsr_slave_1: entered promiscuous mode
[   77.004672][ T5910] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.010745][ T5910] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.015196][ T5910] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.019573][ T5910] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.042707][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.045765][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.049308][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.052130][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.086179][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.095309][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.098900][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.107020][ T5910] 8021q: adding VLAN 0 to HW filter on device team0
[   77.114603][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.117320][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.124178][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.126460][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.223308][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.250978][ T5910] veth0_vlan: entered promiscuous mode
[   77.256245][ T5910] veth1_vlan: entered promiscuous mode
[   77.273192][ T5910] veth0_macvtap: entered promiscuous mode
[   77.277158][ T5910] veth1_macvtap: entered promiscuous mode
[   77.287117][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.293687][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.302155][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.306270][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.309504][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.312642][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.345869][ T5910] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   80.401358][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.524332][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.530199][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.533410][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.538362][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.541692][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.557804][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.580243][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.585522][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.590823][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.601505][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.604948][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.605131][ T5961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.612680][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.618730][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.624669][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.905482][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.985868][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.995176][ T5956] chnl_net:caif_netlink_parms(): no params data found
[   81.065379][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.111046][ T5953] chnl_net:caif_netlink_parms(): no params data found
[   81.140915][ T5960] chnl_net:caif_netlink_parms(): no params data found
[   81.174651][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.178186][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.181372][ T5956] bridge_slave_0: entered allmulticast mode
[   81.185272][ T5956] bridge_slave_0: entered promiscuous mode
[   81.214204][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.216841][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.220342][ T5956] bridge_slave_1: entered allmulticast mode
[   81.224308][ T5956] bridge_slave_1: entered promiscuous mode
[   81.313085][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.352373][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.389766][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.392211][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.394935][ T5960] bridge_slave_0: entered allmulticast mode
[   81.398884][ T5960] bridge_slave_0: entered promiscuous mode
[   81.413292][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.416770][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.419941][ T5953] bridge_slave_0: entered allmulticast mode
[   81.423353][ T5953] bridge_slave_0: entered promiscuous mode
[   81.429821][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.434088][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.436902][ T5953] bridge_slave_1: entered allmulticast mode
[   81.440358][ T5953] bridge_slave_1: entered promiscuous mode
[   81.442976][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.445597][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.448620][ T5960] bridge_slave_1: entered allmulticast mode
[   81.452194][ T5960] bridge_slave_1: entered promiscuous mode
[   81.468336][ T5956] team0: Port device team_slave_0 added
[   81.473150][ T5956] team0: Port device team_slave_1 added
[   81.544449][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.548274][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.559069][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.564752][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.569299][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.579738][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.589766][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.594988][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.612233][   T12] bridge_slave_1: left allmulticast mode
[   81.614552][   T12] bridge_slave_1: left promiscuous mode
[   81.617697][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.624967][   T12] bridge_slave_0: left allmulticast mode
[   81.626803][   T12] bridge_slave_0: left promiscuous mode
[   81.630700][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.941110][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.946556][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.950969][   T12] bond0 (unregistering): Released all slaves
[   81.982115][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.036376][ T5956] hsr_slave_0: entered promiscuous mode
[   82.040410][ T5956] hsr_slave_1: entered promiscuous mode
[   82.046029][ T5956] debugfs: 'hsr0' already exists in 'hsr'
[   82.053731][ T5956] Cannot create hsr debugfs directory
[   82.061001][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.066671][ T5953] team0: Port device team_slave_0 added
[   82.081557][   T12] hsr_slave_0: left promiscuous mode
[   82.084185][   T12] hsr_slave_1: left promiscuous mode
[   82.088976][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.091935][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.095909][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.098925][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.109383][   T12] veth1_macvtap: left promiscuous mode
[   82.112012][   T12] veth0_macvtap: left promiscuous mode
[   82.113861][   T12] veth1_vlan: left promiscuous mode
[   82.115625][   T12] veth0_vlan: left promiscuous mode
[   82.416465][   T12] team0 (unregistering): Port device team_slave_1 removed
[   82.450630][   T12] team0 (unregistering): Port device team_slave_0 removed
[   82.611332][   T54] Bluetooth: hci1: command tx timeout
[   82.690657][   T54] Bluetooth: hci2: command tx timeout
[   82.690720][ T5955] Bluetooth: hci0: command tx timeout
[   82.792220][ T5953] team0: Port device team_slave_1 added
[   82.796296][ T5960] team0: Port device team_slave_0 added
[   82.824498][ T5960] team0: Port device team_slave_1 added
[   82.877847][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.880717][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.891875][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.946708][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.952457][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.962445][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.978454][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.981196][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.996235][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.000797][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.003436][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.027322][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.155009][ T5953] hsr_slave_0: entered promiscuous mode
[   83.158198][ T5953] hsr_slave_1: entered promiscuous mode
[   83.201764][ T5960] hsr_slave_0: entered promiscuous mode
[   83.204695][ T5960] hsr_slave_1: entered promiscuous mode
[   83.209104][ T5960] debugfs: 'hsr0' already exists in 'hsr'
[   83.211280][ T5960] Cannot create hsr debugfs directory
[   83.487584][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.506654][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.528623][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.536416][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.725949][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.773325][ T5956] 8021q: adding VLAN 0 to HW filter on device team0
[   83.814158][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.817339][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.822655][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.825460][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.896453][ T5960] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.911667][ T5960] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.944668][ T5960] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.961367][ T5960] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.124131][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.154643][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.175765][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.191055][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   84.248486][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.300925][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.356926][ T5960] 8021q: adding VLAN 0 to HW filter on device team0
[   84.383584][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.386633][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.392958][ T5956] veth0_vlan: entered promiscuous mode
[   84.411038][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.413973][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.425756][ T5956] veth1_vlan: entered promiscuous mode
[   84.512013][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.521727][ T5956] veth0_macvtap: entered promiscuous mode
[   84.529941][ T5956] veth1_macvtap: entered promiscuous mode
[   84.562095][ T5953] 8021q: adding VLAN 0 to HW filter on device team0
[   84.570434][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.576940][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.598585][ T5932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.602555][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.605387][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.619821][ T5932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.630268][ T5932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.633608][ T5932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.653120][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.656115][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.687815][ T5955] Bluetooth: hci1: command tx timeout
[   84.723076][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.766209][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.771599][ T5955] Bluetooth: hci2: command tx timeout
[   84.774020][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.778594][ T5955] Bluetooth: hci0: command tx timeout
[   84.830744][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.836269][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.851165][ T5960] veth0_vlan: entered promiscuous mode
[   84.878708][ T5960] veth1_vlan: entered promiscuous mode
[   84.955951][ T5960] veth0_macvtap: entered promiscuous mode
[   84.971580][ T5960] veth1_macvtap: entered promiscuous mode
[   84.990562][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.002244][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.021057][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.025158][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.042424][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.052941][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.124924][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.199648][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.210697][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.277833][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.294233][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.297520][ T5953] veth0_vlan: entered promiscuous mode
[   85.504350][ T5953] veth1_vlan: entered promiscuous mode
[   85.589049][ T5953] veth0_macvtap: entered promiscuous mode
[   85.601000][ T5953] veth1_macvtap: entered promiscuous mode
[   85.622954][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.641786][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.663799][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.673343][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.704810][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.721541][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.860272][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.862863][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.937493][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.944606][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.038021][ T6054] can0: slcan on ttyS3.
[   86.042310][ T6056] kAFS: unable to lookup cell '/'
[   86.069651][ T6058] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.115313][ T6061] netlink: 'syz.2.68': attribute type 30 has an invalid length.
[   86.118355][ T6054] can0 (unregistered): slcan off ttyS3.
[   86.233578][ T6064] netlink: 52 bytes leftover after parsing attributes in process `syz.1.69'.
[   86.259472][ T6061] Zero length message leads to an empty skb
[   86.282382][ T6068] ceph: No mds server is up or the cluster is laggy
[   86.286305][   T10] libceph: connect (1)[c::]:6789 error -101
[   86.307771][   T10] libceph: mon0 (1)[c::]:6789 connect error
[   86.574049][ T6083] loop1: detected capacity change from 0 to 2048
[   86.711082][  T794] cfg80211: failed to load regulatory.db
[   86.767933][ T5955] Bluetooth: hci1: command tx timeout
[   86.850785][   T54] Bluetooth: hci2: command tx timeout
[   86.852750][ T5955] Bluetooth: hci0: command tx timeout
[   87.448041][   T10] Process accounting resumed
[   87.456820][ T6107] loop0: detected capacity change from 0 to 512
[   87.462509][  T794] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   87.500544][ T6107] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.83: invalid indirect mapped block 27 (level 1)
[   87.508440][ T6107] EXT4-fs (loop0): Remounting filesystem read-only
[   87.512966][ T6107] EXT4-fs (loop0): 1 truncate cleaned up
[   87.518473][ T6107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.527039][ T6107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.648973][  T794] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[   87.664302][  T794] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[   87.676490][  T794] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[   87.686479][  T794] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[   87.717977][  T794] usb 2-1: Manufacturer: syz
[   87.729079][  T794] usb 2-1: SerialNumber: syz
[   87.839266][ T6119] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.87'.
[   87.952879][  T794] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[   87.992016][  T794] usb 2-1: USB disconnect, device number 2
[   88.060022][ T6127] loop2: detected capacity change from 0 to 256
[   88.063824][ T6127] =======================================================
[   88.063824][ T6127] WARNING: The mand mount option has been deprecated and
[   88.063824][ T6127]          and is ignored by this kernel. Remove the mand
[   88.063824][ T6127]          option from the mount to silence this warning.
[   88.063824][ T6127] =======================================================
[   88.124848][ T6127] FAT-fs (loop2): Directory bread(block 64) failed
[   88.129374][ T6127] FAT-fs (loop2): Directory bread(block 65) failed
[   88.132389][ T6127] FAT-fs (loop2): Directory bread(block 66) failed
[   88.135284][ T6127] FAT-fs (loop2): Directory bread(block 67) failed
[   88.139506][ T6127] FAT-fs (loop2): Directory bread(block 68) failed
[   88.143355][ T6127] FAT-fs (loop2): Directory bread(block 69) failed
[   88.146237][ T6127] FAT-fs (loop2): Directory bread(block 70) failed
[   88.151719][ T6127] FAT-fs (loop2): Directory bread(block 71) failed
[   88.154744][ T6127] FAT-fs (loop2): Directory bread(block 72) failed
[   88.157592][ T6127] FAT-fs (loop2): Directory bread(block 73) failed
[   88.847462][ T5955] Bluetooth: hci1: command tx timeout
[   88.927914][ T5955] Bluetooth: hci2: command tx timeout
[   90.055320][ T6149] loop0: detected capacity change from 0 to 128
[   90.309812][ T6154] netlink: 176 bytes leftover after parsing attributes in process `syz.2.103'.
[   90.856873][ T6157] netlink: 'syz.0.104': attribute type 27 has an invalid length.
[   91.136516][ T6159] loop2: detected capacity change from 0 to 2048
[   91.219556][ T6159] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   91.271987][ T6097] udevd[6097]: incorrect nilfs2 checksum on /dev/loop2
[   91.314410][ T6097] udevd[6097]: incorrect nilfs2 checksum on /dev/loop2
[   91.327718][ T6164] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.405026][ T6168] loop0: detected capacity change from 0 to 256
[   91.413777][ T6168] exfat: Deprecated parameter 'namecase'
[   91.416924][ T6168] exfat: Deprecated parameter 'utf8'
[   91.431942][ T6168] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[   91.434381][ T6159] syz.2.105 (6159) used greatest stack depth: 19528 bytes left
[   91.919700][ T6187] loop1: detected capacity change from 0 to 4096
[   91.938348][ T6187] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   92.047615][ T6187] ntfs3(loop1): ino=19, mi_enum_attr
[   92.050066][ T5955] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   92.053767][ T5955] Bluetooth: hci0: Injecting HCI hardware error event
[   92.058160][ T5955] Bluetooth: hci0: hardware error 0x00
[   92.067835][ T6187] ntfs3(loop1): ino=19, mi_enum_attr
[   92.069796][ T6187] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[   92.233140][  T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   92.388310][  T794] usb 1-1: Using ep0 maxpacket: 16
[   92.398238][  T794] usb 1-1: config 1 has an invalid interface number: 223 but max is 0
[   92.401697][  T794] usb 1-1: config 1 has no interface number 0
[   92.404403][  T794] usb 1-1: config 1 interface 223 has no altsetting 0
[   92.414638][  T794] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=42.53
[   92.418245][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.421137][  T794] usb 1-1: Product: syz
[   92.423057][  T794] usb 1-1: Manufacturer: syz
[   92.425001][  T794] usb 1-1: SerialNumber: syz
[   92.440815][  T794] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.223/input/input5
[   92.716071][ T5282] bcm5974 1-1:1.223: could not read from device
[   92.728123][ T5282] bcm5974 1-1:1.223: could not read from device
[   92.774282][ T5282] bcm5974 1-1:1.223: could not read from device
[   92.787079][  T794] usb 1-1: USB disconnect, device number 2
[   92.793652][ T5282] bcm5974 1-1:1.223: could not read from device
[   93.402305][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'.
[   93.406076][ T6211] netlink: 56 bytes leftover after parsing attributes in process `syz.0.127'.
[   93.411826][ T6211] netlink: 'syz.0.127': attribute type 10 has an invalid length.
[   93.857358][  T794] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   94.017373][  T794] usb 2-1: Using ep0 maxpacket: 16
[   94.021035][  T794] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[   94.024310][  T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.029168][  T794] usb 2-1: config 0 has no interface number 0
[   94.033878][  T794] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[   94.036781][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.039996][  T794] usb 2-1: Product: syz
[   94.041725][  T794] usb 2-1: Manufacturer: syz
[   94.043658][  T794] usb 2-1: SerialNumber: syz
[   94.048884][  T794] usb 2-1: config 0 descriptor??
[   94.054601][  T794] usb 2-1: Found UVC 0.00 device syz (046c:14e8)
[   94.057322][  T794] usb 2-1: No valid video chain found.
[   94.137377][ T5955] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   94.261446][   T97] usb 2-1: USB disconnect, device number 3
[   94.921752][ T6248] Bluetooth: MGMT ver 1.23
[   95.097338][   T97] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.251032][   T97] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   95.254750][   T97] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.276252][   T97] usb 2-1: config 0 descriptor??
[   95.302839][   T97] cp210x 2-1:0.0: cp210x converter detected
[   95.726260][   T97] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[   95.770036][   T97] usb 2-1: cp210x converter now attached to ttyUSB0
[   95.836715][ T6258] loop0: detected capacity change from 0 to 64
[   95.961605][  T794] usb 2-1: USB disconnect, device number 4
[   96.021357][  T794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   96.055629][  T794] cp210x 2-1:0.0: device disconnected
[   96.469246][   T97] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   96.519316][ T6262] loop2: detected capacity change from 0 to 4096
[   96.539966][ T6262] ntfs3(loop2): mft corrupted
[   96.542948][ T6262] ntfs3(loop2): Failed to load $Volume (-22).
[   96.647354][   T97] usb 1-1: config 0 has an invalid interface number: 130 but max is 0
[   96.650579][   T97] usb 1-1: config 0 has no interface number 0
[   96.653143][   T97] usb 1-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10
[   96.667349][   T97] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca
[   96.671139][   T97] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.692896][   T97] usb 1-1: config 0 descriptor??
[   96.709090][   T97] usb 1-1: Found UVC 0.00 device <unnamed> (8086:0b5b)
[   96.711821][   T97] usb 1-1: No valid video chain found.
[   96.744636][ T6270] loop2: detected capacity change from 0 to 4096
[   96.748278][ T6270] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   96.765231][ T6270] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[   96.902119][   T97] usb 1-1: USB disconnect, device number 3
[   97.067908][ T6286] loop2: detected capacity change from 0 to 8
[   97.076548][ T6286] SQUASHFS error: lzo decompression failed, data probably corrupt
[   97.080541][ T6286] SQUASHFS error: Failed to read block 0x91: -5
[   97.083579][ T6286] SQUASHFS error: Unable to read metadata cache entry [8f]
[   97.086670][ T6286] SQUASHFS error: Unable to read inode 0x11f
[   97.209668][ T6290] loop2: detected capacity change from 0 to 4096
[   97.214018][ T6290] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   97.220135][ T6290] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[   97.224391][ T6290] NILFS (loop2): mounting unchecked fs
[   97.230361][ T6290] NILFS (loop2): invalid segment: Checksum error in segment payload
[   97.233435][ T6290] NILFS (loop2): unable to fall back to spare super block
[   97.236328][ T6290] NILFS (loop2): error -22 while searching super root
[   97.322296][ T6292] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   97.461851][ T6299] loop0: detected capacity change from 0 to 512
[   97.469859][ T6299] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   97.490641][ T6299] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=00c2]
[   97.494332][ T6299] System zones: 0-2, 18-18, 34-34
[   97.496373][ T6299] EXT4-fs (loop0): orphan cleanup on readonly fs
[   97.501995][ T6299] EXT4-fs error (device loop0): ext4_quota_enable:7128: inode #15: comm syz.0.163: iget: bad i_size value: 360287970189639690
[   97.508034][ T6299] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.163: Bad quota inode: 15, type: 2
[   97.513418][ T6299] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[   97.520070][ T6299] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   97.522969][ T6299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   97.546522][ T6304] loop2: detected capacity change from 0 to 128
[   97.564362][ T6304] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.576840][ T6304] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   97.599119][ T5956] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.660524][ T5953] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.726111][ T6312] loop2: detected capacity change from 0 to 16
[   97.748270][ T6312] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   97.857100][ T6318] trusted_key: syz.1.171 sent an empty control message without MSG_MORE.
[   97.893530][ T6320] loop2: detected capacity change from 0 to 256
[   97.898583][ T6320] exfat: Deprecated parameter 'namecase'
[   97.902869][ T6320] exfat: Deprecated parameter 'utf8'
[   97.912420][ T6320] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[   97.945643][ T6323] loop0: detected capacity change from 0 to 16
[   97.949886][ T6323] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   98.548284][   T33] audit: type=1326 audit(1757958883.245:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.175" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b25d8eba9 code=0x0
[  100.001624][ T6358] loop2: detected capacity change from 0 to 4096
[  100.009978][ T6358] ntfs3(loop2): Failed to load $Volume (-22).
[  100.340279][ T6356] loop0: detected capacity change from 0 to 40427
[  100.368100][ T6356] F2FS-fs (loop0): invalid crc value
[  100.485414][ T6356] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  100.493678][ T6356] F2FS-fs (loop0): Start checkpoint disabled!
[  100.512300][ T6356] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  100.567462][   T33] audit: type=1800 audit(1757958885.425:3): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.188" name="file1" dev="loop0" ino=10 res=0 errno=0
[  100.683173][   T68] kworker/u10:2: attempt to access beyond end of device
[  100.683173][   T68] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  100.695985][   T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[  100.696007][   T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.696017][   T68] Workqueue: writeback wb_workfn (flush-7:0)
[  100.696043][   T68] Call Trace:
[  100.696051][   T68]  <TASK>
[  100.696058][   T68]  dump_stack_lvl+0x189/0x250
[  100.696089][   T68]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.696105][   T68]  ? __pfx_queue_work_on+0x10/0x10
[  100.696119][   T68]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  100.696139][   T68]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  100.696171][   T68]  f2fs_handle_critical_error+0x37c/0x540
[  100.696199][   T68]  f2fs_write_end_io+0x886/0xb60
[  100.696238][   T68]  __submit_merged_bio+0x27a/0x6a0
[  100.696265][   T68]  __submit_merged_write_cond+0x255/0x530
[  100.696292][   T68]  f2fs_write_data_pages+0x261d/0x3000
[  100.696347][   T68]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.696375][   T68]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  100.696390][   T68]  ? stack_trace_save+0x9c/0xe0
[  100.696456][   T68]  ? cpuacct_charge+0x117/0x320
[  100.696494][   T68]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.696508][   T68]  do_writepages+0x32e/0x550
[  100.696566][   T68]  ? reacquire_held_locks+0x127/0x1d0
[  100.696582][   T68]  ? writeback_sb_inodes+0x384/0x1010
[  100.696607][   T68]  __writeback_single_inode+0x145/0xff0
[  100.696624][   T68]  ? do_raw_spin_unlock+0x4d/0x240
[  100.696644][   T68]  writeback_sb_inodes+0x6c7/0x1010
[  100.696686][   T68]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  100.696742][   T68]  ? rcu_is_watching+0x15/0xb0
[  100.696766][   T68]  wb_writeback+0x43b/0xaf0
[  100.696789][   T68]  ? queue_io+0x351/0x590
[  100.696811][   T68]  ? __pfx_wb_writeback+0x10/0x10
[  100.696834][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.696859][   T68]  wb_workfn+0x409/0xef0
[  100.696889][   T68]  ? __pfx_wb_workfn+0x10/0x10
[  100.696909][   T68]  ? __lock_acquire+0xab9/0xd20
[  100.696938][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  100.696958][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.696976][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  100.696989][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  100.697005][   T68]  process_scheduled_works+0xae1/0x17b0
[  100.697047][   T68]  ? __pfx_process_scheduled_works+0x10/0x10
[  100.697078][   T68]  worker_thread+0x8a0/0xda0
[  100.697096][   T68]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  100.697124][   T68]  ? __kthread_parkme+0x7b/0x200
[  100.697148][   T68]  kthread+0x711/0x8a0
[  100.697169][   T68]  ? __pfx_worker_thread+0x10/0x10
[  100.697182][   T68]  ? __pfx_kthread+0x10/0x10
[  100.697226][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.697246][   T68]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.697259][   T68]  ? __pfx_kthread+0x10/0x10
[  100.697276][   T68]  ret_from_fork+0x439/0x7d0
[  100.697294][   T68]  ? __pfx_ret_from_fork+0x10/0x10
[  100.697314][   T68]  ? __switch_to_asm+0x39/0x70
[  100.697331][   T68]  ? __switch_to_asm+0x33/0x70
[  100.697346][   T68]  ? __pfx_kthread+0x10/0x10
[  100.697364][   T68]  ret_from_fork_asm+0x1a/0x30
[  100.697397][   T68]  </TASK>
[  100.809552][    C1] vkms_vblank_simulate: vblank timer overrun
[  100.827621][   T68] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  101.466672][ T6395] loop2: detected capacity change from 0 to 40427
[  101.622550][ T6395] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.628862][ T6395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  101.848694][ T5953] syz-executor: attempt to access beyond end of device
[  101.848694][ T5953] loop2: rw=2051, sector=77824, nr_sectors = 8 limit=40427
[  101.855392][ T5953] F2FS-fs (loop2): Issue discard(9728, 9728, 1) failed, ret: -5
[  102.513135][ T6418] loop2: detected capacity change from 0 to 4096
[  102.566300][ T6420] loop0: detected capacity change from 0 to 512
[  102.593434][ T6420] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  102.594929][ T6418] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  102.621951][ T6418] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  102.625847][ T6418] ntfs3(loop2): Failed to load $Extend (-22).
[  102.630507][ T6418] ntfs3(loop2): Failed to initialize $Extend.
[  102.631194][ T6420] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  102.654725][ T6420] FAT-fs (loop0): Filesystem has been set read-only
[  102.733531][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'.
[  102.800721][ T6427] pim6reg1: entered promiscuous mode
[  102.802552][ T6427] pim6reg1: entered allmulticast mode
[  103.160218][ T6434] loop2: detected capacity change from 0 to 512
[  103.178747][ T6434] EXT4-fs: Ignoring removed nobh option
[  103.235778][ T6434] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  103.272650][ T6434] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  103.279855][ T6434] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.220: casefold flag without casefold feature
[  103.308415][ T6434] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.220: couldn't read orphan inode 13 (err -117)
[  103.342899][ T6434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.499798][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.017424][  T794] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  105.182657][  T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.193501][  T794] usb 3-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79
[  105.197471][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.200692][  T794] usb 3-1: Product: syz
[  105.202448][  T794] usb 3-1: Manufacturer: syz
[  105.204291][  T794] usb 3-1: SerialNumber: syz
[  105.217980][  T794] usb 3-1: config 0 descriptor??
[  105.245075][  T794] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device.
[  105.440522][  T794] usb 3-1: USB disconnect, device number 2
[  106.199746][ T6479] loop2: detected capacity change from 0 to 256
[  106.338757][ T6483] tmpfs: Bad value for 'nr_inodes'
[  106.422736][ T6487] loop2: detected capacity change from 0 to 1024
[  106.603682][ T6494] loop2: detected capacity change from 0 to 65
[  106.620139][ T6494] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  106.829417][ T5834] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  106.980923][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.985417][ T5834] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  106.989259][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.995480][ T5834] usb 1-1: config 0 descriptor??
[  107.206171][ T5834] usbhid 1-1:0.0: can't add hid device: -71
[  107.208378][ T5834] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  107.212336][ T5834] usb 1-1: USB disconnect, device number 4
[  107.648169][ T5834] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  107.797366][ T5834] usb 1-1: Using ep0 maxpacket: 32
[  107.806093][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.810746][ T5834] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  107.814207][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.823607][ T5834] usb 1-1: config 0 descriptor??
[  107.835355][ T5834] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  107.855150][ T5834] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  107.961588][ T6509] loop2: detected capacity change from 0 to 512
[  107.989856][ T6509] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.249: bg 0: block 393: padding at end of block bitmap is not set
[  108.001319][ T6509] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  108.013769][ T6509] EXT4-fs (loop2): 2 truncates cleaned up
[  108.020358][ T6509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.041257][ T6509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  108.049153][ T6509] EXT4-fs (loop2): can't disable delalloc during remount
[  108.083412][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.308584][   T10] usb 1-1: USB disconnect, device number 5
[  108.316405][   T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  108.320693][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'.
[  108.598789][ T6532] loop2: detected capacity change from 0 to 1024
[  108.605734][ T6532] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.616984][ T6532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  108.620160][ T6532] System zones: 0-1, 3-36
[  108.624245][ T6532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.646743][ T6532] capability: warning: `syz.2.259' uses deprecated v2 capabilities in a way that may be insecure
[  108.684228][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.896591][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'.
[  109.019520][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'.
[  110.688948][   T97] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  110.837340][   T97] usb 1-1: Using ep0 maxpacket: 8
[  110.841316][   T97] usb 1-1: config 6 has an invalid interface number: 64 but max is 0
[  110.844374][   T97] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  110.848565][   T97] usb 1-1: config 6 has no interface number 0
[  110.851210][   T97] usb 1-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30
[  110.854475][   T97] usb 1-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[  110.862590][   T97] usb 1-1: config 6 interface 64 has no altsetting 0
[  110.867540][   T97] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  110.870627][   T97] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.873618][   T97] usb 1-1: Product: syz
[  110.875508][   T97] usb 1-1: Manufacturer: syz
[  110.878182][   T97] usb 1-1: SerialNumber: syz
[  111.087556][  T794] usb 1-1: USB disconnect, device number 6
[  111.208903][ T6573] loop2: detected capacity change from 0 to 512
[  111.213034][ T6573] EXT4-fs: Ignoring removed oldalloc option
[  111.226177][ T6573] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.275: dx entry: limit 1024 != root limit 124
[  111.234048][ T6573] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.275: Corrupt directory, running e2fsck is recommended
[  111.240070][ T6573] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  111.243734][ T6573] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.275: corrupted in-inode xattr: invalid ea_ino
[  111.250899][ T6573] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.275: couldn't read orphan inode 15 (err -117)
[  111.255764][ T6573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.275475][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.537368][   T97] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  111.697058][   T97] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.703980][   T97] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.710837][   T97] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  111.714379][   T97] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.721853][   T97] usb 3-1: config 0 descriptor??
[  112.100164][ T6588] loop0: detected capacity change from 0 to 32768
[  112.142558][   T97] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  112.148639][   T97] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  112.152702][   T97] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  112.155881][   T97] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  112.160356][   T97] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[  112.172856][   T97] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[  112.213437][ T6588] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names
[  112.213451][ T6588]   allowing incompatible features above 0.0: (unknown version)
[  112.213456][ T6588]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  112.226312][ T6588] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  112.229490][ T6588] bcachefs (loop0): recovering from clean shutdown, journal seq 14
[  112.233066][ T6588] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  112.233066][ T6588]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  112.261241][ T6588] bcachefs (loop0): accounting_read... done
[  112.265365][ T6588] bcachefs (loop0): alloc_read... done
[  112.267791][ T6588] bcachefs (loop0): snapshots_read... done
[  112.270450][ T6588] bcachefs (loop0): check_allocations...
[  112.272512][ T6588] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  112.272550][ T6588]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  112.285730][ T6588] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  112.285741][ T6588]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  112.296368][ T6588] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  112.296380][ T6588]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  112.305657][ T6588] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  112.305667][ T6588]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  112.314924][ T6588] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  112.314934][ T6588]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  112.325394][ T6588] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[  112.325405][ T6588]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  112.339007][ T6588]  done
[  112.342945][ T6588] bcachefs (loop0): going read-write
[  112.350903][ T6588] bcachefs (loop0): journal_replay... done
[  112.408017][ T6588] bcachefs (loop0): check_extents_to_backpointers...
[  112.409244][ T6588] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets
[  112.417009][ T6588]  done
[  112.421864][ T6588] bcachefs (loop0): check_inodes... done
[  112.425648][ T6588] bcachefs (loop0): resume_logged_ops... done
[  112.428971][ T6588] bcachefs (loop0): delete_dead_inodes... done
[  112.437059][ T6588] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[  112.440835][ T6588] bcachefs (loop0): check_extents_to_backpointers... done
[  112.445788][ T6588] bcachefs (loop0): check_inodes... done
[  112.449621][ T6588] bcachefs (loop0): resume_logged_ops... done
[  112.452961][ T6588] bcachefs (loop0): delete_dead_inodes... done
[  112.459611][ T6588] bcachefs (loop0): done starting filesystem
[  112.525979][   T33] audit: type=1804 audit(1757958897.405:4): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.281" name="/newroot/75/file1/file1" dev="loop0" ino=1073741824 res=1 errno=0
[  112.536574][ T6588] syz.0.281 (6588) used greatest stack depth: 15112 bytes left
[  112.576281][ T5956] bcachefs (loop0): shutting down
[  112.578771][ T5956] bcachefs (loop0): going read-only
[  112.581330][ T5956] bcachefs (loop0): finished waiting for writes to stop
[  112.590189][ T5956] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23
[  112.601171][ T5956] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24
[  112.609035][ T5956] bcachefs (loop0): clean shutdown complete, journal seq 25
[  112.612733][ T5956] bcachefs (loop0): marking filesystem clean
[  112.643891][ T5956] bcachefs (loop0): shutdown complete
[  112.744934][   T97] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 5: -71
[  112.750854][   T97] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense calibration info: -71
[  112.754600][   T97] playstation 0003:054C:0DF2.0001: Failed to get calibration data from DualSense
[  112.760115][   T97] playstation 0003:054C:0DF2.0001: Failed to create dualsense.
[  112.766086][   T97] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71
[  112.775644][   T97] usb 3-1: USB disconnect, device number 3
[  113.658426][ T6615] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  113.687719][ T6615] block device autoloading is deprecated and will be removed.
[  113.896897][ T6621] loop0: detected capacity change from 0 to 1024
[  113.940557][ T6621] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  113.947715][ T6621] hfsplus: xattr searching failed
[  114.112642][ T6625] Illegal XDP return value 4294967294 on prog  (id 25) dev N/A, expect packet loss!
[  114.353661][ T6629] netlink: 'syz.2.293': attribute type 8 has an invalid length.
[  114.437983][  T794] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  114.597344][  T794] usb 1-1: Using ep0 maxpacket: 16
[  114.603030][  T794] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.608284][  T794] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.614337][  T794] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  114.619872][  T794] usb 1-1: config 0 interface 0 has no altsetting 0
[  114.622144][  T794] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  114.625256][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.630228][  T794] usb 1-1: config 0 descriptor??
[  114.655764][ T6642] vlan2: entered allmulticast mode
[  114.658451][ T6642] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  115.045057][  T794] hid (null): usage index exceeded
[  115.052371][  T794] hid (null): invalid report_size 16762
[  115.254204][   T97] usb 1-1: USB disconnect, device number 7
[  115.673109][ T6678] loop2: detected capacity change from 0 to 512
[  115.678426][ T6678] EXT4-fs: Ignoring removed nomblk_io_submit option
[  115.681160][ T6678] EXT4-fs: Ignoring removed bh option
[  115.688619][ T6678] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  115.699557][ T6678] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  115.710942][ T6678] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #11: comm syz.2.315: corrupted inode contents
[  115.716452][ T6678] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #11: comm syz.2.315: mark_inode_dirty error
[  115.721600][ T6678] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.315: invalid indirect mapped block 1 (level 1)
[  115.728370][ T6678] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #11: comm syz.2.315: corrupted inode contents
[  115.737590][ T6678] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  115.741348][ T6678] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #11: comm syz.2.315: corrupted inode contents
[  115.746868][ T6678] EXT4-fs error (device loop2): ext4_truncate:4666: inode #11: comm syz.2.315: mark_inode_dirty error
[  115.752096][ T6678] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  115.755972][ T6678] EXT4-fs (loop2): 1 truncate cleaned up
[  115.760106][ T6678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.776932][ T6678] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.315: path /123/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  115.815469][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.529936][ T6715] loop0: detected capacity change from 0 to 4096
[  117.546027][ T6715] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  117.816551][ T6724] loop2: detected capacity change from 0 to 4096
[  117.854670][ T6724] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  117.858324][ T6728] loop0: detected capacity change from 0 to 128
[  117.865749][ T6724] ntfs3(loop2): $Volume is corrupted.
[  118.004061][ T6730] netlink: 'syz.2.340': attribute type 21 has an invalid length.
[  118.006969][ T6730] netlink: 128 bytes leftover after parsing attributes in process `syz.2.340'.
[  118.038555][ T6730] netlink: 'syz.2.340': attribute type 4 has an invalid length.
[  118.041556][ T6730] netlink: 3 bytes leftover after parsing attributes in process `syz.2.340'.
[  118.134836][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.143247][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.149054][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.161364][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.165268][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.452411][ T5735] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.499747][   T33] audit: type=1326 audit(1757958903.385:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.2.346" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f184418eba9 code=0x0
[  118.549144][ T5735] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.603225][ T6734] chnl_net:caif_netlink_parms(): no params data found
[  118.639289][ T5735] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.649465][ T6750] md0: using deprecated bitmap file support
[  118.695075][ T5735] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.761828][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.765241][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.770355][ T6734] bridge_slave_0: entered allmulticast mode
[  118.773969][ T6734] bridge_slave_0: entered promiscuous mode
[  118.777750][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.780994][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.783620][ T6734] bridge_slave_1: entered allmulticast mode
[  118.787541][ T6734] bridge_slave_1: entered promiscuous mode
[  118.816648][ T6734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.832046][ T6734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.886639][ T6734] team0: Port device team_slave_0 added
[  118.903164][ T6734] team0: Port device team_slave_1 added
[  118.919914][ T5735] bridge_slave_1: left allmulticast mode
[  118.922323][ T5735] bridge_slave_1: left promiscuous mode
[  118.924687][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.930331][ T5735] bridge_slave_0: left allmulticast mode
[  118.932374][ T5735] bridge_slave_0: left promiscuous mode
[  118.934748][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.241388][ T5735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.279304][ T5735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.291806][ T5735] bond0 (unregistering): Released all slaves
[  119.394237][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.419016][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.447483][ T6734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.512112][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.515010][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.526328][ T6734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.668752][ T6734] hsr_slave_0: entered promiscuous mode
[  119.672077][ T6734] hsr_slave_1: entered promiscuous mode
[  119.680585][ T6734] debugfs: 'hsr0' already exists in 'hsr'
[  119.683000][ T6734] Cannot create hsr debugfs directory
[  120.005204][ T5735] hsr_slave_0: left promiscuous mode
[  120.012312][ T5735] hsr_slave_1: left promiscuous mode
[  120.021359][ T5735] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.026336][ T5735] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.031490][ T5735] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.040164][ T5735] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.096210][ T5735] veth1_macvtap: left promiscuous mode
[  120.104862][ T5735] veth0_macvtap: left promiscuous mode
[  120.108481][ T5735] veth1_vlan: left promiscuous mode
[  120.112221][ T5735] veth0_vlan: left promiscuous mode
[  120.211438][ T5955] Bluetooth: hci2: command tx timeout
[  120.974655][ T6791] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  121.464190][ T5735] team0 (unregistering): Port device team_slave_1 removed
[  121.629469][ T5735] team0 (unregistering): Port device team_slave_0 removed
[  121.872014][ T6808] netlink: 'syz.2.365': attribute type 2 has an invalid length.
[  122.181723][ T6808] : entered promiscuous mode
[  122.288154][ T5955] Bluetooth: hci2: command tx timeout
[  122.498676][ T6734] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  122.519920][ T6734] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  122.532473][ T6734] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  122.754445][ T6734] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  122.939173][ T6827] loop0: detected capacity change from 0 to 32768
[  122.947082][ T6827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.369 (6827)
[  122.975984][ T6827] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.981920][ T6827] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  123.071923][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.093071][ T6734] 8021q: adding VLAN 0 to HW filter on device team0
[  123.103920][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.106883][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.141080][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.144139][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.179486][ T6827] BTRFS info (device loop0): rebuilding free space tree
[  123.265545][ T6827] BTRFS info (device loop0): checking UUID tree
[  123.280945][ T6827] BTRFS info (device loop0): enabling ssd optimizations
[  123.283790][ T6827] BTRFS info (device loop0): turning on async discard
[  123.286586][ T6827] BTRFS info (device loop0): enabling free space tree
[  123.307409][ T6827] BTRFS info (device loop0): force clearing of disk cache
[  123.310390][ T6827] BTRFS info (device loop0): force zstd compression, level 3
[  123.594509][ T6860] loop2: detected capacity change from 0 to 8192
[  123.641843][ T6734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.648365][ T5956] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.862666][ T6734] veth0_vlan: entered promiscuous mode
[  123.901232][ T6734] veth1_vlan: entered promiscuous mode
[  124.007645][ T6734] veth0_macvtap: entered promiscuous mode
[  124.007762][ T6873] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  124.033335][ T6734] veth1_macvtap: entered promiscuous mode
[  124.061010][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.073246][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.229093][ T5735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.238627][ T5735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.241638][ T5735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.256601][ T5735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.377466][ T5955] Bluetooth: hci2: command tx timeout
[  124.733744][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.745003][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.782633][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.786897][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.094730][ T6897] overlayfs: missing 'workdir'
[  125.319003][ T6889] loop0: detected capacity change from 0 to 32768
[  125.329660][ T6889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.376 (6889)
[  125.381011][ T6889] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.385292][ T6889] BTRFS info (device loop0 state S): using crc32c (crc32c-lib) checksum algorithm
[  125.431147][ T1092] BTRFS warning (device loop0 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x3a96e814 level 0, ignored
[  125.442053][ T6889] BTRFS error (device loop0 state S): devid 1 uuid ffe9ff7f-0000-0000-0000-9003f3eadbc4 is missing
[  125.446569][ T6889] BTRFS error (device loop0 state S): failed to read chunk tree: -2
[  125.478903][ T6889] BTRFS error (device loop0 state S): open_ctree failed: -2
[  125.751243][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'.
[  125.813629][   T33] audit: type=1326 audit(1757958910.695:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.3.391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51fef8eba9 code=0x7ffc0000
[  125.846087][ T6934] loop2: detected capacity change from 0 to 256
[  125.855597][   T33] audit: type=1326 audit(1757958910.715:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.3.391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51fef8eba9 code=0x7ffc0000
[  125.900521][   T33] audit: type=1326 audit(1757958910.725:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.3.391" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f51fef8eba9 code=0x7ffc0000
[  125.940556][   T33] audit: type=1326 audit(1757958910.725:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.3.391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51fef8eba9 code=0x7ffc0000
[  125.956749][   T33] audit: type=1326 audit(1757958910.725:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.3.391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51fef8eba9 code=0x7ffc0000
[  125.983007][ T6939] loop3: detected capacity change from 0 to 8
[  126.005516][ T6939] SQUASHFS error: zlib decompression failed, data probably corrupt
[  126.008599][   T33] audit: type=1326 audit(1757958910.725:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.3.391" exe="/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f51fef8eba9 code=0x7ffc0000
[  126.021509][ T6939] SQUASHFS error: Failed to read block 0x9b: -5
[  126.023605][ T6939] SQUASHFS error: Unable to read metadata cache entry [99]
[  126.025714][ T6939] SQUASHFS error: Unable to read inode 0x127
[  126.035348][   T33] audit: type=1326 audit(1757958910.735:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.3.391" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51fef8eba9 code=0x7ffc0000
[  126.120343][ T6946] loop0: detected capacity change from 0 to 1024
[  126.196064][   T36] hfsplus: b-tree write err: -5, ino 4
[  126.329779][ T6960] loop0: detected capacity change from 0 to 256
[  126.345941][ T6960] FAT-fs (loop0): Directory bread(block 64) failed
[  126.357788][ T6960] FAT-fs (loop0): Directory bread(block 65) failed
[  126.364433][ T6960] FAT-fs (loop0): Directory bread(block 66) failed
[  126.366651][ T6960] FAT-fs (loop0): Directory bread(block 67) failed
[  126.379472][ T6960] FAT-fs (loop0): Directory bread(block 68) failed
[  126.382511][ T6960] FAT-fs (loop0): Directory bread(block 69) failed
[  126.385449][ T6960] FAT-fs (loop0): Directory bread(block 70) failed
[  126.389869][ T6960] FAT-fs (loop0): Directory bread(block 71) failed
[  126.392670][ T6960] FAT-fs (loop0): Directory bread(block 72) failed
[  126.395068][ T6960] FAT-fs (loop0): Directory bread(block 73) failed
[  126.437421][ T5949] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  126.459591][ T5955] Bluetooth: hci2: command tx timeout
[  126.531369][ T6953] loop3: detected capacity change from 0 to 32768
[  126.557767][ T6953] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.399 (6953)
[  126.576992][ T6953] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.585726][ T6953] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  126.594112][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  126.607708][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.611563][ T5949] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  126.614984][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.637952][ T5949] usb 3-1: config 0 descriptor??
[  126.719841][ T6953] BTRFS info (device loop3): enabling ssd optimizations
[  126.722171][ T6953] BTRFS info (device loop3): enabling free space tree
[  126.772333][ T6734] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  127.079417][ T5949] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0
[  127.086923][ T5949] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised
[  127.092743][ T5949] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero RNG initialised
[  127.263020][   T24] usb 3-1: USB disconnect, device number 4
[  127.437560][ T6990] sg_write: data in/out 852092/1 bytes for SCSI command 0x1c-- guessing data in;
[  127.437560][ T6990]    program syz.3.407 not setting count and/or reply_len properly
[  127.720395][ T6992] loop0: detected capacity change from 0 to 4096
[  127.726729][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  127.730794][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  127.734020][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  127.740280][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  127.743508][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00
[  127.746816][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00
[  127.753138][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00
[  127.756172][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00
[  127.759820][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00
[  127.763198][ T6992] ntfs3(loop0): try to read out of volume at offset 0x3fffffe0c00
[  127.830342][ T6994] capability: warning: `syz.2.410' uses 32-bit capabilities (legacy support in use)
[  127.902238][ T6998] loop2: detected capacity change from 0 to 256
[  127.927834][ T6998] MINIX-fs: file system does not have enough imap blocks allocated.  Refusing to mount.
[  127.936517][ T6998] MINIX-fs: bad superblock or unable to read bitmaps
[  127.943167][ T7000] loop0: detected capacity change from 0 to 4096
[  127.958137][ T7000] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  127.961443][ T7000] ntfs3(loop0): It is recommened to use chkdsk.
[  128.004919][ T7000] ntfs3(loop0): failed to convert "076c" to iso8859-1
[  128.207647][ T7004] loop2: detected capacity change from 0 to 2048
[  128.247061][    T9] IPVS: starting estimator thread 0...
[  128.256679][ T7004] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  128.265554][ T7004] UDF-fs: Scanning with blocksize 512 failed
[  128.309114][ T7004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.339878][ T7009] IPVS: using max 37 ests per chain, 88800 per kthread
[  128.349352][ T7004] overlayfs: conflicting options: userxattr,redirect_dir=on
[  128.687998][ T5949] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  128.708832][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  128.859369][ T5949] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  128.862992][ T5949] usb 1-1: config 0 has no interface number 0
[  128.867424][   T24] usb 3-1: Using ep0 maxpacket: 8
[  128.871670][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  128.876109][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  128.881478][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  128.890955][ T5949] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  128.894889][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.898388][ T5949] usb 1-1: Product: syz
[  128.900378][ T5949] usb 1-1: Manufacturer: syz
[  128.903168][ T5949] usb 1-1: SerialNumber: syz
[  128.906183][   T24] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  128.910232][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.913445][   T24] usb 3-1: Product: syz
[  128.915151][   T24] usb 3-1: Manufacturer: syz
[  128.917032][   T24] usb 3-1: SerialNumber: syz
[  128.923058][ T5949] usb 1-1: config 0 descriptor??
[  128.940811][   T24] usb 3-1: config 0 descriptor??
[  128.960264][   T24] imon_raw 3-1:0.0: IR endpoint missing
[  129.009790][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'.
[  129.161477][   T24] usb 3-1: USB disconnect, device number 5
[  129.303482][ T7038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.430'.
[  129.336983][ T5949] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  129.341947][ T5949] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  129.346833][ T5949] asix 1-1:0.251: probe with driver asix failed with error -5
[  129.354574][ T5949] usb 1-1: USB disconnect, device number 8
[  129.498205][ T7042] loop3: detected capacity change from 0 to 8192
[  129.730008][ T7045] netlink: 48 bytes leftover after parsing attributes in process `syz.3.433'.
[  130.571462][ T7074] loop0: detected capacity change from 0 to 512
[  130.577690][ T7074] EXT4-fs: Ignoring removed nobh option
[  130.586491][ T7074] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  130.666816][ T7074] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.446: iget: bad i_size value: 38620345925642
[  130.688542][ T7074] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.446: couldn't read orphan inode 15 (err -117)
[  130.704430][ T7074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.768623][   T32] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u9:1: bg 0: block 5: invalid block bitmap
[  130.802755][   T32] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  130.823323][   T32] EXT4-fs (loop0): This should not happen!! Data will be lost
[  130.823323][   T32] 
[  130.831801][   T32] EXT4-fs (loop0): Total free blocks count 0
[  130.834289][   T32] EXT4-fs (loop0): Free/Dirty block details
[  130.836719][   T32] EXT4-fs (loop0): free_blocks=0
[  130.843138][   T32] EXT4-fs (loop0): dirty_blocks=1
[  130.845984][   T32] EXT4-fs (loop0): Block reservation details
[  130.850075][   T32] EXT4-fs (loop0): i_reserved_data_blocks=1
[  130.855275][ T5956] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.855647][ T7084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.075777][ T7081] loop3: detected capacity change from 0 to 32768
[  131.089890][ T7081] XFS: noikeep mount option is deprecated.
[  131.141292][ T7081] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.181771][ T7081] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  131.191867][ T7081] XFS (loop3): Starting recovery (logdev: internal)
[  131.216609][ T7081] XFS (loop3): Ending recovery (logdev: internal)
[  131.235305][ T6734] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.338873][ T7092] loop2: detected capacity change from 0 to 32768
[  131.396477][ T7100] loop0: detected capacity change from 0 to 32768
[  131.486301][ T7100] JBD2: Ignoring recovery information on journal
[  131.527044][ T7092] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  131.527060][ T7092]   allowing incompatible features above 0.0: (unknown version)
[  131.527065][ T7092]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  131.563679][ T7092] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  131.566584][ T7092] bcachefs (loop2): initializing new filesystem
[  131.570601][ T7100] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  131.603332][ T7092] bcachefs (loop2): going read-write
[  131.623411][ T7092] bcachefs (loop2): marking superblocks
[  131.655392][ T7092] bcachefs (loop2): initializing freespace
[  131.685842][ T7092] bcachefs (loop2): done initializing freespace
[  131.695247][ T7092] bcachefs (loop2): reading snapshots table
[  131.700690][ T7092] bcachefs (loop2): reading snapshots done
[  131.701640][ T5956] ocfs2: Unmounting device (7,0) on (node local)
[  131.768768][ T7092] bcachefs (loop2): done starting filesystem
[  131.991202][ T5953] bcachefs (loop2): shutting down
[  131.993229][ T5953] bcachefs (loop2): going read-only
[  131.995098][ T5953] bcachefs (loop2): finished waiting for writes to stop
[  132.006162][ T5953] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  132.028498][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  132.086185][ T5953] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  132.100888][ T5953] bcachefs (loop2): clean shutdown complete, journal seq 4
[  132.104659][ T5953] bcachefs (loop2): marking filesystem clean
[  132.134415][ T5953] bcachefs (loop2): shutdown complete
[  132.197873][    T9] usb 4-1: Using ep0 maxpacket: 8
[  132.202025][    T9] usb 4-1: config 0 has an invalid interface number: 252 but max is 0
[  132.205211][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.210801][    T9] usb 4-1: config 0 has no interface number 0
[  132.215965][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f0.28
[  132.220515][    T9] usb 4-1: New USB device strings: Mfr=244, Product=1, SerialNumber=3
[  132.225052][    T9] usb 4-1: Product: syz
[  132.226892][    T9] usb 4-1: Manufacturer: syz
[  132.229351][    T9] usb 4-1: SerialNumber: syz
[  132.234634][    T9] usb 4-1: config 0 descriptor??
[  132.450749][    T9] usb 4-1: USB disconnect, device number 2
[  133.058520][ T7139] veth1_to_team: entered promiscuous mode
[  133.078187][ T7139] veth1_to_team: left promiscuous mode
[  133.307118][ T7152] loop0: detected capacity change from 0 to 4096
[  133.342378][ T7155] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.700302][ T7163] openvswitch: netlink: IPv4 tun info is not correct
[  133.820104][ T7171] netlink: 'syz.0.478': attribute type 11 has an invalid length.
[  134.118360][ T7173] loop0: detected capacity change from 0 to 32768
[  134.173180][   T33] audit: type=1800 audit(1757958919.055:13): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.479" name="file1" dev="loop0" ino=4 res=0 errno=0
[  134.209537][ T7173] syz.0.479: attempt to access beyond end of device
[  134.209537][ T7173] loop0: rw=34817, sector=2622464, nr_sectors = 832 limit=32768
[  134.233861][  T119] blkno = 50080, nblocks = 68
[  134.235980][  T119] ERROR: (device loop0): dbFree: block to be freed is outside the map
[  134.235980][  T119] 
[  134.241434][  T119] ERROR: (device loop0): remounting filesystem as read-only
[  134.582385][ T7194] loop2: detected capacity change from 0 to 2048
[  134.589979][ T7194] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  134.595799][ T7194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.742217][ T7198] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  134.781700][   T10] kernel write not supported for file /uhid (pid: 10 comm: kworker/0:1)
[  135.069286][ T7196] loop2: detected capacity change from 0 to 32768
[  135.102301][ T7214] netlink: 'syz.3.498': attribute type 1 has an invalid length.
[  135.113551][ T7196] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  135.156631][ T7214] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.203720][ T5953] ocfs2: Unmounting device (7,2) on (node local)
[  135.240638][ T7218] bond1: (slave gretap1): making interface the new active one
[  135.263032][ T7218] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  135.400877][ T7227] loop2: detected capacity change from 0 to 512
[  135.406736][ T7227] EXT4-fs (loop2): Test dummy encryption mode enabled
[  135.413496][ T7227] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  135.433755][ T7224] loop0: detected capacity change from 0 to 4096
[  135.435887][ T7227] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.501: bad orphan inode 131083
[  135.452804][ T7227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.460428][ T7231] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.493488][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.496497][ T7224] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  135.530832][ T7224] Remounting filesystem read-only
[  135.638137][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  135.659753][ T7235] process 'syz.0.506' launched '/dev/fd/3' with NULL argv: empty string added
[  135.798984][   T24] usb 4-1: Using ep0 maxpacket: 32
[  135.804238][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  135.818287][   T24] usb 4-1: config 7 has an invalid interface number: 187 but max is 0
[  135.830369][   T24] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  135.843150][   T24] usb 4-1: config 7 has no interface number 0
[  135.847459][   T24] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0
[  135.859063][   T24] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 0
[  135.863400][   T24] usb 4-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  135.887907][   T24] usb 4-1: config 7 interface 187 has no altsetting 0
[  135.893274][   T24] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  135.901086][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.927670][   T24] usb 4-1: Product: syz
[  135.929767][   T24] usb 4-1: Manufacturer: syz
[  135.937369][   T24] usb 4-1: SerialNumber: syz
[  136.053926][ T7233] loop2: detected capacity change from 0 to 40427
[  136.065398][ T7233] F2FS-fs: heap/no_heap options were deprecated
[  136.085713][ T7233] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3)
[  136.099773][ T7233] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  136.118521][ T7233] F2FS-fs (loop2): invalid crc value
[  136.171351][   T24] usb 4-1: Not enough endpoints found in device, aborting!
[  136.215948][ T7233] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  136.225114][ T7233] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  136.227950][ T7233] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  136.394546][   T10] usb 4-1: USB disconnect, device number 3
[  136.405535][    T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  136.571836][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.575746][    T9] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  136.592177][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.620698][    T9] usb 1-1: config 0 descriptor??
[  137.047074][    T9] pantherlord 0003:0810:0001.0004: unknown main item tag 0x0
[  137.059898][    T9] pantherlord 0003:0810:0001.0004: unknown main item tag 0x0
[  137.066996][    T9] pantherlord 0003:0810:0001.0004: hidraw0: USB HID v0.03 Device [HID 0810:0001] on usb-dummy_hcd.0-1/input0
[  137.077297][    T9] pantherlord 0003:0810:0001.0004: no output reports found
[  137.256640][    T9] usb 1-1: USB disconnect, device number 9
[  137.286291][ T7293] loop3: detected capacity change from 0 to 128
[  137.293984][ T7293] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  137.590459][ T7306] syz.2.527 uses obsolete (PF_INET,SOCK_PACKET)
[  137.754363][ T7314] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  137.827347][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  137.864757][ T7318] tipc: Started in network mode
[  137.867164][ T7318] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  137.876421][ T7318] tipc: Enabled bearer <udp:syz0>, priority 10
[  137.891738][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  137.894288][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  138.019071][   T24] usb 4-1: Using ep0 maxpacket: 16
[  138.026020][   T24] usb 4-1: config 254 has an invalid interface number: 235 but max is 0
[  138.031592][   T24] usb 4-1: config 254 has no interface number 0
[  138.033704][   T24] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  138.037682][   T24] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  138.041537][   T24] usb 4-1: config 254 interface 235 has no altsetting 0
[  138.046242][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  138.050254][   T24] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[  138.053657][   T24] usb 4-1: Product: syz
[  138.055156][   T24] usb 4-1: Manufacturer: syz
[  138.056521][   T24] usb 4-1: SerialNumber: syz
[  138.067964][ T7305] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  138.072466][   T24] usbtest 4-1:254.235: couldn't get endpoints, -22
[  138.074857][   T24] usbtest 4-1:254.235: probe with driver usbtest failed with error -22
[  138.130614][ T7316] loop0: detected capacity change from 0 to 32768
[  138.135263][ T7316] bcachefs (/dev/loop0): error validating superblock: Bad dev_idx (got 5, nr_devices 1)
[  138.139622][ T7316] bcachefs: bch2_fs_get_tree() error: invalid_sb_dev_idx
[  138.237777][  T794] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  138.305676][   T24] usb 4-1: USB disconnect, device number 4
[  138.408753][ T7330] syz_tun: entered allmulticast mode
[  138.417516][  T794] usb 3-1: Using ep0 maxpacket: 8
[  138.423576][  T794] usb 3-1: unable to get BOS descriptor or descriptor too short
[  138.433189][  T794] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.444291][  T794] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.457372][  T794] usb 3-1: config 1 interface 0 has no altsetting 0
[  138.464784][  T794] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.40
[  138.471527][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.474970][  T794] usb 3-1: Product: syz
[  138.476661][  T794] usb 3-1: Manufacturer: syz
[  138.483217][  T794] usb 3-1: SerialNumber: syz
[  138.560983][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.566315][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.743460][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.762491][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.870883][    T9] tipc: Node number set to 4269801491
[  138.971633][ T7337] tmpfs: Bad value for 'mpol'
[  139.076152][ T5983] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.083674][ T5983] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.110201][ T5983] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.113639][ T5983] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.772933][  T794] hid (null): invalid report_count 58840
[  139.788618][  T794] uclogic 0003:28BD:0078.0005: interface is invalid, ignoring
[  139.796344][  T794] usb 3-1: USB disconnect, device number 6
[  140.112447][ T7357] bond0: (slave bond_slave_1): Releasing backup interface
[  140.221316][ T7364] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004
[  140.284142][ T7368] loop3: detected capacity change from 0 to 512
[  140.295693][ T7368] EXT4-fs: Ignoring removed i_version option
[  140.306531][ T7368] EXT4-fs: Ignoring removed nobh option
[  140.313158][ T7368] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  140.326865][ T7368] EXT4-fs (loop3): 1 truncate cleaned up
[  140.333558][ T7368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.419375][ T6734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.898768][ T7403] loop3: detected capacity change from 0 to 1024
[  140.916549][ T7403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0003]
[  140.923498][ T7403] System zones: 1-12
[  140.932367][ T7403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.164384][ T6734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.686559][ T7428] loop2: detected capacity change from 0 to 32768
[  141.691206][ T7428] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.577 (7428)
[  141.724620][ T7428] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  141.734672][ T7428] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  141.824856][ T7428] BTRFS info (device loop2): enabling ssd optimizations
[  141.831646][ T7428] BTRFS info (device loop2): enabling free space tree
[  142.062654][ T5953] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  142.225765][ T7470] loop2: detected capacity change from 0 to 1024
[  142.615492][ T7474] loop2: detected capacity change from 0 to 32768
[  142.625023][ T7474] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  142.886500][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'.
[  142.903556][ T7493] loop0: detected capacity change from 0 to 256
[  143.093508][ T7506] loop0: detected capacity change from 0 to 512
[  143.096995][ T7506] EXT4-fs: Ignoring removed orlov option
[  143.109759][ T7506] EXT4-fs (loop0): Test dummy encryption mode enabled
[  143.112407][ T7506] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size
[  143.189746][ T7510] loop3: detected capacity change from 0 to 128
[  143.661416][ T7517] loop0: detected capacity change from 0 to 32768
[  144.160758][ T7533] loop2: detected capacity change from 0 to 128
[  144.380470][ T7537] loop2: detected capacity change from 0 to 512
[  144.388082][ T7537] EXT4-fs (loop2): orphan cleanup on readonly fs
[  144.391015][ T7537] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.615: iget: bad extended attribute block 1
[  144.396477][ T7537] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.615: couldn't read orphan inode 15 (err -117)
[  144.405697][ T7537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  144.452114][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.040310][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'.
[  145.769098][ T7566] loop2: detected capacity change from 0 to 32768
[  145.865126][ T7566] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,norecovery,nojournal_transaction_names,noexcl,read_only,nocow
[  145.865147][ T7566]   allowing incompatible features above 0.0: (unknown version)
[  145.865156][ T7566]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  145.882692][ T7566] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  145.886160][ T7566] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  145.898331][ T7566] bcachefs (loop2): Version upgrade required:
[  145.898331][ T7566] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  145.898331][ T7566] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  145.898331][ T7566]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  145.950430][ T7568] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  146.001539][ T7566] bcachefs (loop2): accounting_read... done
[  146.058065][ T7566] bcachefs (loop2): alloc_read... done
[  146.060432][ T7566] bcachefs (loop2): snapshots_read... done
[  146.063023][ T7566] bcachefs (loop2): done starting filesystem
[  146.127959][ T5953] bcachefs (loop2): shutting down
[  146.161960][ T7578] loop0: detected capacity change from 0 to 8192
[  146.185832][ T5953] bcachefs (loop2): shutdown complete
[  146.330360][ T7581] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  146.333888][ T7581] FAT-fs (loop0): Filesystem has been set read-only
[  146.356257][ T7578] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[  146.363250][ T7578] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[  146.367017][ T7578] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2075)
[  147.765600][ T7596] loop0: detected capacity change from 0 to 1024
[  147.770364][ T7596] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.778219][ T7596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  147.781668][ T7596] System zones: 0-1, 3-36
[  147.790015][ T7596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.818491][ T5956] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.882549][ T7604] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.640'.
[  148.048033][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  148.157365][  T794] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  148.207399][    T9] usb 4-1: Using ep0 maxpacket: 8
[  148.216754][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  148.222123][    T9] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  148.225008][    T9] usb 4-1: Product: syz
[  148.226729][    T9] usb 4-1: Manufacturer: syz
[  148.232669][    T9] usb 4-1: SerialNumber: syz
[  148.237584][    T9] usb 4-1: config 0 descriptor??
[  148.243565][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  148.309935][  T794] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  148.314254][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.320839][  T794] usb 1-1: config 0 descriptor??
[  148.325290][  T794] cp210x 1-1:0.0: cp210x converter detected
[  148.536258][  T794] usb 1-1: cp210x converter now attached to ttyUSB0
[  148.738899][   T24] usb 1-1: USB disconnect, device number 10
[  148.743536][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  148.751608][   T24] cp210x 1-1:0.0: device disconnected
[  149.220125][    T9] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[  149.252867][    T9] usb 4-1: USB disconnect, device number 5
[  149.350312][ T7634] overlay: Unknown parameter '\'
[  149.735701][ T7636] loop0: detected capacity change from 0 to 32768
[  149.773187][ T7636] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  150.178250][ T7636] XFS (loop0): Ending clean mount
[  150.189360][ T7636] XFS (loop0): Quotacheck needed: Please wait.
[  150.239595][ T7636] XFS (loop0): Quotacheck: Done.
[  150.295318][ T5956] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  150.428840][ T7647] loop3: detected capacity change from 0 to 32768
[  150.572268][ T7656] loop0: detected capacity change from 0 to 1024
[  150.648755][ T7658] syz.0.653: attempt to access beyond end of device
[  150.648755][ T7658] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  150.968185][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'.
[  150.979637][ T7670] IPVS: Error connecting to the multicast addr
[  151.194611][ T7660] loop2: detected capacity change from 0 to 32768
[  151.208663][ T7660] (syz.2.655,7660,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.260227][ T7660] (syz.2.655,7660,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.289187][ T7660] JBD2: Ignoring recovery information on journal
[  151.326445][ T7660] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  151.543441][ T7660] 
[  151.544590][ T7660] ======================================================
[  151.547575][ T7660] WARNING: possible circular locking dependency detected
[  151.550484][ T7660] syzkaller #0 Not tainted
[  151.552393][ T7660] ------------------------------------------------------
[  151.556134][ T7660] syz.2.655/7660 is trying to acquire lock:
[  151.558413][ T7660] ffff88802938a618 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x455/0xb30
[  151.562634][ T7660] 
[  151.562634][ T7660] but task is already holding lock:
[  151.565667][ T7660] ffff8881037ab1e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  151.570046][ T7660] 
[  151.570046][ T7660] which lock already depends on the new lock.
[  151.570046][ T7660] 
[  151.574135][ T7660] 
[  151.574135][ T7660] the existing dependency chain (in reverse order) is:
[  151.577856][ T7660] 
[  151.577856][ T7660] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  151.581539][ T7660]        lock_acquire+0x120/0x360
[  151.583565][ T7660]        down_write+0x96/0x1f0
[  151.585400][ T7660]        ocfs2_lock_global_qf+0x1e8/0x270
[  151.587597][ T7660]        ocfs2_acquire_dquot+0x2b0/0xb30
[  151.589823][ T7660]        dqget+0x7b1/0xf10
[  151.591655][ T7660]        __dquot_initialize+0x3b3/0xcb0
[  151.593893][ T7660]        ocfs2_get_init_inode+0x13b/0x1b0
[  151.596154][ T7660]        ocfs2_mknod+0x863/0x2050
[  151.598432][ T7660]        ocfs2_mkdir+0x191/0x440
[  151.600820][ T7660]        vfs_mkdir+0x306/0x510
[  151.602813][ T7660]        do_mkdirat+0x247/0x590
[  151.604959][ T7660]        __x64_sys_mkdirat+0x87/0xa0
[  151.607352][ T7660]        do_syscall_64+0xfa/0x3b0
[  151.609526][ T7660]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.612050][ T7660] 
[  151.612050][ T7660] -> #5 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[  151.616173][ T7660]        lock_acquire+0x120/0x360
[  151.618122][ T7660]        down_write+0x96/0x1f0
[  151.620050][ T7660]        ocfs2_lock_global_qf+0x1ca/0x270
[  151.622573][ T7660]        ocfs2_acquire_dquot+0x2b0/0xb30
[  151.624864][ T7660]        dqget+0x7b1/0xf10
[  151.626646][ T7660]        __dquot_initialize+0x3b3/0xcb0
[  151.629052][ T7660]        ocfs2_get_init_inode+0x13b/0x1b0
[  151.631333][ T7660]        ocfs2_mknod+0x863/0x2050
[  151.633181][ T7660]        ocfs2_mkdir+0x191/0x440
[  151.635215][ T7660]        vfs_mkdir+0x306/0x510
[  151.637222][ T7660]        do_mkdirat+0x247/0x590
[  151.639153][ T7660]        __x64_sys_mkdirat+0x87/0xa0
[  151.641300][ T7660]        do_syscall_64+0xfa/0x3b0
[  151.643369][ T7660]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.645691][ T7660] 
[  151.645691][ T7660] -> #4 (&dquot->dq_lock){+.+.}-{4:4}:
[  151.648642][ T7660]        lock_acquire+0x120/0x360
[  151.650681][ T7660]        __mutex_lock+0x187/0x1350
[  151.652830][ T7660]        dqget+0x72a/0xf10
[  151.654705][ T7660]        dquot_transfer+0x4b8/0x6d0
[  151.656790][ T7660]        ext4_setattr+0x865/0x1bc0
[  151.658842][ T7660]        notify_change+0xb36/0xe40
[  151.660866][ T7660]        chown_common+0x40c/0x5c0
[  151.662731][ T7660]        do_fchownat+0x161/0x270
[  151.664579][ T7660]        __x64_sys_lchown+0x85/0xa0
[  151.666549][ T7660]        do_syscall_64+0xfa/0x3b0
[  151.668619][ T7660]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.671232][ T7660] 
[  151.671232][ T7660] -> #3 (&ei->xattr_sem){++++}-{4:4}:
[  151.673812][ T7660]        lock_acquire+0x120/0x360
[  151.675912][ T7660]        down_read+0x46/0x2e0
[  151.677678][ T7660]        ext4_setattr+0x855/0x1bc0
[  151.679217][ T7660]        notify_change+0xb36/0xe40
[  151.681206][ T7660]        chown_common+0x40c/0x5c0
[  151.683147][ T7660]        do_fchownat+0x161/0x270
[  151.685040][ T7660]        __x64_sys_chown+0x82/0xa0
[  151.687037][ T7660]        do_syscall_64+0xfa/0x3b0
[  151.689058][ T7660]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.691706][ T7660] 
[  151.691706][ T7660] -> #2 (jbd2_handle){++++}-{0:0}:
[  151.694883][ T7660]        lock_acquire+0x120/0x360
[  151.696885][ T7660]        start_this_handle+0x1fa7/0x21c0
[  151.699030][ T7660]        jbd2__journal_start+0x2c1/0x5b0
[  151.701249][ T7660]        jbd2_journal_start+0x2a/0x40
[  151.703439][ T7660]        ocfs2_start_trans+0x376/0x6d0
[  151.706172][ T7660]        ocfs2_modify_bh+0xe8/0x470
[  151.708492][ T7660]        ocfs2_local_read_info+0x1465/0x17e0
[  151.711093][ T7660]        dquot_load_quota_sb+0x791/0xbd0
[  151.713411][ T7660]        dquot_load_quota_inode+0x2e1/0x5d0
[  151.715716][ T7660]        ocfs2_enable_quotas+0x1c6/0x450
[  151.717963][ T7660]        ocfs2_fill_super+0x50fe/0x63c0
[  151.720104][ T7660]        get_tree_bdev_flags+0x40e/0x4d0
[  151.722894][ T7660]        vfs_get_tree+0x92/0x2b0
[  151.724982][ T7660]        do_new_mount+0x2a2/0x9e0
[  151.727013][ T7660]        __se_sys_mount+0x317/0x410
[  151.729064][ T7660]        do_syscall_64+0xfa/0x3b0
[  151.730927][ T7660]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.734210][ T7660] 
[  151.734210][ T7660] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  151.737813][ T7660]        lock_acquire+0x120/0x360
[  151.740100][ T7660]        down_read+0x46/0x2e0
[  151.742230][ T7660]        ocfs2_start_trans+0x36a/0x6d0
[  151.744548][ T7660]        ocfs2_modify_bh+0xe8/0x470
[  151.746633][ T7660]        ocfs2_local_read_info+0x1465/0x17e0
[  151.748936][ T7660]        dquot_load_quota_sb+0x791/0xbd0
[  151.751009][ T7660]        dquot_load_quota_inode+0x2e1/0x5d0
[  151.753228][ T7660]        ocfs2_enable_quotas+0x1c6/0x450
[  151.755423][ T7660]        ocfs2_fill_super+0x50fe/0x63c0
[  151.757928][ T7660]        get_tree_bdev_flags+0x40e/0x4d0
[  151.760082][ T7660]        vfs_get_tree+0x92/0x2b0
[  151.762083][ T7660]        do_new_mount+0x2a2/0x9e0
[  151.764033][ T7660]        __se_sys_mount+0x317/0x410
[  151.765976][ T7660]        do_syscall_64+0xfa/0x3b0
[  151.768002][ T7660]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.770673][ T7660] 
[  151.770673][ T7660] -> #0 (sb_internal#4){.+.+}-{0:0}:
[  151.773721][ T7660]        validate_chain+0xb9b/0x2140
[  151.775808][ T7660]        __lock_acquire+0xab9/0xd20
[  151.777916][ T7660]        lock_acquire+0x120/0x360
[  151.780214][ T7660]        ocfs2_start_trans+0x26b/0x6d0
[  151.782759][ T7660]        ocfs2_acquire_dquot+0x455/0xb30
[  151.784992][ T7660]        dqget+0x7b1/0xf10
[  151.786907][ T7660]        __dquot_initialize+0x3b3/0xcb0
[  151.789008][ T7660]        ocfs2_get_init_inode+0x13b/0x1b0
[  151.791128][ T7660]        ocfs2_mknod+0x863/0x2050
[  151.793326][ T7660]        ocfs2_mkdir+0x191/0x440
[  151.795854][ T7660]        vfs_mkdir+0x306/0x510
[  151.797934][ T7660]        do_mkdirat+0x247/0x590
[  151.800101][ T7660]        __x64_sys_mkdirat+0x87/0xa0
[  151.802407][ T7660]        do_syscall_64+0xfa/0x3b0
[  151.804716][ T7660]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.807746][ T7660] 
[  151.807746][ T7660] other info that might help us debug this:
[  151.807746][ T7660] 
[  151.811817][ T7660] Chain exists of:
[  151.811817][ T7660]   sb_internal#4 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key
[  151.811817][ T7660] 
[  151.818380][ T7660]  Possible unsafe locking scenario:
[  151.818380][ T7660] 
[  151.821327][ T7660]        CPU0                    CPU1
[  151.823679][ T7660]        ----                    ----
[  151.826010][ T7660]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  151.828871][ T7660]                                lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]);
[  151.833022][ T7660]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  151.836192][ T7660]   rlock(sb_internal#4);
[  151.837928][ T7660] 
[  151.837928][ T7660]  *** DEADLOCK ***
[  151.837928][ T7660] 
[  151.841003][ T7660] 6 locks held by syz.2.655/7660:
[  151.843033][ T7660]  #0: ffff88802938a428 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  151.846502][ T7660]  #1: ffff8881037a9840 (&type->i_mutex_dir_key#18/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0
[  151.850902][ T7660]  #2: ffff88801ddb09c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  151.856428][ T7660]  #3: ffff888113bb80a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x2a3/0xb30
[  151.860195][ T7660]  #4: ffff8881037ab540 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1ca/0x270
[  151.864964][ T7660]  #5: ffff8881037ab1e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  151.869438][ T7660] 
[  151.869438][ T7660] stack backtrace:
[  151.871800][ T7660] CPU: 1 UID: 0 PID: 7660 Comm: syz.2.655 Not tainted syzkaller #0 PREEMPT(full) 
[  151.871819][ T7660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.871830][ T7660] Call Trace:
[  151.871838][ T7660]  <TASK>
[  151.871846][ T7660]  dump_stack_lvl+0x189/0x250
[  151.871869][ T7660]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.871886][ T7660]  ? __pfx__printk+0x10/0x10
[  151.871906][ T7660]  ? print_lock_name+0xde/0x100
[  151.871925][ T7660]  print_circular_bug+0x2ee/0x310
[  151.871943][ T7660]  check_noncircular+0x134/0x160
[  151.871960][ T7660]  validate_chain+0xb9b/0x2140
[  151.871994][ T7660]  __lock_acquire+0xab9/0xd20
[  151.872017][ T7660]  ? ocfs2_acquire_dquot+0x455/0xb30
[  151.872035][ T7660]  lock_acquire+0x120/0x360
[  151.872052][ T7660]  ? ocfs2_acquire_dquot+0x455/0xb30
[  151.872069][ T7660]  ? do_raw_spin_unlock+0x4d/0x240
[  151.872084][ T7660]  ocfs2_start_trans+0x26b/0x6d0
[  151.872099][ T7660]  ? ocfs2_acquire_dquot+0x455/0xb30
[  151.872117][ T7660]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  151.872132][ T7660]  ? do_raw_spin_unlock+0x4d/0x240
[  151.872148][ T7660]  ? _raw_spin_unlock+0x28/0x50
[  151.872169][ T7660]  ? ocfs2_qinfo_unlock+0x121/0x150
[  151.872186][ T7660]  ocfs2_acquire_dquot+0x455/0xb30
[  151.872207][ T7660]  ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[  151.872226][ T7660]  dqget+0x7b1/0xf10
[  151.872242][ T7660]  __dquot_initialize+0x3b3/0xcb0
[  151.872258][ T7660]  ? __pfx___dquot_initialize+0x10/0x10
[  151.872272][ T7660]  ? do_raw_spin_unlock+0x4d/0x240
[  151.872287][ T7660]  ? from_vfsgid+0x72/0xa0
[  151.872331][ T7660]  ? inode_init_owner+0x1ee/0x3a0
[  151.872350][ T7660]  ocfs2_get_init_inode+0x13b/0x1b0
[  151.872364][ T7660]  ? __pfx_ocfs2_get_init_inode+0x10/0x10
[  151.872380][ T7660]  ocfs2_mknod+0x863/0x2050
[  151.872398][ T7660]  ? __pfx_ocfs2_mknod+0x10/0x10
[  151.872411][ T7660]  ? do_raw_spin_unlock+0x4d/0x240
[  151.872428][ T7660]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  151.872448][ T7660]  ? __lock_acquire+0xab9/0xd20
[  151.872473][ T7660]  ? __lock_acquire+0xab9/0xd20
[  151.872493][ T7660]  ? do_raw_spin_lock+0x121/0x290
[  151.872511][ T7660]  ? do_raw_spin_unlock+0x4d/0x240
[  151.872528][ T7660]  ? put_pid+0xe9/0x130
[  151.872543][ T7660]  ocfs2_mkdir+0x191/0x440
[  151.872557][ T7660]  ? __pfx_from_kgid+0x10/0x10
[  151.872573][ T7660]  ? apparmor_path_mkdir+0x1a7/0x220
[  151.872590][ T7660]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  151.872601][ T7660]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  151.872612][ T7660]  ? inode_permission+0x149/0x470
[  151.872622][ T7660]  ? __pfx_ocfs2_permission+0x10/0x10
[  151.872632][ T7660]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  151.872646][ T7660]  vfs_mkdir+0x306/0x510
[  151.872663][ T7660]  do_mkdirat+0x247/0x590
[  151.872677][ T7660]  ? __pfx_do_mkdirat+0x10/0x10
[  151.872692][ T7660]  ? getname_flags+0x1e5/0x540
[  151.872706][ T7660]  __x64_sys_mkdirat+0x87/0xa0
[  151.872723][ T7660]  do_syscall_64+0xfa/0x3b0
[  151.872751][ T7660]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.872765][ T7660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.872781][ T7660]  ? exc_page_fault+0x9f/0xf0
[  151.872795][ T7660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.872810][ T7660] RIP: 0033:0x7f184418d417
[  151.872826][ T7660] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.872840][ T7660] RSP: 002b:00007f18423f5e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  151.872855][ T7660] RAX: ffffffffffffffda RBX: 00007f18423f5ef0 RCX: 00007f184418d417
[  151.872866][ T7660] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c
[  151.872876][ T7660] RBP: 0000000000000000 R08: 0000200000000240 R09: 0000000000000000
[  151.872885][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100
[  151.872894][ T7660] R13: 00007f18423f5eb0 R14: 0000000000000000 R15: 0000000000000000
[  151.872909][ T7660]  </TASK>
[  151.874490][ T7685] loop0: detected capacity change from 0 to 40427
[  151.998338][   T33] audit: type=1800 audit(1757958936.815:14): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.655" name="file1" dev="loop2" ino=16979 res=0 errno=0
[  152.067436][ T7685] F2FS-fs (loop0): Image doesn't support compression
[  152.070069][ T7685] F2FS-fs (loop0): build fault injection rate: 690
[  152.078708][ T7685] F2FS-fs (loop0): invalid crc value
[  152.133335][ T7685] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  152.137077][ T7685] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  152.212864][ T5953] ocfs2: Unmounting device (7,2) on (node local)

VM DIAGNOSIS:
17:55:36  Registers:
info registers vcpu 0

CPU#0
RAX=97c00599a04e5c00 RBX=ffff88810822b980 RCX=0000000000000002 RDX=ffff88810822b980
RSI=00000000000000a2 RDI=ffffffff8be2bd00 RBP=00000000000000a2 RSP=ffffc90002a9f9e0
R8 =ffffc90002a9fad7 R9 =0000000000000000 R10=ffffc90002a9faa0 R11=fffff52000553f5b
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff8be2bd00 R15=0000000000000000
RIP=ffffffff8191b5b0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00100
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00100
FS =0000 00007f51ffda26c0 ffffffff 00c00100
GS =0000 ffff8880b8615000 ffffffff 00c00100
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000246030 CR3=0000000113f1e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c59e ffffffff8133c59e
XMM02=00007f51ff1a7498 ffffffff8133c59e XMM03=00007f51ff1a74a8 00007f51ff1a74a0
XMM04=00007f51ffd0d100 00007f51ff1a7460 XMM05=00007f51ff1a7478 00007f51ff1a74c0
XMM06=00007f51ff1a74b8 00007f51ff1a74b0 XMM07=00007f51ff1a74a8 00007f51ff1a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f51ff012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003554 RDI=0000000000003555 RBP=00000000000003f8 RSP=ffffc90002aaea30
R8 =ffff88801fd58237 R9 =1ffff11003fab046 R10=dffffc0000000000 R11=ffffffff854fae30
R12=dffffc0000000000 R13=ffffffff99b00905 R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854faeac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f18423f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f12c7dbd000 CR3=000000003874e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f1844212ee7 XMM09=0000000000000000 00007f1844212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
